{"type": "bundle", "id": "bundle--66590eb9-5408-46ed-bbf2-fbf2a5c4e4f6", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--377da949-dc8b-4606-bb44-aa8e6636dd3a", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3", "name": "Reverse Proxy (Perth)", "latitude": -31.9505, "longitude": 115.8605, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--373c33f7-e326-4fda-a204-6048ac52bd43", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--a9d16746-9f42-43c3-9b86-4f432481b400", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--009a218f-0a95-4382-8c32-6f2ec171b64a", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--d6fbbf5c-f562-4f91-a79d-5316c29b6f52", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--103dad90-9f59-4712-aa0a-f3c00faf5a0f", "relationship_type": "located-at", "source_ref": "infrastructure--d6fbbf5c-f562-4f91-a79d-5316c29b6f52", "target_ref": "location--377da949-dc8b-4606-bb44-aa8e6636dd3a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--963ed623-02a3-4d6c-bb49-d9160d0dd02c", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--eadff763-98ff-41ac-93eb-7b071162d185", "name": "Reverse Proxy (Perth)", "infrastructure_types": ["firewall"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f208493-ef11-4728-8a57-dbb0b6ae5a84", "relationship_type": "located-at", "source_ref": "infrastructure--eadff763-98ff-41ac-93eb-7b071162d185", "target_ref": "location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--203e2937-0791-4f7f-9288-0506a9e4a10c", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14222635-6fcd-4f6f-981a-0880111ac0da", "relationship_type": "located-at", "source_ref": "infrastructure--203e2937-0791-4f7f-9288-0506a9e4a10c", "target_ref": "location--373c33f7-e326-4fda-a204-6048ac52bd43", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--79f587a1-1e4c-4938-a186-241bc594d051", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c305081c-d480-4654-98fc-44c8251a5c73", "relationship_type": "located-at", "source_ref": "infrastructure--79f587a1-1e4c-4938-a186-241bc594d051", "target_ref": "location--a9d16746-9f42-43c3-9b86-4f432481b400", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--8c2d939e-e4ae-4ad7-8b59-9e6939f117d3", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--33b94e6e-8bda-4d2f-bff3-a39b3d5e3187", "name": "CVE-2019-0193", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--0bd3e549-ecf6-4a17-8378-45dba1533e77", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--144eb3b7-226c-48d1-84fc-614d19a08ee3", "name": "CVE-2021-21985", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--689dc27c-ebc6-4b07-b6b7-5b76d64f0399", "name": "CVE-2021-22005", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--04b30a2c-731a-40e6-b839-cff8952dd34d", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--ee0b9713-dd37-40db-b20a-9b357e4caf4a", "name": "CVE-2021-34473", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--057f8879-e1f0-479d-b6d5-eab7b39d4678", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--936c41ea-996c-4d52-8311-0cce370449fb", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--ad4e7fd8-fa82-42c9-b9f0-b3e45fb74e42", "name": "CVE-2022-22947", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--2f3c530c-f3ae-4594-a59f-18f111f1c5c1", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--0d21ae39-ed83-4196-9d43-30a823f856c0", "name": "CVE-2026-9198", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198", "external_id": "CVE-2026-9198"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--de37a587-ea6e-4f07-8cd6-ebe65a9e79ef", "name": "Network Service Scanning", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1046/", "external_id": "T1046"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a841d696-cb24-420b-9d1a-d7f4149837fb", "name": "Exploit Public-Facing Application", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1190/", "external_id": "T1190"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--bf47a23b-89fe-4708-a316-3b190265bffc", "name": "Credentials in Files", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/001/", "external_id": "T1552.001"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "name": "Cloud Instance Metadata API", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/005/", "external_id": "T1552.005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1259d7-1a05-4142-b89f-4bfef815d10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.168.75.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a158f8-0085-4d8a-966d-74d3e58a0ec9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.178.209.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22489b5-2f68-4883-998f-c572be158c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.188.26.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9621e4-00ee-4855-bb51-7ef7d8f6301c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046c0794-ae59-43fd-88e9-0ba4b365819f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa58be2-7731-4c1c-92e6-a2954a386d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.54.28.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56864b3c-9cec-4b1b-8629-7b9608601bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebc2b4b-581c-4c21-9d74-fa6c6e87b67b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.247.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95458625-99c1-4ef3-8bc8-0259b45cb77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.26.102.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46576548-5a4c-40ae-8e98-8ff910a26057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb562c24-bd5c-4f62-88c7-db4cd186be0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8607422-a037-419c-b476-3c63495ea241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3991b05c-c216-4b42-98a3-b9630fbc17a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3274e6f7-50fc-4cf7-a9a2-61b3ed742d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fe90d5-c047-4ef4-82b8-b3d47caab9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e821c81e-a753-447a-8e6c-2599f402233a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884ca849-2a5f-4116-88be-abe9955a3a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc5a008-dac9-40e7-a7a3-493e8b6a5bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a8f209-e0a3-4b5c-8931-a980107dd695", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4b4559-17fb-4102-a7fe-e8123c40f681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d1af7f-4e68-4e76-a72e-b131fc188535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995924a8-a8a3-4f12-8161-ebdfc6f44cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fd6fea-2591-41fa-aa85-0ece203a309f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b85869e-a26f-4034-9ccc-c0155a38db9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f305f3-e0d2-4583-87ba-16ec24f01ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26f79ed-c04f-4e62-b849-968c3ec4e015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6185364f-cadb-40b1-b109-1bb8717ac2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3d74e4-1a51-4256-839c-035e72e98494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06a8888-d0e7-453b-9f9b-3a944755ab73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6918e289-b991-43bd-9659-8602fab32355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83cfb5f8-44b8-45ff-b2b0-3d78c492514e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bfd4ee-a15a-421a-a3d3-21bde3bf73db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.42.97.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113c62ed-8510-431b-bacf-b1379acf77af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d17d113-a175-477b-a9dc-c0a19231e5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422ed32b-d43b-4247-9730-0e549a5c31d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.195.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f719712-8091-480a-a46e-878be9e1db7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.168.37.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa55f27-3b80-4bef-9042-9d7bad645e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fe32db-4d90-4e10-a7bf-6f35db83a2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eac0fac-a836-45e8-87c8-5ed1efe3b194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57fee29-f5e1-4995-952f-a8ddd8141268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5133f952-0f4f-4c07-9909-380a41521d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba8a06c-7227-43d8-a720-fc32c75f0fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a98d2c-cada-4089-8317-8e3fcf3e7b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0dac5f-e600-413b-92f1-a59d82669e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d819562-94e2-49b1-aef4-a71c6c3734ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b342059-1c15-4879-97da-7a6c8e9b8106", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.113.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af87cae-bdeb-489e-ac40-f6f5c8fef9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cae339-9295-47f7-a938-41fff87b9aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20dd0d35-4513-4af1-a7ea-b268d69c09c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77354c84-39ca-4ef0-9364-c17636674d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf74edbf-8e6b-4063-a88e-3367a7b485d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7cd92b-a414-4c09-af16-2bc7a8ed8f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.117.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9941a39-67a7-43e2-9ec2-fc4f1bd1cd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762befbb-ae3a-4496-9ee7-2e3d32fd00e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f37f5a3-f861-4234-a86e-ad4412fe4566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dddac59-ab39-4b65-9e73-e6708eb7eabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f3ed77-b5e4-4e3c-9ad7-ba57593e6fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21aed8c0-e838-4e37-b232-2cd27e0b5a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c724fb31-8947-4a24-9d93-886e54ace812", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147727a6-13f1-46f6-a445-90214e3560fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.75.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705dd12f-993e-444c-a524-8e208dad5037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.142.99.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4ebd9b-b4d6-4362-829c-c921f80daf4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.75.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eef4767-f418-4e44-b654-5aa2ffdb2d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.219.27.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962d0840-234a-4830-9956-6a6b8cd9201f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc32f053-3338-4fd3-afe5-a6f68cf9100a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd423df-2501-46c5-bcde-5718612b3370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.33.154.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67e8698-b3ee-421a-a4a7-b06680f11d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.54.243.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1291f6-4dac-4e9a-9e79-e238eab13f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.68.86.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a610f1-0845-4a18-ac25-6bed5e14367e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.90.79.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbae2f36-a33f-49e1-9471-ffe7ed10bfef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8a1ceb-c503-41cb-9a13-2bc97e173c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e45fe1c-2edf-46b8-bf1e-b32eae8a447d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.29.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bc7477-fc17-437a-9bae-32ab9cf5c8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f163b5a-b253-4758-93c6-7a7a84a87a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.125.175.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e396d53d-9119-4005-96f9-6fbc7b41bc46", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.126.161.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9e3f79-4506-491c-965d-171f0d1cf47d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.236.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1fe69a-045d-49fa-b18a-8e59c85bbda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.133.61.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72575f8a-f69a-4f95-b3bd-5162e07f4784", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.138.171.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b98be49-0bb9-49a7-ba76-97f05b4071ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3015990f-090d-4899-add5-514c958aa34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7ff968-0a9d-424a-bdd5-ee7135487fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17af217d-f113-4656-afa8-d41548e7aed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48ce318-f3dc-4eb2-b03f-4b4f836567b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cffa435-8f1b-4e22-8a5f-e89e2e479a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e8c10a-a274-4134-89aa-a86e0dd0f825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c2bb83-ee25-4b97-ba1d-07126f7efd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.155.197.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254c66fb-c493-452c-83cb-81da5e22d0ed", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.156.103.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9844a3-45dc-4ea6-b92f-ff556551d57f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.159.51.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bc600e-bc52-4342-abfb-62deab9f7531", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.159.85.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3887c11b-f9c4-43cd-8669-5adbd1a4fd51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.162.210.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18c3736-18a6-4c69-9f96-c40f62ec0452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.168.190.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51197019-e762-40ae-9dca-d4a5dd486725", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.170.21.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5516521-dffb-4cd7-ab20-27c354f3444e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6f6852-851b-4f0c-8e79-e4611d42fc8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.121.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4240ad55-874f-430e-84ea-0e0fcff05a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6058154e-3a99-4706-b970-5ca2fdae5103", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.177.78.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada97d82-2f77-4080-aee3-ee7693df7960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.178.234.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84695f5c-b425-4e43-a91b-40df3928381d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.178.235.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0217057-0898-45f7-a438-b3842000f2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.124.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da546ec3-cda3-444f-acd0-1a6e8d92bed2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.134.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e7ec6d-d4d6-40f7-bb8f-0501ae0f01ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.202.55.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22448901-1c64-4e21-8539-01365a239727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a287d28-6d90-462c-9f00-c964ad9f37a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beaf69aa-2f57-4288-a81e-320a0518643b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f141e533-68fc-47aa-bf9e-b3030428afce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9825d7e-973c-48b1-a6f0-35a45f98a1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.229.125.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10687f5e-fcd4-44bc-ad27-8e53ab32d6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.233.24.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283fded1-7804-4d89-a017-40602b03d9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201da164-9d0f-4069-a30f-19df7ee275b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecb89d2-94b8-4953-ab29-e273a87517f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21396f7d-ef09-49dd-acb4-9ffa3feb4412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.239.184.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2bf043-1e22-4cef-8da0-15b41a820091", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.154.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f68de9-ef41-4b83-80ed-b72a4907d34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.221.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69263597-611e-479c-81bd-365333ed045f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.82.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b709c9-4598-4b4a-85d9-1207244f9c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59432d2f-9a31-4f98-b113-0120d8ddcaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ce4888-6266-4bf5-a5a3-e2760629c136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5fa590-7bd5-4fcd-a189-060daef9da18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e53f378-36e7-4e6a-8e48-a90fed1e3f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e3119c-3fe9-4c8d-8df4-bb95290d006f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4aa473-d1cf-4f12-ab35-cccd19ae69ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb880761-7777-4d55-978b-d30e67dbcdd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5f0d5e-3c82-4fcf-b93e-c6607328128b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fddf0d-f7cb-406f-b3b8-65ab03cedcc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e069b92c-e6db-49bd-a3b2-6854a235ccd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5a0ad0-561d-4630-9b1d-ce81b61691f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991e6786-12d5-45ec-9292-96e0bb267032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20864bff-6e11-4b0f-bd06-3d11d51816da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbde90a-e92f-4104-8914-8801acd75061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a397a1c-2698-42fe-9be9-7145a2120648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b317aa-8128-4df8-a99f-d5350e7552ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac8d89c-6be3-4852-a603-27e5c2df23d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a3859b-a377-4e8f-8e62-18e58e3aa564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a821cbd-b776-4757-94bb-a371fc467ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd0bce4-c265-4fb0-ab4a-c576ddcf2a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7519d6a-9792-4d12-89b7-ffeb959855b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62200ae5-2157-44d7-a308-46c61ff1f26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8606444e-efb8-419c-8d97-ec8f00e35111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8019eb52-a81a-4fb3-bbba-10f8ef2d2007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d0b9a4-6319-4be2-a827-2b6ad4c916e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80b1676-3d0b-407d-86ed-428e813aea06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbe4e95-6b23-4ae4-88c9-88bc155bac6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b771eb-abfb-4b0c-aff5-cd48243051b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c61b57b-0e86-4e51-8789-48afb065d7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9828d870-8732-40ed-874b-5831ed276b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6369050-71c7-42c9-bfe9-2ea242fa6400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0ae921-dccc-48ff-a970-9ab048cb1438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3009d6b9-2ac9-4cb3-8274-22e276cec960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96f089e-e080-4ef7-a60f-7329aca1c554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f61e18-3798-4143-bf94-2d8bf8eb917b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a61fab-3d87-43b6-a809-50d539e6b439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab7989f-9768-4e02-8067-8c3de5442e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62d2242-38d4-482c-bf96-afe7dbb41887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac2eba4-51ed-435f-b4a4-1c2539d375b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9313e3-fe41-499e-b8f0-be6f80d54ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7a9edf-34f1-486c-b44d-cc1f89ba9286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a488ca-4209-466f-8207-d9148cde2f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bfd431-2815-4c11-8103-485d3598d59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bce2465-39c0-4955-86cb-927e0639e608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09dcaa1b-c6c4-4a25-ad00-65c639a8b732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712de9ae-e291-4f88-9098-05938130b53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776ee932-fc57-49bc-83d6-a64d50a85ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edd1a94-f88b-41ab-a39c-9224f68448fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e5ccd1-5a9d-4867-ab74-cc2f8cb927f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c07f10b-dbce-4a4b-accf-8dff0cfb9a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301b27ea-b005-42e8-84c2-78266aad1925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b89f61e-d935-40f2-90c4-7a282c92c62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd221a8-91d9-4615-aa60-78c24b720437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a311d5e3-b4fa-4f0a-b13e-9dee51e93ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c694ae89-80db-4529-9f5d-dc1b201275f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aefee57-c7e0-4cbd-9a51-2e8af19e3a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7772e4b-ba50-4b79-b797-41f10dc5de9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787137a7-669f-4d36-ae47-8d0a383c3565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7373c49a-35c6-4be8-8a34-17ea2108cbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74970137-6f43-4315-ba7e-d1fe99446340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4743c82-3685-4131-924f-d7ad730e6e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.26.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8211704-c1af-47f9-8b83-53ca5a6a804c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548c9a7f-84cb-4e04-81df-56ddfb583785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d7db96-4efe-4bce-bbdd-b7f46baa5468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cffb452-0006-4425-b34b-676069d54035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985f7ac3-dabd-45c5-adcd-a7763e1196fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc8b7b3-0ed7-44fb-955c-9d64f4663cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8abb65b-47f9-4248-a2f1-155c090525af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5a0109-f9d2-49c4-a1b3-e537b67bc49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a849e9-2370-4c8d-8bba-45ccf54e49a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e860c926-1b68-4ba9-a1bc-d15b5fd120c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4ca92a-9cd2-40eb-91e0-e9daae063307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee72b78-d142-4d3f-81dd-1300f543fdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5eb444-ab7a-407f-8546-b0ca2c110109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1cf4799-0e5c-408c-a8d7-a82440e35e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27897efe-3e12-4040-a9d9-65c2e2d8aa96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2bc590-60a7-46d3-b563-d42862ed99fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a59bfca-2be4-4e0f-80a5-e3989ef22e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727c329f-8d84-4415-af5a-3cc77a85ce2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23de335d-d11a-48ca-b69d-b6ab8936e2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb68dea-b01b-44b5-a978-e5e7c3fe6612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f715fa-3ded-4c97-a614-0cf6c11750df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e38106-557b-4535-aa65-99719385c03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92554c34-8f52-407b-9b83-2f3a8fc0d14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1b2e00-b731-4554-a573-4f91323ca375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c28f5f-5360-4f9d-9553-bd6fce750baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48aad1c9-bae7-4c0e-a1b0-69bd61f252d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b75492-9c17-45a9-a306-fe736d2917fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0a80c7-b5aa-447d-bba0-41488e17aa59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eee9e0a-e6aa-4ca5-b65c-a27df7bb21d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a61eca-2886-4e35-b187-b1473c7687e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60168870-680c-4efe-bda1-e3a80f3f1f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131d8afb-6d33-4305-b526-675edf471b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d29add4-0553-4c90-b886-40fe1361245c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ffa5b9-255f-4af3-8342-b781533a7b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882c5b1d-a7ee-4806-bd99-b07f307afa86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3472a5a9-db37-4f70-bf68-214b1279c9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f82b894-8dd1-46f8-a490-9524d5c0d674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acae3ee-4e8a-4a3c-801d-044684480965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb49e77-8c36-4390-988a-a31cdad2a976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a45c05b-d0e7-4f16-91a4-914a3787cf0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2891ada3-65ed-4f42-873f-75d76263390f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d40d05f-9420-4f5b-8b33-38626ff76c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965ea2b1-5981-410e-9e30-97cbfab97ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eafec2e-a301-4378-aa73-de1fffad5977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd514569-1887-4e5a-ae39-6d045142f749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31101928-0c33-4e63-84a1-8e324e6d83be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf28def1-de3f-4a51-bf7d-bd1b372339aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0433e04-1e85-40f9-a9d2-07dc4a80c9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9599f49-a99d-4d36-aa30-b0aa01587b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4fdb1e-059d-49a2-9ddc-f504f3a55697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11596f0e-e6b9-4f51-8f19-ae85e89d8e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184e9cc2-5099-42fa-b663-fadd256f0568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce782466-a00f-4b00-a2de-0a1d00f5a133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f40638-42c5-4f5e-a060-58c633f1899f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9734a44-ae3f-489d-b817-5f3c1829b01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892f896b-185b-4d7d-b575-88d355ba8a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6690e775-b672-4ca4-969c-d51cba947d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8f346b-c08d-4aeb-8148-756b61ac97ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882db528-8ac7-47ed-9b21-1887b52daba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef31b955-54db-41a7-ba38-acf80197b180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea63dca6-85d2-4557-841d-cda78a2dbfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.29.27.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbc8078-2a71-4f1b-9e9f-debf2926714c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.66.148.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141aa766-9aeb-49a5-8f7f-b427b48fc339", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.7.205.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647234d2-bab1-4031-af6f-7a460afb6fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a4ebd7-d390-41b4-89aa-9fca8b67fad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08434f64-78be-4ffa-a986-d727b6c0da5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1ff4fa-2c33-4e4b-9270-cae271a9f27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.0']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4311c4-0009-48a8-999d-29d0885e41d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03f78d0-6d9c-4b98-9954-eb57d675b03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b73d95-b0ca-4aae-860b-acce4bc1bb96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2409399f-ee1c-460b-8e72-c58b91f869bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a51d913-34f1-466c-ae28-8295f548bd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0105a363-bc6b-4716-89f8-7b6715dad102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41152907-e83e-41b7-8f3f-9f41715aed0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fd390c-4ac3-4beb-9a91-c70056c6be2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b53de52-9ddf-44ec-978a-41f1e1606b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a82279-88c5-4b11-8af6-c0f7c3b2d350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86000682-d49c-40c8-b341-f95d49af0b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361fefa4-97a8-41fe-bf72-560c2f3cb0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cf3f6b-ba29-4f71-b522-6a8e70c95fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490ae09b-b919-46dd-9c70-886ea07c10e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de090bd7-562a-453d-85c3-b1eabe166f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25195fe7-bd74-4cd1-903c-5808a56ded85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cbd8fd-963f-460f-893b-d05eaba2491f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da14c3a-0540-48ae-8d2c-60727649daf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cedc498-ad01-44e4-9595-27e5d21ee7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b82ad0-e6aa-4455-b4eb-ce9d13732d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85b6bf4-d223-41b3-90a5-701dbdea52d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20476a72-4b6c-4b69-bbf9-c359350199bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6355e63-5301-49a2-bb40-40945bf0133b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c15ea98-3be8-4b85-b08f-785d446e923c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb56133c-a215-4a26-aa9a-325545bef91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c359a549-ac08-47bb-a95d-f74f882ce87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3239c005-67ca-4a10-b6af-1eba994211c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859585d3-a885-4f1a-a715-8cf9b899b3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca9beaf-036b-447a-bb25-de35c7780b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8f47ec-d88c-42a9-8c34-20e7e0de5e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715189cb-1c45-48eb-9fe0-8024dd99a65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1fdf1d-42e3-457f-9b5e-bfb84fee707e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9459a83-5496-422c-bfa4-46011a26c3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a699043-2c3b-4c8e-993a-2ba3d48a0907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6960c01-2792-4f5c-8191-8dea2765a1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ce0554-8e09-414e-9c45-3b947adcc863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4397c1a6-2362-4746-ac55-3e11e6065206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46a849f-725a-47a5-aa65-14416cde2d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e8c389-449f-4996-9d05-4241c2d1b852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d767ace-d554-4b41-bda1-fd29b635bcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f70c68-2580-4947-8a7e-da26e763dee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716fabaa-a0e6-42c1-8cc2-2429abd041e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857a01ee-88d6-4f0f-91e7-d29d0afcddef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca441025-6c00-4055-821c-7510dcd6296b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522698f3-ff8a-4356-a8aa-f6545f97cfcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9074c4ec-bdf4-45f1-a9f8-a3a8c6e913e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897f8e26-cfc7-49ed-bba5-f11c9408ee37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4487a5-129b-4d6f-98ec-db8261656c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b7cd32-0652-4665-a99d-03662a5e78fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c68823-e025-43ac-bcb5-018f4b09fa67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56093b03-5187-4ef6-a085-0a8649a04421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7812f0-c9aa-4510-b1d6-bc48421ce382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2e32c3-6cb2-4616-8764-39c932784903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf8ca21-8efc-4781-a810-cdf674d927de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c04314b-3df6-4578-8f9f-cd22b53da9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa04dd4f-48dd-4b61-aa43-d7fdab5c922f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a48c961-4428-4670-b84e-d16d69e3d036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df467ac-a327-48ae-a1f2-7b90ea384128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421e0c22-a408-40fe-875b-f8a0fe515f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14249c8-13ee-4cdf-af05-c6f6655d9b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07e136d-d288-4269-9d94-f5d229ea92fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9129c6ae-609a-4fac-91f3-287739c455c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c282f421-1c0d-4c02-ad19-701ca8b94b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da4cbb0-34b2-4cb8-87a5-6ad0441988a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c29d0c9-e34e-434d-a90b-0414cbe553d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb401eb-f8a5-45f7-bf70-d14e49246790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfbe077-9adc-457e-9c57-e00ff35e7d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f0eb84-563a-4f7a-aebf-9c744fdc7a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3432fee0-eb27-4efe-8844-57768dd985d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be2ae12-172a-495d-8325-41450ab9c4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d9f4bb-3961-4d8a-99ec-03475e7544e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2f9b1c-dc2a-4772-88d8-8c5a7afd4eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63ce4e2-a7cc-4b4a-99f6-9f1cc12bd8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804fdb2f-e206-4576-b2ea-04047ff7526b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0666c288-73f2-4574-b233-d29f7e088b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4861a0f3-aa72-4198-b5de-063c7e19209c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ee8744-2168-4e02-b217-20ff25ff11d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7353eb1-6575-4921-b9b9-e9721fe9ab38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f37439-af5e-471b-b935-eb5fa8a5be39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fba92e6-8fec-4af5-87c6-a3003e2044e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54206bde-92bc-4bc0-b792-a7ab50391d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411d5575-a41b-4884-a9f8-fb16bfa99b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee0d701-3134-4794-b536-5ee490304640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e82206-3d3a-4f94-9241-2a150dfcd6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d45349-b4c9-4e89-b09e-06f500199720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfa6c5c-3573-451f-82b8-d85badfcd681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fef540-6a66-491a-a865-584da31541ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd7fb45-5ded-4204-9230-3d5bd13f6a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90147a2b-a896-4206-9b5c-65d249f2a051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab37a51a-48f6-4d80-a978-5d31200b0550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0866832-e0f7-4c4c-bf22-ab86a7f61559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c813ed9f-1c7c-47ed-b4ce-35c1a4ce2c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4ca8ab-6627-4080-ba00-73b60f9d2037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ab4dd6-9c86-4834-b23a-07d65509ac34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5825883-dc45-47db-b3c0-b05a2a2dcc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148514e6-37a3-472f-9b0e-362afebafde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.0']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3682f4d-200e-4ae9-acbb-fcea9bb431dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a9ec27-e7bc-4425-a174-51a0d1897632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1887ad-b4c8-4c20-b641-89ea4d40da44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136ac42d-3d0b-4fbd-bfca-12532121acb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfcf717-b32f-44da-b8bf-938ef8d5bd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe4c31f-e6aa-48e3-8ccd-f51d83a6968d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c4de00-f457-41d4-b6f7-5780fe1da6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ab93bc-d1c5-4597-ac79-7643c05953cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ec956b-70bf-4df9-8fd9-9e91aaeccd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97135c9d-a5bd-4db2-9946-70c55725a94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7754c1-9c69-4e88-84ed-6aafcc5c350a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5113d22-f810-476b-a264-5bfee1733dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4f4215-5f61-480a-8065-d48908548b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc58105f-a328-45ad-bd93-3599b7582a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebaae80-943b-4fe3-92c2-71b35c027025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f52281f-58f8-4c64-af0f-1195926504b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212c377d-6ab3-4347-aa30-bb3cf45056d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5162fa-0c26-4227-a4a5-93a569ce32e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2bc3997-825d-4f91-b33d-e2f84533f2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24700cca-8724-49e3-852e-a98ca0069fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd35f95-371b-4b7e-8ae7-bc902c802c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86703e3e-17ef-4d16-9d7e-ece4ccfe5725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30462f7-2184-46c9-a0b9-e5da91fa2ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bae4214-37d6-4d6a-b04a-3a7efdffc4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24c52e5-7954-4f7f-b6c7-9ec2e35704b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d32d2f-6f4d-4af8-b011-b303be871fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7aa7285-fbea-4c5a-aab3-e9e70c7da0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee0011a-84e5-43fd-adf9-844c7bb54569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45166133-f838-48b7-ac23-5d039462f449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc499f0-2aad-442f-a881-4123359ca30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea3f8a8-561b-4564-8a22-04d06835049b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117af6cb-7286-41eb-b990-46267e846378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488eab48-1e60-45ac-a2f4-141a9140534f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7174b4ad-3bf2-42ca-9efe-139e18b5c294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff2494b-97e9-482a-bee2-1a9e259ca1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2556d8-23e4-4bb7-bf09-83589be6e185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43f9736-fa90-4cc3-aee9-9ba2f0a6cf31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf3d8fe-125f-4046-b493-4273f627c7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e0a212-a478-4719-b541-a02a422d05be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf63577-454e-489a-acf2-f468764fc239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647d18ea-1269-4e59-b279-27b7337f450f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fd1677-8e74-4361-825d-355a3d621b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f941c72-7bb4-4faf-a5e9-5d3eca8d9682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60627b6d-68a5-44d9-bd44-0725819c52ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785c90cd-f141-432b-9757-313d13d310f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6356da9a-4642-4950-8ba7-b572c5df143a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8b4102-945a-4b0d-890b-23cf1787df80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c75f35-a78d-4f7b-8a7b-d23e886f43fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276205dc-e702-4ed9-9db3-11e8a932597b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407f5b60-7a70-4184-ae52-78cecae5173e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ad380f-50d2-4f8f-b8bb-ebf0d00b3dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f0b8c7-ed23-425f-a463-beca6e7f1145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b2f2ac-d791-407f-9a90-27e75ca9fd97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9297d0f2-082b-4e8b-b877-b6c195675f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509d4ef2-0231-4ec1-87fb-326090082190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c967df90-433f-4d5c-a99a-0a14611e7784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b334204-56be-4228-8634-96c1bb80ab10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917c2467-1aa7-412d-b34c-bab9b962ce43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b793ee2a-f511-4d79-b938-a92cf9e9f535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393a4f76-2bb2-4d6f-b037-1e717a6be878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36a5b3b-09f3-4a49-b0f1-43586d225527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c27a07-0fbb-4f9f-bc8e-ba14a992514e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71afd709-211e-4108-85eb-2a059322c99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2340ca3-7ba9-4743-8df5-48d9bd71dc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9d8930-900c-4e91-87ba-3663a68baa2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d960733-f221-495d-af3e-1d67e493901d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa149de-30c7-4314-a017-e89fa37ab3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dabbfc-1576-43de-a696-e90c74aea94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b85f5c6-b769-4c35-98c9-4d959f0c6471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2291440d-c311-4b35-9ef8-737fe1903d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4987cda4-691d-4bff-bc2a-d8db235fca79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a9254a-e400-4a4f-86db-359f4246f7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1536659d-9029-408a-a665-bc343c308483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccb0a1e-eb30-4147-8152-c7c223ce7cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461085cb-6632-49fb-8753-40cbdee73b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9275ee05-00d8-474c-9a6a-57d8b810a4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1bb2a1-672b-4732-8cc2-76efd87a34af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed8ef76-e1c3-4585-93af-62be08b3f25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bbe4f1-28d8-43a3-b696-cc29262ddf5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dec3d7b-d535-4d36-9e44-ba4cc763e4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6832ebc3-c458-4038-971a-7b1006bf3da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68bdfdc-4ae5-40ce-8220-76c61f0283f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bf19bb-37df-41ab-8e0c-cd382cc50192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aaef619-a0b2-477a-a2cf-5d1ac35cf367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df69afa-2a92-4016-8dab-ea642989a12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5eadb4b-6365-4ca8-8180-f3305acf4660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ae884c-b135-4ee6-8ed5-516d29354e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ff2d1f-213c-4072-92e1-9b8cbfff5896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448ec259-a89f-4198-b18d-455633777de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84201f76-e6c9-4029-b298-5d1b5afa983f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd070dd8-ac5e-4367-9e10-865b2b79947e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a604d74-394c-450f-b3c3-865c885b39fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86458ff9-df75-425e-a760-5d765aa8b14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f018040f-4047-45ea-abab-0fde879a93e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130e83c0-6a8d-441f-89a7-77c8be2798cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a000a2e5-d507-4b02-97d9-372b2732abf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f70215f-11f7-46ee-b813-2e5564403b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200dfaac-15ab-4b69-822b-c1011f79b460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7f3680-7cbc-411b-b720-a11c09cae5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a1ad33-0cfd-4272-955a-4a632fc2ae47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1c7045-a45f-48e4-91a0-d6da8ec302ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1cc4d3-7aa0-4ac2-ac81-cff67195370f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bc2943-756d-4994-b29b-eb40b1c7d749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae48c2cd-427f-49c7-ada7-9386c75fd9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8194e655-92e4-4e7e-8f87-e8de6f3bf84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5c67b5-2d69-4ca1-8079-2d26b9855b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5039cf-a1b6-4cc5-af99-45b68d07821c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960a5da9-da1c-467e-9603-aa5d3a75785b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019f220b-03d3-42bb-8cf1-af3f513e3b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146848a5-1c9d-40af-a2e3-eb1ae51d1acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390a1c32-decf-4344-bb8e-586daf7034ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d7349c-3528-4506-88bc-b7c629e0a2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c4f7c4-ca34-4448-80d7-05a0b01421ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a378c60-9314-4d34-9492-96c051fb03cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948c8f75-d30b-4d3c-a946-94058a304239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f63e5d-f0f2-4a9f-9daf-40954dcdd4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcf39e0-ab48-4860-a048-d1c1882940e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52a4744-6814-4df1-ac89-9cfe796061fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e1848d-1e49-4561-8e0f-74bd45c9e9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4bd0dc-cfc3-4381-a275-dc9871181a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297aab31-3289-4a9c-a888-62ab5f30c686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8d2ecb-0a84-4042-b7c8-abb9d5592cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb6862c-e4d9-4d95-91ec-966c1627b6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940f3cad-0837-4ac7-9db5-554ef435dc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf07f10-9e66-4a43-b05d-7166cedb9e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5bae94-aa30-491c-b687-0029fc19400e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854b9141-4dce-4149-8e45-724137bc3a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4b93f6-68d0-4adc-afef-1d6d6c101295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f1b110-bdc2-481b-b603-51488f036d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b75cdae-52eb-496d-b2ab-a93e42548181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5d35ec-213f-4978-aee3-6c4d474ac7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313b62d1-6f1a-4b29-bcdc-ff855e53b837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f4452e-787b-4742-9911-eb998aa3624e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5252cb-b888-4d20-b8ce-7a3ea7802d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799bec0b-663a-466d-8116-9b7937da442e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936e2a9c-f5de-411d-af0a-a4847a83f5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5393126a-b3d5-4833-b989-e54dba02a0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d132b1c-5258-4537-8d18-282f54e6808e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6035720c-26bf-4f1a-a8fc-12ca7c47b2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbe6732-9fff-492d-8672-3234613c1ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2fae730-cc0d-4fae-a774-c366fedcaf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f152dcdc-5048-4602-8757-ea333e65810a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7fb79e-15ff-4778-99ef-3f285fd07035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5467371d-b327-4ed5-ab4c-88c688002798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6960d025-d037-41eb-aa90-7fb79270550c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb3b3a2-d6fe-4278-904c-c2784e026307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a75aa23-ab0f-4e2a-8891-13f770981b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7a64a7-de5e-49ab-b177-1693f5f31576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced70c26-a9a5-40fa-a71f-342d42245457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3656b00-b416-4b32-ad6e-cffca56e533c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44eb6023-3807-4dcc-aa8d-46847ecb1a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d206df3-89fc-4eb5-80ac-b44e387d9ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a019645f-6353-47bc-8d2c-6c2e17e60659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b035d4-6aa6-4e1e-8f55-aa6cddde1470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d325dc7a-8473-4cba-a0fa-1a1f68ddbb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5e541d-2baf-4e45-83ef-8ff530f7407e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2131b2b2-a3f6-4503-a869-0127f75e7815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c82d6f8-b0cf-440b-90dd-ffb8d73dfa31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c996058-ddd5-4bcc-8667-39d1344e6798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65e5da4-3716-4ba8-98b9-755db4dfaa18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3552e6cb-2585-43ef-9e6d-8c9ac3bd6506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e3d496-e668-4d07-8111-314be206453b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20105ca0-50df-4cfd-b2e1-ac4f670779aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a6684d-f37e-401d-8fb3-eb78b366fdc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e7d955-adb4-4303-a542-6749bce669f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5efb7c6-c3ee-4f4d-8f4a-9ee50fa863bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72b22dc-e6dc-4689-b1d9-68285ee57465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64978d37-a1a2-4555-9739-edf11e3a67ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b74694-1b1e-40ed-9acd-7d83136820fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00be984c-97eb-40b1-8a4a-30456fd2268d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbcda6d-8486-49fa-8933-d306fb9fd509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d45283e-52de-42a8-8439-4f71faa796fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f9df9d-5e0e-460d-9bd0-6c2a8f3bc531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56fdff5-406c-412b-89e8-db759275ceff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8db1fda-3111-4129-8072-fc6ff5c7fa11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e577a7a-28bd-4863-8e30-7b500b0dd1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5681d9-c84f-409d-89df-3b51a455788e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b074fa0-a9b0-4b24-8672-a664d57dc5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77f524c-3ada-4e78-a166-2ce0aefa3749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ac5605-b36e-467b-8ba9-45be3297867d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4a7362-1402-4c50-a201-1d870b8125ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6c93d5-24f8-4b01-ab52-50a73e2ec4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb1df90-94d9-4ccc-bc1e-2ca8b0a226a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268f455f-eb6b-4680-af41-f271766851ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90501edd-859a-4c12-834d-6f6002e4eec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5796b42b-438d-4f78-8e52-5a9edecacdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb799113-8e2a-4723-a1af-2ce7d5981d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4422f1f8-b7b2-4f12-9214-07da25c1a1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c9a4f6-db95-40a0-96d6-0ebeda06712c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee3e1c9-99eb-4bc9-bf38-d39c6f3e7541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5323c693-0b4c-4175-b9d9-24b52077f2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02e4480-7212-4665-936d-f2c56b28bdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba3ef85-27cd-49e9-8d12-6fc9c75d559f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed797689-9c74-4cfe-8602-85de037cc2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664b0912-693a-481f-a1ab-8390c4b2b989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62917e81-bf58-42ff-a707-f0c463719a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843b496e-50f0-422f-a93a-a1a5ab282ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6c211a-0e4d-49ca-b74b-69b376758ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9baa160e-d4a7-45b7-bb75-db000ffcda8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2496e8-e23a-4059-97cc-3bbbc008a53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05078c1f-6c0e-483c-bdf2-1a94eba4dcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfafc2a5-98dc-4ff3-841a-048a79d32429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498e5aa4-1db5-45d7-9629-52becb176085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d85312-e740-41c9-9563-a196a58e61fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9f8a6c-a0cf-499c-86a2-d5e338007a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb72f7c-a14a-4c5e-a98d-4981e6011a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9a3b5f-a2bb-478a-b856-c67e2f5a72e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b29cf3d-6a10-42cf-9874-bace852c7f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925c651e-c577-4e73-9932-9167a9054500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3c04e0-bffc-4bc0-8a1f-4d4ae0860951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2677e89-7c03-4a78-a340-2235f282aec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fe2e22-bd59-4a6a-9d56-80d814384ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c5d502-5ed7-4acc-9a7a-c90ae8fd7b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed69cccf-4834-497a-9f1a-9921d966b81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271c6934-58f7-4b91-b841-a9f4e6cb6f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9ba9c5-5353-4fb8-aab8-5fdf73de4279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b37b14-b768-4372-86f2-88830d771290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cd85eb-ae05-49c8-9f3c-3c8e5591740c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd28adf0-1ff0-4e5d-8ee3-54a32eb760fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2efe53-dbdd-4ca5-8bf0-1047230c76a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79279a39-d844-4d58-96f5-1567b8bbd762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5c85db-3f71-4266-92aa-b7d9d441af79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354b00b3-5a68-408b-817b-f7a137f74c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa4c928-4640-432d-bb51-d613fe3a99dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9b9911-9fd8-40be-9f75-fd9b0e2112b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e65b24-bbb3-44ef-83fd-99fd0029cc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2059e13-6bc5-4b92-a5ff-74671c434f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebde72f2-b5fa-4d00-8da0-90b5e7782880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcf68fb-d8fc-404d-bf4c-8797a5fc3d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cadbbdc-234e-4762-aabd-bb59f6c0bdef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545707da-2e4f-441a-9b7a-a48554a8a1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada1ac0c-a3db-42c5-9108-ed485a395a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d7a2f2-4c87-4cb1-8285-5c8bf2740b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93046ad-d242-4e8e-adce-38ce79e9a5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8216fd0-fd8c-485c-a863-e093fae09588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a49b5e-d8cc-44bb-864e-cb4b5027215f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07eecf1f-d7b1-4454-84d1-6ba5f69c2830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be97165f-af5d-4aae-a1bd-8ad7ba156ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6710295a-96e2-4cb5-88c1-d43051396f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5299944-9924-4d5e-ad65-28039179873c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189e0b9d-d10e-42c6-a06c-2258cb14742f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3f509a-a62e-4599-8008-9f037c221186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d691e32a-fc2a-4384-a18a-8fd1edbbf288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be192480-661b-47ed-9cd8-9bfafce35fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04da9b5-95a5-4293-b2a8-d1394521f469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79275caa-51f4-4ba3-a182-5b7e2c21eec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf00cb8d-e581-4589-bfc7-4f7fddce8fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132437c4-1026-47d4-8074-ef10d242d60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6390eef-3a25-4989-8604-93e62df61c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9523da4-c7e7-42b2-b5c2-1d83de88fd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79ed34f-01a6-4b65-968a-885a65d055be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77aba2f5-fec1-41e1-b0ef-3a9f891bcae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d60a9b-cca4-4f3f-9550-4fcf6bef4ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f772d5-56ed-428a-8adc-018bbb2a20d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9332cf01-cfea-44a3-9acb-5bf8bbd1288d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59b58ac-f579-4f4d-9e12-b56ed0f70102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb9188e-1861-4f4c-8cc0-64edf1d09a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ff98eb-686f-46a4-a3ad-93bfdc71da3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5a611a-e905-47a1-aaad-bd2f9e73962b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ee323e-704f-4060-a368-7fe63eaab045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5ffc0b-7c22-4032-92dc-5313de88682c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82b6cc8-82e0-45fc-abee-96d85100c520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f806c817-6b58-43bc-9126-13e56413086e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4639d1-b39c-4434-9dab-9f6ba026462f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48701089-6cab-4658-90db-fe2bc5b02589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8505c69-642b-43a4-94b2-9c3fd0efd656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ed4b8b-c8f9-457a-9590-8dc2e52769e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bcb51e-1651-4233-bea4-17eb8b962a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fd3f7c-723f-409f-a2be-7cd858ab7bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f43fbba-6712-45d1-9b1c-83b6c86067ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283d540c-a754-4fdb-8fb3-c78647300677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5843092-c0ff-40d1-bd24-e18dad2d396e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11c480b-02f2-442f-ac72-79cccbc75622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393de175-4691-420b-91db-01e113de3669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbd7269-e8d7-4646-8727-2ff67b13aace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ea7f4b-1bf1-4aaf-81a6-2935f400658e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc04c4c-7391-4424-834b-0a087fe76dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb77001-e5a2-4b60-957b-9b6f88ae9b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b5ed00-b0d3-4a19-93a0-621c9ffbe4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224b7b19-f585-4022-9dce-973ef65caa0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5570b4-b8c9-4822-9a88-7021e7d74641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7739d76-3017-4035-b55b-66b5255bc518", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.255.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1ac368-4a46-439b-ba0a-a3b9a99ceba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.36.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6330684-dd08-48a5-b9b1-5af4c2108dab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.86.198.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68671ff6-aaa3-4a26-acdb-0aae42b4bc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.169.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711c9540-69c6-4563-8203-b15ce146d46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.232.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bffc0aa9-7df6-4e90-9c5c-76099f815c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29da30e4-16e2-4af4-854c-27efd7a398d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ebd2d3-e900-48ca-b5af-c078b744c8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae5d5bf-11a4-4697-ba1a-146803a01972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97185e27-a68b-4be7-a5d3-f82c662fb664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5eedc1-1188-4405-a901-7e994e697c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102164ee-3521-4dba-bf7e-22494d1a7a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49270c8a-28b5-4718-a9e8-aecf80f7c166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712876e2-9e6e-4121-be73-63db67452164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b9ec51-fc44-4d81-a5dd-f3ae5f69c3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0189f71a-8d81-475e-9723-93b7525f7512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf63771-a928-4850-9ec6-431036146beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3767681-484f-4767-a400-cbded846ed82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178bb7c1-8b78-4189-ac93-ada384764d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790cc5d5-542d-486d-af9a-c8532399d4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a83cc9-e01c-43ae-a4f6-75e5850a8d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3a46ef-4204-423b-815c-6b376bb81bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a51747f-f581-4bdf-bc59-871e7af94ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c7d1ad-2dd0-4e22-bebf-c4561959af87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01c10be-4509-4ea6-8746-cf349a26bb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6881aa99-374f-4b44-8d7b-f57844d7c555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffd7e01-6915-42e8-bd33-787f8019752e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d6e96e-0827-4c6a-9d36-936021fad4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3979f513-9739-4a11-88da-6d32e5f17ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde30d0b-333f-4bd2-a32e-0213c51da2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d050cf-ffdd-46c0-9f5b-7fd909748e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b046b08f-ecab-4441-a523-ea248ed6c2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccbe354-6430-4e89-8bb2-ef761ac9bbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ed8609-94f6-4f89-b566-07f1f9f8ccc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac46a82-147f-4b70-b0f3-2ebc3eae6038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581fca62-278e-45df-b292-a9d705653b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b65d2f-bba5-4de1-ad98-34befaa79f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208bf565-92aa-45dd-ae3c-87ddcb149189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02630c4-90bc-48b0-97cd-b58708dafb09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e79278e-4dad-47f0-9821-0f2139baaecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472d86fe-02ac-47fc-ab5b-dbb940f189b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedc32f4-b773-47d7-ba95-9f205c91fb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0731e16e-8f7c-4eb1-8c9e-c7dc1974f88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1c0410-a9ac-4047-92ba-ccc088a00a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79a4fcf-d6eb-4b8a-bc6a-5ad0e90bdf0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b2d0fa-2bb3-491f-9dc7-e8051ea557f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0904a2-bbb0-42f1-b738-2772b83f436a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae14e97-8980-46bf-b7c1-dbbc6de13ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848df202-ee1a-4f5b-8977-9b0a75555d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877fd40a-1c31-4882-b967-73ad5a0b3c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6954549-dcbe-44e7-b133-3fd4dacb2b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea99df7-093b-41bb-b252-046c98a9a9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ef47b1-7254-40c7-b9f0-8a94e57a84d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32cffc9-8bf9-43e4-8044-eb20c48ee511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba662db-0900-49e3-bd5c-bb08689fc379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd46f04-9fd3-475a-9f3e-94d0345f8dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16aa21e2-0e85-4fe4-8a36-da216f577e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9941b3c8-2ceb-4b8c-8926-c76437be7f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a4e13f-369b-4004-b1fc-7485751cc223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc958989-0f6f-4b0e-8428-8e68a7120e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc8efd7-670f-4755-8511-a49d5ccb4883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e67198-4bd6-477e-8438-2e345daf80a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb6f227-aeb9-465d-ac9a-a2b26abfee5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bfdae6-b430-4d77-810d-e9b06df629b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649cadc7-8296-4761-af57-b55c958bb39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d905395-ecb3-4de1-97f7-16fc66efa41a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a9096c-3116-44cc-b0fe-9de98ff1c5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade12725-769e-4196-9a47-0b9efc994df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdfa10a-194c-4bcd-ba46-58afbf86a6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd4be39-c5c5-40f8-abc8-a717757ab67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09a4efa-e067-476b-9d52-8352452df1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbabe49-1667-47a5-a9c8-006bb2d3d9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3b0054-b45d-473a-badf-ef2a19b4d617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c421f0b5-b9c3-4027-ab0a-6c131fa6f5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9ed1af-4354-480f-8658-85a2612e2a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca18f670-c83f-45f9-89f6-9b192fae8c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240a14d0-0b56-44ae-a3b2-965110720d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ce824d-dff2-45cc-a2d9-6b59a17176b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e775e22-c708-4c69-b4ce-392e3ed5c537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4515fcf2-0ab7-4353-b084-4e9d8442ce78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83cf809-45ff-4a1d-be4c-1e576fe0bd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168e2b75-909e-4481-8803-1ef34e115dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6b2df8-5beb-4c02-b645-38bf69f1b2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f51e0b2-fa9f-4aa3-80ff-ad5f75c090da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896f32be-3071-4d77-9911-19a0cfdd2922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ef93e9-d1d1-4d25-b384-9cd4dc5039ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546c4215-6cb7-4ee7-ba4a-7ee9e403e5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e042ef-05f5-4326-9907-750cd001ad70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27f8b44-c7a8-4d17-994a-6ad789e9a21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc7ac99-cca5-4b6f-abe7-96b4b230ea3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcad1b9-cef3-4f25-9f4b-91db790e12fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c486611-bd61-4d21-b624-e6178ff25f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3170cda-6849-4675-a8f3-00348a22d8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a7b6a4-6de2-495d-b9ca-b869c3bf7215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c5d068-bd6e-4489-a389-eb7369cc7762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf690e2-d533-4d7d-b94a-b322533282b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b085137-6d90-4fd0-8ffa-9c708ee5a008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eece844c-5175-4d6f-af2b-f2978deba0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a686a8fa-faf3-4463-9358-c9598bcd093f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629b9435-af45-4893-84b3-06f9c106bc9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df87e697-2ee4-4f4e-8e20-a49e2eef1074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddedfad-b447-4ff8-a189-1580da32a8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6761ff-603d-44fa-a25c-959d086b463d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb65e25e-f626-4ab6-95dd-02b4b8dd7c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1601ad5b-4e07-49e2-8023-1dc85b12989b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271e423e-be0f-42c7-8924-902750a055fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47696101-aede-4085-904a-b6fc7b2562f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5879976d-3e3f-4eab-9c6f-a287630ec67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64bb1d6-705e-46fe-9231-00af9751e405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133fad35-2c29-4f23-b4ae-5ac432f42faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d3f933-bc0f-4ee9-be44-81f3b6e89225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4496d870-89d8-4420-af75-dc808613ee03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdd1100-3933-4318-bf09-ec0d2c65874b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fd1195-f22d-4320-82d5-8a23a8e266c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bcf58a-d199-491d-89a3-d9923ae0f0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056cd962-54f7-4dfb-8f66-bdc738bafe09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb36dda-2310-4594-8d5d-2e622b21388c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bf0aec-bd41-4a54-b199-f41e335b97af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75132953-861b-4c58-9baf-1719da25c27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04905965-24d4-46cd-b674-97be80d109d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d407bed-2e30-4093-b4bb-6e82c70f3212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b5c2a1-e595-424c-a82a-1153d497486c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9daff71-252e-48a5-935e-923936a92057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db09d62f-20bb-4571-9bc7-4ba089a6619e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26401f65-7b4a-462d-a6a4-9efe63f3d2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ba6015-130d-4f90-945d-f6c8f7e314c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3f0f28-6f4d-4a8f-ad57-62f52a37961a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f28b6a8-2fa5-410a-a9b3-c5d40f4796b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ed98e6-55f7-4c37-a143-9c41f2514a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ec30c7-cbbf-4e75-a2d2-de3b6fe47c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b421eb7-f157-4a89-b41d-7f8a03a303ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0ab8e5-53d1-4a03-8857-49725af3fc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ca041b-fba8-45bb-a29e-1b20d799bfab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7795ca46-510d-4606-a4de-ec9b8ce5567e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb91653-d67d-4472-a811-7d409e0a82fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604aa0bf-1d66-4049-9fce-2deb9a621ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba18092d-4e69-4753-acb5-03f858eae11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475e6b3b-ed39-4468-95f9-2c8a835e2cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55e58c1-0223-4229-9531-a967ca954f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d02572-d7fc-4f90-b9d1-47bc6718690e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61315ca4-e313-4f75-a076-a06f0e65dd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033ec764-8ce9-489a-a254-73915269356f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974885ff-90d1-4e7d-b146-c0013ade4d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e3df3a-282f-4278-a7f6-eedf29663ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e40bbc-57c4-40d9-9647-c062aa824951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d2007e-16ab-4846-b081-24192f0e2251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b368a5e-6774-442a-93df-5126d5b71483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7aaee8-272d-4b8d-b975-c163e63c06b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b6c7ec-c057-4283-a495-3dd2066ffa3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9e9924-6b90-4a07-88ca-51c7c6a891ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e75eaf-4ece-4d24-8055-c2a627368e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd59a34-7b9f-4aee-a239-49339231689e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9e37a1-906e-4e7a-9ed0-43b289ba6988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db08305-3fa7-40a7-807f-5797785e8130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b8c7fa-6148-4c52-ad74-4c49686895fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ba6cdd-243a-4894-82c3-55d578ff1df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccbdde7-e8b1-4805-b895-b61c12f87024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e3365b-9706-42fc-865a-a960e12b27a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b71996-755f-47e8-949b-dcd5ef56f715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cc83a8-b758-4e43-8c07-3950d27ee42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b9a37a-fc6a-49c8-9fa3-913794f969ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e386de1-c958-4f1d-8059-4827a53759c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14194118-2f7e-4ac6-8dc0-162e40dd268d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd63c014-200e-4420-a3b4-01cbe293a7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b314ce4a-a51d-4bcb-b400-f4a6c7fd4caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5befd266-0810-4fd4-8b90-3024169c0aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38546362-bfdf-4358-9b68-4666461c2f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90a1489-620c-4bbb-bbff-d3126e1c7537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8834646-6e89-4c01-9a35-ca2714ac3000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce6ad4b-0ef4-473b-abad-eb451353c761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.124.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c464a3-d9df-46cd-b15e-cb3dc125bee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5e209a-0bca-4e95-9e67-f9ed1f8db028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babe93f8-e308-4639-8e30-8e2e6907f5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b937c2-3f0b-44cd-857c-8602dbd275fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6af71d-ab4e-4b88-9ab7-e27af478f49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5e47d3-8282-4848-95eb-1f969dd84cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970a2dbf-b4da-4c90-a9e0-ba636be9be7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6533200-d6f1-46a6-8ff3-4492b807e1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb8be41-ec6b-4aa9-a45f-180cc984d512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2765e35a-fc0d-4c1f-a8d9-ae5d1e8a5753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b7c89e-da3d-4581-bdfa-c306112e3840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a3935c-8c4b-44d9-ab08-8e317278c077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb631694-9254-4019-81a9-eecda2489ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0ca9b5-c93b-4d27-9289-3f5a4ec516f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84610d80-e19e-4682-a5f5-5a1c6de92b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75edc00e-d28a-4c88-b998-cc614913922d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c9165e-f812-4162-b167-b595d556c693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac87e02-d5ab-42cf-8b56-ef4ce703826d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59473d8-a1a7-4a8f-b25c-3ffa0de86970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06f9859-ecb1-4b6d-92b4-be94b7fdeca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d16686-1a83-4623-a522-846e0f847f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c40089c-8c74-4a4c-a192-66363518ecb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff16e163-ce85-44ec-acf8-7ad669151ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82721c0f-4797-4b0d-9e68-3bea2920c932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aba45a7-afa9-4f31-91ec-760104c7f15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237ce613-b789-4d00-abaf-e29b5cb5184e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64650c5d-d6fb-408e-90ad-157d8811d776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7083960c-9bfa-4b63-89e5-769271eb6bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8bc1f0-c083-4479-ad49-ac59569c279f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd543171-ee4b-4230-82be-baf950c2edb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bbc2b5-f6dd-44d3-a82c-b5ac44f8bb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292c32d1-e179-47d0-930a-f53e7cb2cd59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32d5fda-c1d1-4d41-832f-b1df2c8a23ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6d6d25-6922-4cc6-9fd9-82a792e67040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa598fe1-9251-4602-9d6e-23f112943663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb76b67-0498-4d72-a7ff-835082e719a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66942855-3695-4f21-8b83-602d55c67a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21b153d-8a55-4783-80c2-87a4378ee904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bee5f7-dfbe-472f-95e2-654f5a3005f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86005a3d-7df2-471b-8214-de01ca57cff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75fc8e3-9a9b-4c89-a19a-9447109fb4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5610d8-a649-41a9-8c86-7a909ebac06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338733dc-2375-4b39-ba1d-081818d4d45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e77346-18ab-413c-bd1f-7e90c2663961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58643d62-5ade-4514-a818-e71ace10542a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14215c5-5c98-4a35-bbdd-0f2227798cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f76e04c-b675-4a3a-a56d-d0c6c7efb468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b803300e-ec96-4f57-b4c9-f28f6e693948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43101e74-6403-4122-a6b3-694a96c17a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591e37e7-dd40-4451-9023-1c739eb67ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2232d597-a832-4ded-bdfb-451dafe01232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2de643-ca8f-4d6e-ad38-2536ccdcd787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9171b893-5099-4a87-877e-68ed1d1c6431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb189f36-61bb-4e06-9f57-c0f40b68fcfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3bc405-1d0e-4896-9444-31c934cdf4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d837af5-42f9-4f7d-984a-b1ad5d3b7c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfc0903-581b-4d33-a195-befff4d8813d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328deb36-fee4-43f3-a247-f2ccea9e3e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c77fe2-49c5-44bb-ba27-afd3a4618479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9be4ac-81fd-4b16-bf7c-cd12fddbd9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca0335d-1c18-4a52-a305-9de77b6601d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bee097-c463-4a7b-8bd8-a6ad747ca77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7bbcaf-78ce-488f-b720-dd44b0ac1aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a37a7b3-4394-4eb1-b2bc-8954bbaa8240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b59af5-121c-439e-8478-cd750e6c5f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0964a12b-355d-4b23-a567-bd82ae15e25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a844ea95-c9f9-4372-9cf1-4bc3bcaa31dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22fcac8-9548-40f6-8421-dbd6e09b63ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e80a48d-f6c0-42f9-b081-d620a253940d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4acd5f-9e67-4ce3-a805-28a606f7b906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7613f02f-0f0c-4d93-b44f-4be2da3f8a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b81f20-d67c-413f-9b4b-58d0f7aa727e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f873f9c6-6ff8-4698-bd28-ed0f291da992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa43433-b385-493b-a7df-1c9048d194b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e6f52a-0217-49af-964f-e7718a69cd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715488e2-b617-4aab-8dff-2dcaba8b3b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625a1a62-8a97-4f81-946d-eb8bc38737a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2feb48cb-66db-42c6-a084-6f230e9771a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f16eaee-a7e1-4b97-bc8f-da16662ac756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec1a9ab-379f-4d89-a1dd-95089d37d012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe36ea2-cda8-4289-8b62-e7c4c3400142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386dbd4d-e3fc-4a1f-ad9c-5ed924e9ffd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43dd0e9-2bd7-4876-a936-7ada61cccafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75b82f0-c292-4c21-a128-6fb9b8e2195d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c28649-9891-4199-abf3-2845052b55b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8232029-260f-40bb-aa86-bff83c22dd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123e714b-5068-4cff-90b0-5e2a4c431202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6393c66-9d48-4b18-be93-484b0b7fbf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5540099b-87c6-4797-8d4c-6590ac8ca83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a61567d-e886-42ea-a91e-eeefe30d5583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622377d4-88c6-43b0-908a-ab74872d292b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecafcc4-cd52-4e5e-9703-d492492b4cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3a7f91-9017-4745-8525-ffe7768fcefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38e66b5-1345-4b12-b8cf-9e5ec8771d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d4b44b-eb60-4169-ad23-56bd5ecc8485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771acab6-4f54-40c4-b6e4-14d05c527d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a761932a-b97d-4ef2-9efb-556c761005de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bbeafd-489b-4507-b4c3-cc549b236014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a2dfdc-148d-4745-8400-b6e8d54ba90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41452f9-82ee-49e3-bb44-1fa489e6511b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92073ea4-2579-4077-a1f4-68522077e50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59010d65-6931-411f-9c57-466c02dd85c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b535b827-2936-46f9-8fbc-4ac77cbe2221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb88a60-ee5b-469f-83f6-2f3517483a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd565f0-2688-485f-ad33-5b9284a901be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6af4a6-7962-4101-a727-c35c7546358d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f422ebe-3a88-4ae0-9c88-a1064f3911ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9d21c5-4612-4294-9b52-e77c4e4f195c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df78ba10-3b78-4bd8-9f09-c110f263eaa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a157fa48-7a5a-4ca7-bd83-11357a6e6db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a4c70c-0c18-4508-a8c0-03453f9b599e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ddf3e3-93ef-4b97-b9bf-298e70fe886b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9def0f6-5308-4675-869f-eff25599c724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c064caf-9288-4e18-a236-a76c08d6e08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8959d3af-86f4-4f1e-bb3d-891e12836af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e42866f-1ede-481b-84e7-b9aae9e66fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4ee562-afc2-4ba6-a36b-b91297dda859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d21f8f6-446f-4eb3-b255-1df8924efece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f40fd8a-180f-4d8f-9f12-bd769ef9f14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5dddf4-47eb-46c5-b349-dd7598f5dac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62c780b-53e3-47f0-a98b-b1e9f4c22dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b3bf66-6845-41dc-a870-cfb18698168b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8403c39e-62ee-4645-816f-c3f0398a7872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4614cbf-6eb9-4999-99eb-618b85100f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4c9a34-eba2-41a1-9b79-bafaf8d0a774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b1e15a-eddf-4a50-a84e-7683c6e87497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3cf383-590a-4501-937f-986a32232621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341780ef-f3fc-4156-9cd7-e9f8f40b5eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560105bd-c42a-4c79-be66-23f76e6d1cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09d5cbe-7aaa-4f36-95c5-df0e9e0eacce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134cb242-626d-49a8-bf50-43254f60df88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f76436-ba80-406d-80a9-b9e61d9a2199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b57127-fae3-47ba-b550-fe4c162b8413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b630bac6-00ce-49e4-86bd-f2cc7e7d3ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1b9be8-dc79-431a-94fe-f401c4e6c73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b892400-1f91-496e-8616-aa4a56e9f151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0273aa9-d972-4589-b57a-192af38d5a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e23acc7-d457-475b-95e4-56e7f857d02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc20e03-d6ac-4045-8898-7056b13cc8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0d96cf-9e55-4578-869d-36878b3ee04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e060d653-a044-48a9-bd00-a94f275011e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a0e0c7-02b9-428b-888a-05b62ba06225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fdc097-0168-41cf-9a29-7722b46a769e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba55ddef-fcb9-4048-95ae-a30717d08e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c9630a-ccda-41c8-a56d-5337ff65d40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ecca4f-7f28-4bf9-bbfa-1d52cedd1100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75dce92-ff65-40c9-a453-4b7a67f359be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4c145d-99d2-41b5-90e7-1d169a633301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55a98e6-5b3a-477a-bfda-4e5ccc87ca7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323b6062-0f8a-4a7e-aff8-975e8fef33d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2085348-1be4-4d38-abcb-9374a2572bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddacea81-d548-4329-892a-3b445a734cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10702cf6-93ed-4f12-ad63-32c68f25f5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.125.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08052a2-8296-4f5a-a981-4f0e4b47d242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3a7c06-afa4-4725-9e44-d4053bf7b89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1371e9ac-5148-4ce7-9102-605bf042953f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b057e9a-5eb6-4a86-873d-00108053f780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0443a728-4d68-4645-b58a-9a7315f1b254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5cf5e1-19dd-403f-b20a-90277fd772ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470d9eb5-8d4e-4997-bee4-17f2ca500524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62badea5-dc88-4e71-bd04-ab3f53be139c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d992ec-b1ff-431e-b1e0-4f914379cc28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d96f4b-819c-406d-affe-b6fcfcd38c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116b4ee1-4425-494e-b30f-6d5946c583fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6f9f1a-980d-42d4-bea0-f77d50500261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e13b7ad-16e4-4066-9f38-dd6bf2c14543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2ae7d2-af10-42bd-9ed9-84057b33e633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e960c9b-a8d9-4e6c-96a4-ad96eb91bc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100fec14-68c5-46c2-b1ed-6f89ced1ab25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a54f4c4-6c5f-46c9-a0d3-941dab698115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc68fe0-0f90-4555-b5e2-a85e8e2b4921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3407c1-72ef-4aa6-9d4f-fdc2179df6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4604bdf-2d4f-4219-b618-2eb8c168fb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb99156b-f54a-4dbe-879d-edd8900b7b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8f65d8-2a0e-41c9-8bca-9d7809f61be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50651590-c325-4c6f-a781-3a0c7ff9ff18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35965c5-179a-42aa-ac5a-000e4b8b0cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4227492-c42b-4625-8e41-8ebc398ddd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f6dec9-2132-45b2-b438-a32df94e5ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824038f1-227a-4a03-b8e0-440759696fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d798c4-78d1-4ad3-9f7b-f165a01bb3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdd3085-450c-4d21-b9ff-413784e8d5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a613390b-5cdf-4f42-8820-83b0f13a3b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24acc72b-b779-47a1-a645-b915fa7552c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57061a41-5e10-421a-b7de-945ff31f6fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049d6e40-7c83-49e2-b507-f8a3c2a74e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a05b1f-1b91-4b7e-98fa-ce5dd41ef694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9df5e6-ff28-4d24-9776-e2c78a46025d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72779eb-9ba3-4cb2-9a28-964666da9169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938a60ed-c60d-4b5d-b736-08c85dd1a480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171e4308-3d4c-431b-8276-12e79adaf3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5a79fb-628f-40da-b5e9-2b253b3cc0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd1d2aa-20f7-4978-a397-f739f204f07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e46fc10-ee83-4892-ac85-feb4e5811da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a932ee-6c4d-4f6c-a385-f46246f7bac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4596b2-fcb2-40f4-9c9f-6210ea19fbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bb3815-1974-4861-be4d-972880fc39a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9acef7a-3dea-4c2d-995a-e6b511e2b8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c7808c-08a5-470b-b32a-1e963934ea44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725e1938-18ed-4a74-b930-f01f6c465f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d21ae1-2670-462f-bfba-0bdf604f7ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda6b9fd-f818-469c-a5cc-7534283423ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bda3d64-74ee-4479-b2c4-614238e00127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bb621d-e632-4a62-98fb-c08432355e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09df269-3996-43e3-8dec-a870c2e6f821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1b745e-0132-4110-93be-5535877a738e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f492072b-182c-4a3d-9b23-9d12a7e2f2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc995fb3-ed03-48e9-803e-9581e3e1fa9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f748cc80-403b-4e10-96ec-f03c3817761a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41cd1f6-4bfd-4526-9921-65db23c4e39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11acd58-a40a-4635-aeea-454bd9214102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15f5c7a-27d4-4bf5-b347-e53af3d5959b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3ca366-f539-4272-a0f3-080211d3f858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68071a40-31d3-4de0-acbc-d80e0f06f9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a65b9cc-06a7-429e-b681-b9006f7cb84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f64ec9-5b97-42e1-b859-eae155fa0073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a0ab55-0d72-4a85-b064-adb5434d3b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82edc6f4-86af-4328-86a2-df09e3208444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4399e9-138c-4f77-b590-78583f862590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32657e02-3c07-4c48-9bf6-43fc66afa190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b9743b-f0c0-4c0f-bf57-e3e1f8bf6f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bb2b2b-3d2b-4dea-a857-cf6ae8b6728f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a277cff-8c6e-485d-a746-39e4cc9194a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb96db5f-4f41-4fbb-b256-847c23fac2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22fffb9-022f-4899-bc9a-9d127ee21a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee62df7-41f0-4f6a-9be8-aa96ef7f2cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ecbc4e-5a79-4d32-8634-f21a9754c035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a94312-6d86-4b78-a985-7334efd55471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ce9d14-4056-4497-aacb-3b065c7e0e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1afbdc-51c5-40ab-90d0-2a75296efad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c870185-fde1-46e9-ab10-a5fc27501265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d382f999-9f08-48eb-90a0-fade78ecc402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb592d62-4978-4555-9e58-ec43dc62f055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5c25c4-9d4b-4f6c-9a40-fbadcb6cfbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590d18f6-bff6-41d3-a41f-0dd140be4654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54b903c-9b0f-49e2-8924-f64094a2ebb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553f597d-0783-46d0-86c6-8ef4d8f54cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3129d75-a1a4-49ef-9cad-d5ccd40b1d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f257630-5e07-4f39-b196-dd6c18887ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7587520-2a77-4a92-b3b0-35dc6c653288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8c429d-6b1c-4f04-9920-27c1cd06eff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe2d300-a95d-4817-aa70-a0755a2c8eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adead8b-21d4-40a2-905c-f86d4c39807c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1221a56c-23cb-412f-a2e6-5e72d4d332c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8ccb75-1129-468a-9730-2c59a1c5ebe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4d317c-3c67-4ec0-af4d-61b8ee6a55a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38cb166-c5e3-4b2e-bc36-e12e220fdaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0566d26-acd2-4a7e-a57f-3a53c5a34bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdfad72-17dc-4a96-92c4-431afbef93d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee1ec0a-b671-4860-adbc-8788a6b6b384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1047ca3-bea3-40c7-836f-22ec6a669fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9614f872-41ed-42ad-91e4-c39feb7cc625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3e1c76-6b8c-40a8-9c20-f2e3402300cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbd9dd8-55cd-4efb-90f5-f348d4894c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cb989f-9639-4e7c-93a4-b757e8c3b291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6496d3-0e1b-47c0-a9d1-f48ff6f9e3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb819d4b-9056-43cb-a350-45b68a892339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df23cba4-8cec-47c2-a69a-1d9cc9b574d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337ecaa3-d7f0-4a97-a5f3-879dc4ee8b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2110e4-db9e-4941-8ad6-cbde197526b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5d88e9-9e62-43d9-9117-e2fdb9c13107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f264ecc-52ec-4dc1-a2c1-756a72c05151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949ec959-8d53-4e10-b801-b4dbe22992ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cb3bca-97d0-4823-b98e-d31d862ae729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cda5eb1-49cc-4e99-9a5c-a2f555279a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605b042e-40b8-42d2-be1b-de63c7ccbd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89bbd04-e370-40fe-8353-948a118a0ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdebe62-2c06-4d35-962a-16b25f9cb5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add90290-c5b2-44dd-a3f3-efe0237c26be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6a1f9e-f2bd-41f4-b0fa-8e068ae5ef99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00138f68-3875-48ff-bf7e-78c13a3910e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73759b05-3d20-4c51-8ca9-c64cc98d4672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb4315d-545f-4f42-9f30-93ee59ef0bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c58136-b5e0-4a84-a4b8-72efe0a12cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567870d1-8900-42a4-b967-b3c066a757be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef66e3bf-7d14-4f13-9251-e86dc107b67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579b4bb7-7664-493e-8bfe-1842376b6582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b31dfe4-e4c5-4af7-be54-bbe8f793a23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac47c645-a2f4-42b0-a93f-46c413b08b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63bc439-0917-446e-b036-63fb11ac11c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5385ed2a-195f-4107-950e-8d21f22c3fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae28a57-74b3-478b-b6ce-94c9b8d1170d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c99f38-6a07-44d6-a7a2-b18a15c149e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700e7703-efe8-4ff2-8f6a-844c85343833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6344435f-cad7-48bd-bf1c-9d69cfdc60ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92625f3a-c0bc-44e2-87c2-033e949abae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaa0acc-e652-49bd-929e-fa7afb3f3db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33477da6-5ec0-4e21-9cc5-b7808695fd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95529d98-f61e-48d5-820d-36890307518f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eabdf96-a32e-4862-855c-7b6268a5dfa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2032976b-ce80-4deb-8220-cdc4c8f1224f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d0b11e-ded5-45ac-ba2f-7768fedfcf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d07607d-d76f-4bc0-8884-cf5e4e540cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aad2c96-4ddc-45ac-9af5-f6d7c7979eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af146c4-a6c4-4604-8c16-2e9a4844182e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69441770-bec8-4c04-82ad-5c4bf9ece2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f58ff6d-09a9-4e07-96db-c704c21a4952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448756a0-18dc-419d-a0c9-4682ca911b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bc1526-8cf9-4f84-8a6d-88840b40bedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d78ee4-9272-4db0-8f56-dd1b47f2f2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71549a2-cc0a-49f8-936e-7b0a4139e929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c76f8d-513e-4e5f-8025-ad94d56427dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7035ca8-12a3-4738-a809-ef01f68c83ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc040c4-c704-49b4-ab10-0b77bc4caa63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009c5c4b-7c44-4b90-8f14-40e51c8895ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0e227a-d4da-4207-8e4f-c5e2794729bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd22c037-0f3a-4699-9f0c-01465669b31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a5e66e-aff0-4f2a-9a9c-162c98cf52e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b445f126-3b6b-4728-97eb-3648393a46f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66230108-658f-4bf4-b1f1-2bfdf9bd087b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a1e4cf-0c31-40b7-97cd-84735b43276c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a73d23d-478a-46cf-823d-006e4efbfaee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63222d03-faf2-4c1b-a89f-1313e9c5c3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b98ba3-0487-42ed-b028-d1e576a08e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72c8da4-4bfa-4eb4-8500-594c1be6b66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.126.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02db7411-4510-4a70-8cd5-1d87bb51aec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.0']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf06ce2-096f-4544-9f64-ac14ab603107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3349ff-729b-4934-8a75-842152a9df88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c72154-cfb2-4d39-b0b3-5c0dcc13ac36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbfc705-be4c-4e80-a9d7-7335de7ea5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a2b13a-f2ed-4412-9485-4c8f041e780f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47242df1-8a7b-4685-a33a-2bef4e441e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d534d59f-0e26-4328-84a4-40dbcdf53832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2096e1fe-f751-4255-be6a-0aed06266598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fa5385-7422-49e3-a866-c28237c6c22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855d2df0-2c36-4f84-93bd-1d62a82d3233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de1991d-1694-4c96-b3dc-2ba9722b42f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d977b1-eeb5-40f6-975c-be4fa0442372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61c4be7-2735-4e6f-bd32-d8e153601478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098e7f8f-985f-48b1-9954-408d688d473d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58a40e6-69e8-4e5a-98be-4f6c8dab97f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45b4b32-f911-4712-bcb4-b5674711b597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19b81d0-77aa-45eb-989b-15c1d9bbe1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb213b9-0d60-4ed4-9e8e-c8f72f8eb85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643a0dd6-0110-4dbd-9c73-57dd85a264fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f099b3-4547-46d5-b3d6-33c6f5854cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d4ec3c-1533-416c-934d-f6cd7ccc4adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc292a5-314e-4e0e-b033-e23c7c488a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50952c7-d864-4efa-a8ed-961966ea4946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdce9ecb-14d8-4e83-b0ca-a157428569ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e84af9c-82aa-4e23-ab61-e953fd803257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da22189c-e5b6-4a11-b427-861e7697daf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3043d47-396c-464a-88c9-ddcca1cefe96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b833bb6f-346d-4631-90f7-d15bdc5ec3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cd2ad0-7e65-496a-ba0e-2034ba0ca84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64efd94a-2183-47da-866b-8b0e0a76d1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b859f369-d0a4-44f8-9ba2-a0ba4b12c8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150f3420-c8f3-4f0d-80b8-1860915492bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c30ade-44b6-428a-b01f-dae75d02efe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191eecf9-c755-4a7e-8cc6-ac84d515ccf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc79be6-1b1f-40d0-81fc-29144e47f71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237e11ae-43c1-4bbd-ba0f-522e99ebf0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344cfa3d-698d-4838-b466-ca9630c452d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356c07f5-ab97-4cd9-ad01-58c91d1b610a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3998bad2-17d7-4c95-9aa7-9229299db7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473364b6-a812-4e13-b4ef-e6d54458188a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cd16c2-8026-4c6f-a9a5-57d5e73302af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0769e8-3804-4229-8aec-561265487c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53fac12-ceef-4301-b950-272a1d41bc32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d2fdda-16cb-4377-baed-a2bc1b780b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d610712-f13e-4dec-b6c6-eb5a1d327ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4e2424-ccb5-481a-8ca9-4ab9c71c56a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e6c1f2-872b-4ad7-bea7-aca13f16c099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e4b05e-bde1-418f-9b04-86eba722029c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853ecab7-e751-45ae-aaea-014249b80a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b67e1f-cf68-4646-bc81-65b2003313cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2dd6b0-3309-42d0-a6df-9ea6dccc7977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ea7e89-f64b-40d8-8089-029fe864da7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1049e10c-e73e-43ed-aba8-5ea8b653056d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583fa67e-853d-4db5-8d46-e51f98ade76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7665f348-bba3-405d-b239-efefd647cadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab756073-76d4-4b64-9803-c9943e888355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c84eec9-011d-4822-b5ad-407b3ea24315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8c5261-36bc-46a1-a679-3a4a2dcbf4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79143fa9-d173-40cd-8ffe-38a1347ea838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a16256e-b0f2-4f1b-85c6-b20e96ea761e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f037a9a-2270-41e3-90fe-da3058663a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5cb2ac-4fcb-4634-a631-6f3f2a9bd946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c6d296-1e72-43d8-88b0-ba58bb9f2064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a592d8eb-107e-486a-a539-972b066f0f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1fbfa8-3afc-4436-b54f-8414180e1f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ab7fcf-98b8-4a3c-9c55-debd64a559a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c046a5-52b6-4f07-a6ac-5506c3a4e407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdb455e-2bc6-4383-83b4-50ea48e61081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60527283-16b1-4645-b393-fffe64c16994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fd8832-9f63-48cd-b8a3-f7c79c34766a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f001cd6d-a92c-4a97-9877-132f89e1efde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b86a40d-07b4-44c8-a9a1-8d42fbebf20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d85a268-61a3-496b-b15f-d35c99358615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c63583e-64b9-4ec0-80b6-6b77bea321f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6df678a-8878-4ab1-a6bf-3006ea588a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a352d5-8fc3-4f67-9387-64e28c50ed08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85002489-d4af-4cae-882f-c18fa13b2323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4485bbb1-c247-4542-9f3b-31a1d9945418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0221fcf-c67a-48e6-ab76-f89aa951deb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ce5d28-5e63-4f4f-9195-7f42ad5fbc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398980cc-b6c4-4950-8b97-f895aa7c19ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f4932e-d9bf-4c96-b9a5-6c59d6cd81c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca0e7db-c348-4417-975c-79109ddaa6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb366a7-47ef-4d68-b82a-c4d6ebbcc40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77342a92-360b-4b12-8e2c-ce6a1803b3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f217c971-5fd9-49c7-abaa-764993e46fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563574d8-6785-4531-84c9-dc98ad0f6fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fe97b1-27dd-4219-9f40-d1ecfb3589e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30d2d45-5e32-4d14-8a8f-40833a27d7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a787cbd9-cf94-4f79-a72d-7beb2e7a1d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200967c4-0e99-4123-8078-2d944c200d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac102ee-c051-4bc1-9268-79253b1b4f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f814ed-088a-4bfe-a64b-5b678578ccc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5dc3b2-2909-4131-88e3-31a51efe4ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb7cfc0-0687-46fa-bb45-17a17dc0c6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbf50c4-70a6-447f-b556-0c0753f92902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b1d9c8-f792-4c70-9e64-bbf09f7befcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc14fbc-f470-4c66-b645-30f6f8f51da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1340e4-f01b-4e3a-9650-cdeaf73efdbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3333a4-8a3a-4e53-be5c-02514700a187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde86672-39c2-4106-8a16-ed06991969f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5581a258-a415-405c-a518-fcf9736b88ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c24c06-8fc2-43d2-a67c-2cae5a1ca0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77b937f-1205-4ad9-9fb2-aa84010388fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ffd40c-ade9-44d7-907e-0632991e4351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6574da1-8b56-43e6-bf96-1d05b538cf12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39c398b-37a7-48e9-bb3a-3782879c4019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c0e5c7-807d-42a7-ac80-2a974a36fbde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db920b4-b1e8-41ee-8d57-087807cf1046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24b96a0-31b2-4d54-98be-0f797c975880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3bda40-43aa-4c17-a133-57b2cc05918f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43665e5c-7824-4efe-a3c7-d394c8b8c31a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd6c68c-90c1-413f-8cd2-a33f8c2c36df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faff354e-0b44-418e-a7da-2ec5fd94e7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9922cf5e-4d83-48e4-ad5d-d820f7597afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0855aa80-7707-4537-b2a2-239fd65848dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740ef77b-d07c-49ed-9eb2-24e701b6ce72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0572c02d-9e2d-45bc-b96c-c328aa7f37dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb0f816-8801-470b-82c0-6b8c4a9fd9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fac7348-2e19-4638-aae8-731529ce2f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafe0ec2-bf40-4e99-bea9-a37fc3744475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7d0ad0-0766-4513-9814-188994c85e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8338cc4d-ab02-4d2b-ad41-f1d7af56a5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46da3a9e-1760-4a5f-89ee-d685e210ff48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c18d95-86ff-43ae-99aa-cb28163dc986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98844eae-050a-47d2-b0ec-29a385a43732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70b1b2f-0123-4dc0-88fa-3bd6ced7bdd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982f29e7-6539-40e8-829e-9f909498409a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1924ea83-2463-41fc-9a46-debfbc43d716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b936884-d572-4ec0-b6a7-2728d8508f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a58a2a-8342-4a57-9757-14b6af6b5896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e155c33-767a-487f-98d8-e9a0c4387a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08426724-511c-4356-8720-0946620642cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1691555c-aee6-45b3-8ad9-71a41a0ab766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbe47cd-d5ab-459d-b62c-69883b211a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ec7f4a-74b1-49da-ad80-3e6407c33412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd623e3-f8de-4e32-8db8-ad3d5bbd7860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f270651-a6b5-46ea-b881-243b8e772efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d343e72a-d500-44c8-af7d-21e1c10d35d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc4d39b-8170-44f9-9e1c-61dc4f56f4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc626a8-c0c2-47b2-8752-86ec9b91cac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a6ada1-d63a-4469-82f7-1eef6bdfe716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25f5603-a6ae-432b-abe7-3b245c344203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d1699f-b6d6-43cd-8ed1-7157505f8cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f605de8-15ce-4a3f-b928-8bb5ee4b796e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a47f4f6-3c40-4c8b-a6dc-2de5e160f8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95e9748-c676-47e6-beac-e2dc5e7064c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9044cd0-d021-4f91-bb66-fcd9e72fd762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21e6d5f-a5c3-4904-9b9a-63bd9786557c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb40328c-e55d-4f2e-94f1-5c308d0cf816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f1c73f-d808-4f7b-9d2d-06f40b7f795b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.127.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0626441-518b-4d40-ad17-2eb37f2b3a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d248bc19-7d62-45d4-a0d8-96d54c4ddb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fb78e3-3b10-4b74-a823-fcff8d96a73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f189c0-d510-41c7-8944-0830a3772c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3745ad7f-efe6-4439-8efe-5a827e70ba27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052c0d3d-560a-496e-a565-6e4ae8e0d972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b7ea01-aec1-4028-842e-718a78930798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90718389-65e9-4e53-b614-4ffd125b14ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a52673d-17e2-40a5-ae51-4d9890527070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae259a0-2af1-457e-8b46-30737982e2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b82319e-c81b-4ef7-9c45-87a862602a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710325ab-118e-4697-a5ec-464ff5436186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da03e229-aeef-43a1-9984-0ca44a29adb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645890eb-fe9b-47ab-9b20-bdaf85a6b7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b319ec-4476-41aa-974f-1749e5342b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5772dced-bdbe-4bf1-bdaf-ba53aeaa888a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025ad209-b238-49c9-b8de-57638dfd6f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8a3bf7-2819-4c7a-87ca-b7bfef932335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cc8f69-ae6c-43fc-b9d7-ea831831efe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96503612-b3fc-446f-855e-cafa213f4fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f20a89-0615-4c90-82de-901f1f3ae00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4ee789-d96d-4335-b83f-6f62e6256d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7066318e-de9b-4a5e-a620-bf3dbff62f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2493a3e8-648f-4208-8dbd-3d2493daca0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8acb220-cdfb-41b5-8332-38991ada2776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc786f9-8ff9-4388-96a4-2d4f09fae69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14068582-0422-4489-afd4-c0a2eb3d29ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae6e414-4c9e-42f8-91dc-e925ec886b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469ed15a-a303-410e-aefc-7d05a6ab8f26", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.5.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b565592-2e95-4921-8099-cfe0dfcdf1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.24.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946f9c10-0ca7-4f29-be0b-fa092bc2b1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.17.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01cf8f2-1a0b-4448-9756-fa5071198fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e124a224-5adf-4d63-97b0-735cdff399db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.209.144.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4467c90-0307-41dd-b499-3b124542f64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338e157d-12ce-437c-aca5-09fd01edf48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de871a44-97af-4026-8bbf-866ae48fd21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303f9bb8-e76b-4111-b103-76be71b3a2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2f4ddf-760a-444b-8123-c5732036d941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d77dc1-2456-4ec7-b254-26c87ab05c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cfcdcb-e5c7-420f-94bd-0ff95c49e05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8ea3b0-be05-4635-a5a7-2e899db14d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9117fb7f-1542-4b58-96c1-976cdedcc774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf4d2ab-25a4-4876-b363-6cc5e1bcdccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39187cb-128f-47b2-9b46-8c2b2a4d4c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d7c2bd-1a1b-4a5f-8605-29c032d68e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ef320d-719e-4b08-a234-75fe36969a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2135f762-152e-4370-8d47-52b25b40eed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f514534-74d0-40d4-aa9b-ed20d7209679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b628137-3445-4b41-bb3e-3dc4e4241f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94855125-0089-4572-a674-e15b41b5e6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a0edf1-00c3-440e-add9-bb72cbf639a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df594617-91ba-4cf0-ab0b-260f37596251", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.70.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057e7297-cd29-4660-ace0-4ddbb686af77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4433aae-aef1-40ee-a23a-4b6f207fa0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.110.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720a7d91-a2c0-461a-98ae-6f73cecd7494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c921847a-5053-4859-9806-7a2d2bff5a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.202.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4a7918-57d3-4c72-99b4-a47242c1a43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.210.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90232bc-e03f-4df6-a155-5386bce0dc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.221.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02eb2f4-4378-49d7-b2f8-ab47b4f4403b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.23.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a383d16-2fbf-42a0-85fa-5416b7b46ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.239.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82caded5-22db-452e-b9d0-795660d3f79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.33.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6024e8a-5529-40de-962e-ef70104078c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.87.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d724c645-7e7b-45c1-a130-e25883650092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.95.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5a2df6-40c0-4f2a-8c07-e740803b6c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5df9ed8-60fe-49bc-9a1e-537de70ae9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a5670e-42d9-426f-bafb-eba375cb25a2", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.222.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f62d6423-69b2-48b4-9d2f-5bd2cfc6f2b3", "relationship_type": "indicates", "source_ref": "indicator--29a5670e-42d9-426f-bafb-eba375cb25a2", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6839716b-ac2c-4b03-9384-f1dbb8958c29", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.41.134.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df26b19e-cb6c-41ef-8fb2-e375403dc0f4", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.30.51.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41dff1ab-ebdf-47a1-b70b-63b155934b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.115.249.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350130c2-1543-4159-bb5f-8d7c49ecffbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.111.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e238ee83-8d75-4e5f-ad6b-c5741082b3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.105.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c3b203-7a3a-4d86-aa74-4ceae65ba055", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.215.166.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57194465-252c-45b8-8e10-0176170738d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.244.237.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3619521d-7678-4fa0-83e8-551116d3fb67", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.251.244.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e267d02-66c0-4102-a366-0d6e473f1fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.43.108.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d147f679-8205-4def-9ff6-62e372044b96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.171.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6bf18a-06fb-496e-964d-845756c4cf30", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.216.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da7acca-663d-4e85-b0c0-db4da2ec0af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.13.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4449aeaa-0308-468a-97e1-0da1b7dd1902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.132.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32181d45-a732-4fc0-810f-997182a12408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.146.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ed893a-c7c6-4d91-8710-cd85a4397e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.146.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ebc592-1fbe-4e25-86fb-8c9133bfce6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.152.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad7d18c-ab02-4d68-bec0-6d38fe5bdbac", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.16.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c9a88b-ed51-4acc-af0c-1732410dc206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.167.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb3b6cb-275f-44e7-a731-feb72354d39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.173.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e56be0-6b23-4a03-9a5b-24a785ec47dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c64e14-b336-4d5e-a6fb-ae030c9694b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf32b85-248f-4e96-8ac9-db4b7d392528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1176175c-9fd4-4a72-a90e-1b177432e30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.177.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492d18b4-be36-46d3-a262-4701f759fe4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.8.236.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0301323c-6a20-4dec-a8c8-188b8afa912f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c94b56-323b-4165-8490-ee3a6283580c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ab97c1-bb56-4d2d-8555-d967e03375ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1b4689-ab35-48dd-a3ec-608ad2ec817b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21a6c46-5baf-4d32-854a-99977d729c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa530ad6-85da-4d86-a464-1991c49a7342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51dc4518-fb63-4e15-83c9-f6ef34df6a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8624a4-8f17-4ed7-b3f4-99bad14abea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd1f712-ad87-4dc9-a1ab-c98a930bfd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d013391-f6d0-4282-a387-6ccdf6af0be6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.124.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929f1352-0dd1-4ab3-a24b-2e263f573de4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.15.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773d5f1a-c603-4c2a-b62d-8ab0065528b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c8edee-475d-40fe-8eda-9506ad3186d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8733982-f556-41d9-bed7-451a7fafce10", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.75.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782f8dd4-31ee-4189-9434-54a13d86bbe6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.180.88.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540c8112-d47e-4307-bada-cbf5ccf87460", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.21.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ee06c3-f32a-4e10-94db-9a5b50e9f969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.191.207.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e01fe2-24ea-4182-85b3-9983c734d2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ce2986-7a7e-4cad-8492-f53e1cc8ffa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.179.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c1d6fd-59f9-4379-8a26-89e86b5d46b2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8faca7d-44aa-42ee-a899-b2825351a9dd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.210.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69cd2fd-f2af-4090-9a8c-5346ca592ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.60.250.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb9dd67-9b57-4145-b045-141f76b7e578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8c2fc2-c6e1-4ab0-9bca-d2daef510721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1171a268-f834-4270-b195-649c474ccd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d83390-c2e8-411f-97be-a3696f993cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2284809f-95dc-4f4b-8e0e-52f12df3c0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9deb96c3-92af-4d36-9d5d-bf66dd861b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9932e9-ba65-472b-98f0-d25f2feeb110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9297b08-4fca-4a29-8682-3fc4907a567e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03746d7f-b3ca-4875-9d1d-0dd8e0403d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576a83ad-5175-4962-ba35-88b8f7cd4d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96674dc5-76cf-4761-a823-55f96165c3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43957495-f0f2-4b7f-86be-ece555aaef72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa1f32a-cd29-412a-969b-6ecd32ab90fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.176.229.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadbce79-035e-4dea-979d-948a0844081e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.176.229.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e178b1b-ed1c-4e9f-b911-a607e40e9385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7f1602-ed09-4094-a93d-f29ffa2376ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32273799-9f33-4f50-abd4-fb36b2902b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.63.15.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0ebf74-d959-4503-b468-4fc01f8a6c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.87.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de601d26-30b9-4a7e-b086-05b7c39527d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.173.190.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae91b6f-721a-496d-96db-798a319c1ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.253.233.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcaf439d-c039-47ad-b6f7-5067f858bc57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.38.3.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e50176f-4fd1-4c21-b408-6a37aab97c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.126.202.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f08d125-8c1b-47cc-b227-b841c1394634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.16.183.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e7be27-e57b-492c-b876-d7906768f0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.165.85.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b9ddc7-850e-456f-950e-39ab1cbbe98c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.230.233.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def40d02-5c1f-4e09-9c7d-cca92774344f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.254.24.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11b95be-84d8-404c-887a-47c13ab3cc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.33.71.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e042b0-afc7-40ab-8aec-1ba4142254d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.37.251.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d4128f-60d8-4010-adf5-c1b63fba47d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.44.137.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e6c51f-9c40-4b7b-8db5-0ad7fe2421e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.53.105.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4230f7e7-7731-4090-ac5e-23612d9fc234", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.95.45.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e783be-b78e-41cf-9274-0196cd1c3c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.129.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade0fb40-c0ec-4323-ab62-291bc3062901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.62.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d5ff63-81e7-44bd-9f63-c9a9470f07f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.74.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed72e0c1-4f72-4ff9-a504-89a572892530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.95.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c84ba69-71d1-4a76-a385-55fb0ffd4d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.116.216.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5c78a8-1408-41cd-95ce-83f2930536fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.145.238.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475fade9-94c8-4ab3-9e4c-274e93e1704d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.225.202.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f144abdf-ff88-433f-974b-a1d86c7aa617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.226.61.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f2d1b6-042c-4ecf-b68e-a141f3c6ac80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.228.41.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9850eaf-e200-44e4-a77f-325d7f21534a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.236.160.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3385e47c-b44e-4e19-a6fe-a24b3ccf2ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.236.44.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07bd1a1-a019-445a-b13c-a89e25fc33af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.239.145.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e985ae31-8be4-4ece-985c-83d02400dae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.241.174.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82fa1c5-4bb0-4baf-8551-5e4988e8c532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.242.220.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bebe7a0-b84c-4e0e-a0f3-5701a4d7b0d9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.243.229.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90e3a22-7eac-422e-b6ea-6dad0541f576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.243.230.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1478110e-04eb-4209-a9dc-e3ae5e68c452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.243.5.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b968148-280d-493a-b55e-ea94c79fa5a3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.244.155.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11a0078-1b2e-4c57-9e55-1bd2a56be78c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.246.123.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b32e19-f64b-4c22-a262-dff255fa0e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.210.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a3d57f-65de-43bb-b562-d58f6dd110b3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.212.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c68e5d4-f754-4931-98bd-070f1ea040e4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.213.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e3564a-cf0c-4133-bb6d-e0b62ad4d9a9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.214.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7198da-cee9-4e98-a352-e66b8f4a0a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.6.212.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0b83e1-69e7-4169-9e3f-6ac7683a6df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.8.50.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c32de62-7d1d-44f0-a44c-236827badff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.8.89.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d897b3-6ee3-4bad-9f7e-8119dd11ad31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.165.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7f042b-8c6e-4314-ba37-52a092e095ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.211.215.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d28047-2c60-4c36-8c3a-40eb637fddff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.218.144.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4009f8d-8c5f-4ac5-bbcb-40ca57f1397b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.218.221.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82184e9f-5012-4ee4-becb-444daa28c7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.37.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11853d92-1cf7-46f9-9100-f11218d518c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.45.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ba8113-2f2e-46c8-98e8-73f6d90e125f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.75.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef738b0-a1b5-48bf-8782-6af3a5056b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.77.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24742efb-b676-4941-8c2a-c82eda227f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.240.154.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51229620-eada-45b8-9836-82659f7e3431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.58.254.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8b5033-4570-4e48-a968-a283897d5866", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.80.101.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d289e0e2-018c-42fd-b1bd-3f99af1158a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.10.42.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a97972a-d9ed-43d8-8eae-67a9629c50af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c297a2-853a-4747-a9e6-f92518d59079", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e1152a-8db1-47b9-8a80-d1a8b83dacf5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cd5198-9abe-4744-b1a2-da22508e3b07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc00c06-7983-4053-b74d-7ca93450ced5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee960aba-3a74-4ec0-bdf9-36b5b95b98a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590076a9-365f-4852-b4d4-e2d064edabda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4ab8de-c585-44cb-ac57-43f7c759aa3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c7916c-6af6-4c1a-a58e-ede76c18e78a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4b5767-8fd1-4782-9dc0-221fd1804990", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ea4086-f9c0-4a7e-8e38-669e108ca8a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a46e94a-2acb-46f3-96ac-7932b94d1a74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a10c9fa-889d-4638-b0e1-ff8224dd7b7e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2c354b-9aae-459d-bce2-37feb66284dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b80113f-20cd-4481-81c0-8835ecf84ad4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f809afa-924d-4654-af34-c7db29411bdb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77e6155-164c-4333-ad25-8e26751527df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de45093b-20d1-48d7-8242-e9c5e121b4b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cff93b-c244-4516-a020-6f7563ec27b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199f5ffb-5aa7-4e75-9518-aea54ce72b62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.144.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4110fd4d-e510-4b0f-bd7b-dbf340e6efba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e66b0b6-797c-4ae5-ae92-5d11d8f1b5a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.149.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d4d69e-0c47-4802-ba2f-7e0fb3ff90d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d616dc04-57d0-4ead-915a-32551a02ba4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4059661f-c0c6-4b7a-8cdc-2771692043bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb33e5a-a25a-4f31-840e-0afd2e43b732", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a3536c-6e0c-4fc2-b873-36b4cd0c2f01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b130a1-d0b8-4b0b-a838-50648ad0d799", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e586f0-7635-46cf-9161-16587c05ea6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40d22a6-4cc9-44da-831f-aa1dad46bd0d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bdbe15-1f27-4d25-9678-9f1a2b41bdfe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e81e8b0-e6dc-40e4-8080-6e0791506476", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7a65da-242a-49d7-935b-0229ce5b670c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034d98cd-9122-45d8-a3b6-d690f77cdf39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5ad2d3-f03a-4c38-8c63-0eefb069d333", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2706e7e3-295a-4bde-9658-114c07a879ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1c99ef-4593-41be-be3e-c7d054e5bddf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68e8711-a405-45bb-be8e-a7d483fd5d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.219.150.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e752be-a1f2-4a46-a236-89b9f3ea9bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.222.22.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5020647f-3f69-4a32-a61c-47a6e451f4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.227.224.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d5ee40-a46f-4f60-86e9-10d1efa35ed8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.255.222.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad57df7-b720-40cb-b3b9-aef53b4f7ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.129.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf227735-9a83-404b-aa07-d85736dca625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.245.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33aa1acd-f425-42e5-a221-91b82cb2bd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.143.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fc01d5-787a-4bd8-92d8-b70e09c73405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.81.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2141d158-4e78-40a5-b3fe-507dbcb00d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.34.92.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6fdcb8-c68e-4698-8f36-63270fc2471c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.175.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc4edb8-685c-4e85-82eb-acf37b0ff023", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9732948c-8cda-4efc-9782-2a791d8a2700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.38.204.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0b52f2-5ffc-4a80-9d4d-263123c26243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.42.249.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d502f9-f4df-4e84-9e14-f1803407dec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.127.137.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278453f7-37f7-4066-8a2a-09a8b48bc094", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.140.161.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e6e0e6-ec26-461a-a7f7-b1d1ecaea720", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.117.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe5a668-6619-486e-bc30-7b346df0bab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b08d61-9a45-4531-878e-6abcb7ef2ca7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.249.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412d417c-07cf-419f-97d4-2192459dbabe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.27.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713bcb65-1c21-4807-8ac9-64d831d1028d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.56.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b43b82f-9623-4ba5-86d8-ee130b96f190", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.212.13.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f428e9-830c-499c-ac82-320d5d1a8224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.41.97.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83df4193-7abe-4499-a19d-40297cd79b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.49.129.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346bef6c-5ae8-4462-be41-83a939d7ccd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.51.192.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73216f6-c70f-45b4-bacd-11a2562d22cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.58.252.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99da6a79-f80f-49ee-a714-f335fd4c64a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.95.123.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d413cc60-b577-45a7-9134-c14700bf60df", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.152.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495cdc1d-1826-4a09-8c11-68c6ac7d251e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.157.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe799f5-dd60-4130-968b-2db41aaa613a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.136.46.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4e5fde-1cc7-470e-9a44-10dd7e8d2cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.168.104.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1dae36e-97c6-4719-9778-6a3e663c4bfa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.177.172.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7db418-8e8c-43ed-beec-6e5287efb854", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900a96fd-51c6-493b-8c22-137040b69b13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca0c227-2c2c-4c3a-9e7d-62f9e9fd9004", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da244a43-ab4b-4e12-befc-7b76ab7288c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.207.113.0']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7597332f-1320-4504-a4e5-ebb24c8b9bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.207.206.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211b4645-c11c-42de-a5f1-5519fcd83734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.208.35.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3895577-ff4a-48c6-8f66-bb0e96789530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.208.48.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a89fd71-c926-45a3-8629-1cb08964f737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.209.160.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fb2b03-292b-46ff-a500-d7bf5b42f699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.231.107.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af3ea8e-d79a-40dc-9a58-555e5bded294", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.44.232.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b644b6-c134-413c-aa80-5514d2c7c7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.55.76.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970a8753-e260-4857-b798-96febbfdfd24", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.74.164.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b328e9-750d-4173-911d-18542d8e2cd5", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.90.227.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4fe2b7-bff3-4af4-bb88-ca75915005ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.102.109.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17405580-d7d9-4ef3-8c4d-9a389280cd33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.128.37.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5f41a4-c28b-4904-b6cb-69a9edb5b63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.156.86.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71c24af-841e-44b3-8c57-9db528a7ee3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.180.211.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09a23d5-4cf6-42dd-8df4-5275dd6fe9d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.216.136.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7b6d49-10d1-4965-923d-1104a68bcd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.39.45.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cf11d0-38b5-4bfa-8b5f-18b27229c650", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.62.22.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd3bf0c-d90c-4d83-a85e-904196ef8afb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.186.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb60b63-b95a-4d46-b2e8-90b0283111ae", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.101.170.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce83c15-0413-46e9-841c-5be1f9878e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.107.41.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a03d00-46ad-413b-a72e-9917d00883e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5319a345-e544-492a-8152-5fec719788e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ad1f87-f639-4727-afd6-9009f2059dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc887ba-4b51-4e2f-8165-7f0cda9cc93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dffebc-37a1-4ae4-9aa2-b4ba795d4150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75e0689-eafe-4b77-9497-7df023195871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2ed5cc-67f5-470e-9f56-e890d042a2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5231b469-dfbb-4226-bf78-78731a28b053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf12930-d8a2-45cd-aff1-7cfa3f5646b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596925f0-b0bb-447b-b465-a4d9d842eafa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7dbcfa-c098-462e-a410-ba14d8877a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b3946d-8f2a-442c-ad73-24a9adaa1bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42dd16a-7af0-4001-93e8-221276d19822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2563ceeb-3534-426f-beb0-efa25b68b0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bbdd70-7b65-45b7-9171-e72cda902d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de74966-9e1e-43c7-83b0-b892f40a96ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed9fd0b-cddd-4337-8837-35cf5cdf8798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c177067-ba27-43cd-970a-c0373ee43538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76319b48-686a-40c6-b566-1b6939d59a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c19005b-03e6-41b8-9020-072f2ea4b392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ac4bbc-5b2b-40f1-9eaf-41d629da8bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac8cd4a-8657-4874-be03-cf0dcefee75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee760db-f197-4d62-9da8-e2ae9ec35d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32807810-7ed3-4093-ae3a-7e19e854fffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4637006-0e9c-4901-aa3c-06fc1c8b12da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064357ef-353b-4431-9622-938b405efe7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfbebdb-e7fa-4047-b93d-1afde48556ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2944c1d-9163-47cd-a89c-7ea65155fd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360c1596-c6f0-4cef-9698-850b28dd7963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722e026f-cd5c-4729-ae27-08b9b62e59ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d80dcca-bc88-4e07-9d96-93b241e082cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba94a1c6-cce9-438a-a3d4-96229653fbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e52c2fb-8f53-44dc-b380-c8fc8b15f6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9058d2ed-e6e3-498f-9101-e6a6a8784ec4", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab51d7c-df57-4186-83ff-9f62126539af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c41185-ac77-40b0-8e8a-cd9d86ac2f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7895f2-ecf0-4638-ae03-e114ba0d049d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1fc1e9-e96e-4ac8-b91a-031a0bf0a74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b63f0a-0116-4b23-8083-fd675f9a197a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fb04d3-48f7-418b-9e5d-22dbd086f82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c677dd-31c4-44cf-8934-28f397a7fe79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.159.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5273776-e903-4ba8-a263-d1840197764d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.248.202.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2c7c12-dc48-41d4-9be1-3802647c502a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.248.205.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236b45f0-3c21-4d2b-9303-ae2e22b80e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c79e4f-82bd-4de2-b408-8f66700172d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807592f4-cb89-4212-a78f-ed6eaac53f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afc0f26-b6b4-440f-89ad-46241f3897b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4422d00e-e48c-4609-b62b-ec9d81e11efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880d6954-739a-4b62-a303-063063af274a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40386680-ce61-4f04-a675-e718350871c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.37.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95a120b-cf14-4c53-bf10-5c1ee7a57dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.36.57.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d932d8ed-da3c-4359-9889-84cbaeed6fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.39.50.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba055dc7-2d98-422d-b7b3-d0e31e2f7e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.236.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64e805d-b804-4b84-893c-8a1eca4b2fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.112.249.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391f3466-1145-4bee-8109-cf74f5fd3a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.118.29.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3a0998-f4f8-4f9b-a5b5-7da5ce16b5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.148.49.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88bdd87-a125-4612-a044-2fa480cf6d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.176.111.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e62071-d505-4d6c-9d13-703e07edd55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.176.126.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84a019c-8720-4152-bfe2-645c91933c7a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.184.125.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c262705-df98-4ad6-9f33-f047882c91be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.190.170.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18f44e8-724a-4676-bf5c-d01c36eb7641", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.191.80.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4df99f7-f84f-4650-a695-bdce82cb2640", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.59.116.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e8b7a5-8ca7-4d54-9628-7475f503b3ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.8.41.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ada785-13a6-4661-a849-090cd65d221d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.98.9.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2193d6d7-000f-4acb-af47-e9794022ffb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.166.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c4464d-e1e9-42ec-99e9-9c9a8ea937bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.106.187.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2518b3-8f1b-41f1-9301-f1321171e3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.205.80.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27d2925-0414-4385-9029-f05bc8955a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.221.12.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a7c536-75ae-4278-8906-a26a5c4d50df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.221.12.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de04732b-ed49-4dba-8cfe-8ba5acd4faad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.221.12.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ef7ee8-9147-47a6-b13e-0c4eb99a9d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.221.13.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaeed8e7-7a6f-4c66-9031-618dc7841e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.229.253.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2691607f-a2b6-4504-b580-6933f5827945", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.230.58.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1466ebfb-3386-4b2a-b6a4-1f93b8e98159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.233.151.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1bc0f9-4bff-4c23-b230-051900222a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.236.209.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34409006-af29-470d-8e8b-75ff89164087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.239.226.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c9ea76-38d7-47d0-8ba5-cf98b5909dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.242.187.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c18a89e-3a10-4b78-b028-7bc9ea591a66", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.243.206.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87676fd-3144-43ab-98e1-b05cdbd1f851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.233.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f88482-d07b-40ea-8250-f9146eb44f81", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.137.29.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22e5fcb-0d79-4d96-a6b5-dd4a0bc9993b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.14.2.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bd7456-1376-4374-9870-858f284b477c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.147.179.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126b30a2-0f61-4ee4-bfe1-f9cef3782ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.157.83.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bf46d5-00e1-47ac-bc65-20f7e4cc64c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.197.0.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595881e2-558f-41c0-af95-a25c7142472e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.204.244.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2cf56e-2d45-48d0-832f-301667d6f392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.228.192.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee2413b-5163-45bb-9bc7-55ce154309a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9773155-cfb2-4851-a311-188e25f4235d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.175.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e1aecb-8618-4df5-95e9-9a88e1d2889e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.133.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c22b9a-7f23-4ce0-af2b-0ed2e3073f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.116.24.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31dee13d-218b-46d4-9a4b-06840a575331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.117.95.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f327a0fc-ab65-4487-bd2c-6f2afbe1af1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.115.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fded2730-25af-4353-942e-2a3782662353", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.202.41.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab0cee7-c6e7-4cd3-aaed-72e0e92cb267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.226.38.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a6ac9c-1e36-4410-b503-d78ee5306e61", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.3.106.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cfb6c2-39f6-4425-892c-eaf1176c24e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.10.68.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25065c66-0b34-4832-b41c-0d4ee9d24458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.133.130.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44af2d7-b2bb-4c00-baae-4165ccbcf45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.135.151.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7255b8c7-3089-4f26-8f2b-f700adc4e826", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.173.48.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1dd65ac-2805-458e-91be-d6b65c41d52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2b0710-7168-476e-806f-c43be0287d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c700b6-b7ad-4937-8ed9-73f172055103", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.180.116.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d795c81-df87-4ad2-979f-a64ceaed471c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.183.191.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea16af77-411f-4ff2-8a57-9b32f7c94efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.191.158.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2e579e-b4af-498e-91ab-4f0993d623de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.24.206.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0580d049-5ce6-4f17-ba10-8865a84ade48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.244.0.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb58b4e8-3a03-4f27-9b76-14a7b38fb360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.66.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3660fd-5e6a-46f4-a877-e315bd9cffed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317eef63-2b19-462c-ab18-ff01186e6f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.96.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a467c90a-39a4-47b6-a630-cffa75e3f9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b30c976-a512-4e87-af3c-05e590cd1ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.55.56.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6215447c-ee0b-494d-a8f8-6c4630d999d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.192.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5605c444-d632-4212-b860-5c4c0707646e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756606e8-a57b-4ea0-a93a-4971b4f71e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e8ae51-4c9f-488a-8540-16c42d9571a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8947ecd8-a5d5-405d-9919-e6dec74a8ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da66c0fa-6f77-43f6-863d-5d3eaa800b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e946044-6e47-4fe4-8261-2e62e4fee02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccba39a-e82f-42c2-bf15-6cb8e19c3f7b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.217.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd12d386-449b-4041-bec9-4432d70c4dce", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.217.51.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d7b1a0-9417-4e99-9a1c-946d717c872a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.14.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64df31a-e52c-4e5d-9eb2-ceb6149f0ade", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.159.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9332337a-030d-4548-ad0f-f3b4bf7a5071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.230.176.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58eeec0-575e-48b8-b1ab-6039f185f8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.236.108.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf193b4-6b9b-4e88-8bf4-65f3e1db8410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.17.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf86e7df-ba67-4f42-abc0-c332b1d004af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.66.76.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d809000b-13e7-4ad9-9da0-1b251aa3dcca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.229.151.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153abe44-ec38-4d33-9d73-a4edd67a1ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.229.4.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8f380b-e490-4711-8519-9bd7e033d343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.42.28.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e517a5-3a5d-4dba-b12d-af52d377901a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.88.205.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7bc30f-f2b8-4845-b34d-b5963664e5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292ef69f-cfd7-4d66-ac25-48bd28de1310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a575c017-a27c-43b0-9a4d-b627e92d0f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.43.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2405dc25-f72a-47f3-8020-00f7c3f68d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e801f3bc-f29c-4ae2-80e2-e958838d1cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0a632e-456d-457a-99b4-44be97ecdea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20603ad-56c7-4ac4-97d6-67e552e6bd12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.231.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45ba61a-ac06-4678-ad2b-d1a5c028b365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9aa288-4ec7-4a5c-9fd2-38ac7b15c685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36e5229-4359-43e3-9fa9-caaac4576717", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21039fd3-4969-4195-8ca5-26e39954894a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40721f50-426f-4185-a7e1-1e0a1e2b722d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44db25c4-d190-4d05-86ff-edce492f9a77", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915c9c5e-bca4-485a-8a34-92161c2c092b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2228fa74-3577-4921-95b5-91fcfa33d114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86362861-2ab4-42e7-981f-63f8e736dc79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324a80bc-52a0-41a5-b5b1-5f3117938580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.8.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b901148-7338-4133-ba37-63d2c64b780a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.204.188.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e9aead-a267-463f-9b57-561438280391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.73.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3458cc-d2c1-43d6-adea-2a1e8ef6f751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.90.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a84904-cdfb-44aa-aa32-327667597b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.228.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8673d83-1ef4-469d-91a3-817a96a01c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.105.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030a20db-2aa5-4ff9-b988-f7ea60485b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.106.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b39089c-c7dc-4b3e-a1a6-c3948d0451a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26225d1d-cd1f-4703-acaa-9402bca26003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0d2302-2e7c-4c92-a23b-6c688cf3e0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d85cecc-1daa-4507-a17d-1c3f83ecddb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c40ac4-0f9b-4d75-babe-48e34affe9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a96da28-d26e-43d5-8d65-de4d750264a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39cab49-f3f6-425b-8d0a-bbfb196ebb95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4aca18-c9c7-4d0f-afc0-55730ebcf497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a825c92-2601-4fd6-8bdf-f6bf39a9c6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c32dfb-bedf-42ef-974e-dc525d2228e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3c13ff-4070-49e4-b13f-97d046b26e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc558243-415f-4d10-a0ce-9864b6f2a7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.54.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896b7d38-cf28-4803-8604-fc5d395df972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.116.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44b408a-396f-4a86-aa38-3831cd9d8b05", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.72.204.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c474059a-ab4b-4188-b15c-a0817a2dadec", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.72.204.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016d3e29-6118-408c-aaad-bb9e309e4f89", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.72.204.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96886da1-d4cb-425b-a946-29a00e18eb8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.196.61.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957dc06a-c858-4675-9e20-8f1018dae37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.33.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e473cf-bc65-48a1-b8cc-f649f51e08a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256d125f-84b0-475c-a53d-1ae9c63031e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.30.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27131b4e-6b54-4bb8-8997-ef8c5a933a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.195.159.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc0dc6a-9329-41bc-9a8b-e32d464a77ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.149.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e820af3e-f149-4f55-acf7-c488f4cabcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.152.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cec6137-a5b1-46f4-a7dc-04fe1beb02d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.157.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a524af3-1520-4a96-badc-376aa1237ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.159.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24676df3-5782-4cfc-bb7e-aca08f3a2bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.165.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e0a82f-361e-4e41-9815-282fd571da5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.171.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9985b537-be78-4387-a26d-8b9772525d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.194.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d1bacd-aca7-4c10-8eaf-c07612bdd16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.203.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0130ecb-3203-404a-bc93-27e1fe6fdb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.207.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f07427-b514-4d8a-bfeb-44b2352d0571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.72.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38652da6-b8a0-4989-bd06-e15d13694904", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.236.242.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddae6fc-4d33-4b80-98e2-ee95958bb37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.131.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a53548-7c77-4a09-9de9-d1fa24acb5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07e2d5b-f03a-4a74-8368-e4632221dce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f760285-46ec-4ecb-ad1a-91a995e45fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff18a44-ee6f-4131-ab7b-d81172a6c62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b24afe-079a-43f4-9c7e-3669ed37c071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d9b1bb-a5ee-48b2-9b17-667067ec3a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22158a12-dd4c-4070-8465-f92371e1ecfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2cb163-af80-4897-94d1-b66ef9ab688c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e81beb-bc8c-4de4-8d6a-fcc1c981a379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cc21ff-8f2e-4e49-a3cb-5626a7150021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f231a5b-dfdc-476f-b5eb-86f2ae154a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12609a49-c6a0-40e9-baf9-6d3180ff8a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8f0244-9796-40f1-8c3c-b68c22d8877b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df369f2-f075-479f-9f26-4f4807173ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da71330-befb-469a-97b8-b4392a6d0150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031e04c4-1bf7-4792-89f2-017e5051b715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262140c0-f4cb-49e8-b076-6362371aace7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9ad363-2379-47d4-bc5e-3395cb38f7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb4b19c-fb96-4f3a-a8f5-96e144e50333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad25b51-c913-4457-beb1-648fadecf30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631ada92-1f1f-4773-8e60-8c91e695610e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4d7a10-48a7-40c5-830f-99d1983da7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a408b296-c38d-4775-a4c2-85914563c606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.0.251.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc99e77d-c6cb-4e84-9208-386ca5463f34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.19.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3903e6-6652-4f9c-b3cc-cbe3e8ffc178", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '136.66.50.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95820182-d03f-4bb7-adf8-f1d27fa8c6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.131.232.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2432302-c012-420f-9012-cdd85ebc7b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.11.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22df30f-1961-409e-b4a5-fcacfa17931c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0efba8-1b1e-4c26-a778-2e70e0397960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.121.83.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648a952f-f251-495f-9eca-23aa9b6e60f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.31.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fafcc7-2dd0-4a01-8227-90e41dab1c9e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.128.246.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7e68b9-9fb2-4efc-8ad0-1ee2295f500e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bccfed-6081-4e98-973f-83ccec248dfe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.164.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150f9954-b886-4b51-b55b-1f588ff3e166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.205.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2902377f-c235-4180-825d-83ffd597c892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.223.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b08cb7d-6414-4bf7-abd8-5a9152c266d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3db842-937b-47fd-b7bf-ed99e0e55782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f55c598-046e-4ca2-a771-c4d063354f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8c605e-44dc-451f-b09e-029835c3c5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.252.215.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b47dbd-7563-492f-9856-f86d37e43ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.252.98.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efc3a48-e4d8-4d03-af78-71404e5abe4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.36.122.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473672e6-ecd9-42ef-ab5e-4a0087d5e357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.109.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac77545-bc5e-423e-945b-b7564d16e2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.168.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457585b7-c279-4313-adb8-75700429cfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.47.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f332e5d0-bbf7-4b35-8ce1-6a1d29fd3a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.9.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80e39eb-c89b-46d7-bac8-95ae219c6053", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.99.99.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd4ae24-7f3c-4efc-8273-5aac215ff990", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.241.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b97c68c-a185-4713-927c-c22c0a5dc6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7850d3f7-23cc-4c02-9bec-d346fc6cb9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5eb6bf-fd6a-47ab-9cbd-bf408d766f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c146f363-2d6c-4fb3-b944-6a21e3bfaea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c7b3bf-f978-424d-9caa-64974be3bf59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0945fb3-0c57-4301-ba09-21cd7ad30470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d871dd-596a-498b-8bd2-f39d4a430cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.159.157.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f868a5d-3a22-472f-9e30-c88fb65bd51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c154957d-efb6-4dc9-97c1-092d1c73048c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da1d4f8-6078-4da2-8bf5-3b1177a53063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a6a7e7-87d3-4495-8a91-b9144906ff46", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c443e5fc-fdde-4311-beed-ec11da240627", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.47.35.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aebf4d7-ebe4-4792-9c23-89055c7ac4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.131.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1431fa-e628-4a2b-975a-c8d40a4bebdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.158.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c136c41-3ddc-49ba-916e-40b0aa6af1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780fd25d-a7c7-4448-8ea1-33255cc87277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.64.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71590bf3-014c-4225-b22f-476bbce6c9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.82.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8c7e24-961c-43f2-9bfa-326f771d27f7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.10.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d6238c-5fa3-49b5-9bd4-4d42490b8838", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.215.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebafaaf-c224-4cad-a59c-1b15e4418986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.145.230.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45161323-5dc9-4de6-8a6a-9649208c62e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.173.80.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e1b1ed-93e8-41eb-b019-a7ebb5170519", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.18.118.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271c730c-7cd1-405e-b1ed-4efb23e70583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.188.62.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8a8d39-5e4b-4607-8a0e-4f10e1109e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5be1122-10bd-4421-8366-1295366057f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.8.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa5e00e-0594-42e5-874f-31d49f2a99ef", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.46.10.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b7f668-623f-48e2-9617-4edf32f4ac90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.210.15.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa54d90-c774-40a4-beab-3866725dedb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.213.1.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc2ba3c-6965-4c3a-b447-550997a581f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.124.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70584a10-04a9-4a58-bd85-350172f13fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.250.254.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ba53ee-f68e-4049-8c1e-873a08f9b1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1956899-672e-4ebe-9b79-f4b9811d2b64", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc27611-09f1-46a2-82ff-4b506dc7273a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e7fac5-ca91-46ba-94e8-fca4c4d1d0a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.111.152.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cc44b6-a7fe-4ad8-98d0-671e97184f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.121.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611ea04f-b7c8-43ee-b701-904fdb315e41", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.218.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf63286-9f85-43a9-8a9d-f1eba5b5f2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e24b1e-23f1-43b8-8474-e8ff49a1e03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.210.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9af9d8-3a23-463e-9ae6-2f80bd8160e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.112.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed038ce-3300-494f-9680-20a8f2172c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.115.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15a70f4-5088-4f15-b237-160c4ba3b15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.117.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196bf9e0-6867-44da-af92-ed4105b78a22", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.182.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622d8c09-4e3d-4f98-a07d-0171237d0e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.200.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a378cb-7f2c-402f-aecc-39c110382caa", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.238.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21183e86-7106-4917-a3c8-459adf464bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.208.210.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c10756a-22ec-4078-aef2-343c53baf87a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.57.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f5a5b0-87b7-4642-a179-cc1c0909101f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10e6f93-d813-4283-b61e-7b5d22db05c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540d3512-da9d-4b5e-bf49-47c9c4051cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab16480-5971-4dcb-8d79-983d5020ce2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31b1b60-8609-45eb-9ee7-01135b5c9086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8c2443-a73a-41e2-b2b1-38a7606fe0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b8eeb2-6259-402d-8088-2f8cc1992c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d7eab9-0174-4a1b-bd5b-191584d6ab4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e28fcb-0adb-4386-a711-2d1f7cba5e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6e615a-5d14-403c-9a6c-090f2c063223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a30f199-a8ed-46a9-98f4-0e08a6668c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e316c820-1bdf-47c4-9c9f-d846fc7d2640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d122cf-a7b0-49db-a3a2-1acdb62c1f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a68d1e-5116-499c-85d6-aa374c4713d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e016b4b8-a2ef-49b6-946f-49b223c47e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1333e38-a797-4c74-b046-c790bb89d841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205343db-fa86-492c-8afb-5842704920a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d48a17-cadd-4fc4-a659-1370e29c9f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217df46b-6d77-400c-bec7-0fb01b6e0328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15856eb-b73a-4e2b-b2bb-5a660d1b1748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2717587-4a5b-4a97-8f27-8edbd2dd092c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e88960-07b5-4e33-a8db-8d437ad10c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c39875-2bd3-4c73-9799-8572b3303b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70ced09-06cc-44f9-ad6b-585e8258f898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.78.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd9a0bb-a7e5-4e71-9b05-bfdcfbd72370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.216.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8609bb38-1233-49e5-a300-4aa57c5dd6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.225.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e175dee4-2eee-4819-93af-13a5e5b87eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.130.11.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1088d90-6761-4ca8-9f1e-67e4c496201c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.112.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb901a9d-56f7-422e-b393-1b29f7ae5717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.117.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9bee6a-1f32-4800-82c1-5990f8a9a1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5452a5-2979-40cf-80f5-5c1e5478aa7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.92.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46681714-676a-4cdb-8218-ece390c9fab3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.76.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dcb026-3653-4027-a73a-f00780db32d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.159.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9538cefc-e89e-461c-8442-72825f333a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.243.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23e77c4-e262-4287-b447-9318ba302329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.52.201.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed35559a-c29f-470e-a9ea-d9636ceef65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18ea357-9dbc-4a8b-87be-c424adc11730", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.239.252.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3882d6-bce9-407c-94a2-7e95f1db2867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.21.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44d9cff-c81f-43f7-82f5-7fb24315a103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.225.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5576eb-9b72-4e5b-a692-916ee96e0c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.226.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f6982b-72e5-47e1-8524-9fd0c66383d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.247.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2186ac0-d0d8-4181-ae35-a745b1af582c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.28.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8766c8fd-dfe4-4d16-9b79-b8be6c14812b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9986215-5cdc-4979-b017-632b55c3ce25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089aa379-13fa-434a-aa11-9440cf3ec6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b156c3-382a-4f13-8458-ced17fe7d94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bd2783-82f0-488c-b43f-27b4a733e26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f1f5f8-0023-4a97-92d4-91ca78f2938d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e921dd-0cbd-4102-ab77-f30cc7d18587", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cc102b-3437-4509-a61a-d8dc166267aa", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08502891-b102-446d-8e2f-3c9b457d51d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.12.193.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffa6f02-2bdb-48b0-b082-f161c16b6327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.138.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31126652-259f-4259-90d2-0ed3197db28f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afdf53e-d0b5-4e45-b0e2-f5dc9bf53bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fdc641-ab03-4f18-896c-04c23974008f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9880e8-f9d3-41cc-b5b3-9c2dedd0aabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e821245-130e-4d67-9930-b4a158e2dd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da584b71-cd4a-42b6-86d8-373a6c03a4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf13028a-12e8-40cb-be75-739559a93a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bb3a67-b41a-4467-86f7-af8d183535d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4f8ffe-95ce-46f5-b71f-4dd1a6c06126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670050df-9156-4d49-8744-843744842178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6710b2-de6b-42ec-ae6e-1a393b632085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd92643c-4080-48b1-b1eb-de6e2a9f2c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbb77cb-0cab-405f-bd56-28e8bd6b4f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41118c33-f46e-4486-a2d9-fde99d276a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82037075-bcf8-46dd-bfa5-1e7cb8ad8f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74188ac-459e-47e5-ac97-698bdb99df37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a9736f-93d6-4312-ae00-8a9092467e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeba295-5b6a-4442-8817-6d5948ac3b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0dbd69-767f-455b-9f9f-344998214cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6f1ab2-4723-4021-b81b-c01037296150", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514d6582-9c39-47ca-923a-dd81014e016b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f93061-a87c-422e-879a-c7c441a4c109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a722dab-9c4e-4e10-bc15-a35a42370a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571ab3b3-4f72-4fcd-9341-aecfd417c4a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50100e07-6b27-4b81-a116-300c77f2961d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616bb0d3-c653-4159-a658-0c585fb48f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347021fa-bae8-4f4b-9138-3d6d41d8d22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f4e754-5e95-4186-8a68-a3502af02955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a06f8d3-8443-47c0-a9fa-5261ea9d9da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d2ce37-0ce5-467b-b365-59839948fdc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5df098-82c7-417c-9089-de281fc2fcc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb09f8a-5ff9-4e5f-889d-24757ca8e580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5b5567-43cb-411d-8341-53cb409860a8", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceantoronto, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8593de30-d93a-4c77-89c4-dad9aac6009b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913eb01e-fb5c-471c-96f0-0ed1d81eb06c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb4004d-2c20-41f9-8a43-b0067cb9beb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23d6975-886e-4165-9607-603fac2e2c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068cd555-b35a-45a7-8af3-0b5fceb4eeb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c73b240-6772-4a80-b636-f5be04198540", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f18916-aa10-4b5c-a72b-dd696efc1521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e671ee64-ba17-4d5c-8eb1-fd79dcc3e60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1924fe3-eb77-4505-99d8-8d2de2c41d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c256c91b-24f7-47c4-aa4f-7542b421badf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4523c223-a246-4bf2-882b-c39d41e412e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004fdf35-0f35-4f75-bb29-eab85eef3638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b2fab4-9626-4ca0-970e-e758de2875b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de45588-b655-4227-8815-3c58b28aa8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a400ab-a26f-4c04-ba04-18820e95ac14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357e1b95-43db-4115-936d-8dea624e4653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adb2f03-568c-4cd5-a1e9-e1861864bf09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5156785c-f028-40e0-a1ce-6d32af0248d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83d8c4d-f535-4baa-9154-7e1b18a5e205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef08d68d-d2fe-4318-a45d-14e37472598e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bb0f0a-3f00-49f4-ba36-f46d0cda6bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58169a0-f9d4-4b4d-a259-cfed9c133dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f09da17-fe9b-4f4e-ac2c-af41d7ed9b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa185ec8-8329-48bb-84f2-58405349205f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59a4ea0-31d2-43e4-844a-83b9f626e5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21800d8f-d6e0-4d92-8aba-1756de2a6a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec2e08f-4145-4086-8660-e14f89b5493c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d588ec-a298-47bf-a61b-3cc747fada47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785ddf8a-9e2b-4175-82aa-7c950d22cf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793b1775-ad23-4b9d-a755-68136e339b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e482f838-e508-427a-9bd0-9aab51515976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba00924e-193f-4c8f-b7ac-0b28da810eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc568269-56cc-4fb8-a069-7145680a10ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb91d41-07ad-4d5b-aba8-c42287ea49c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1c8d76-d711-492b-9495-9451b64e22c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff672b41-67ed-43da-a65c-bb8201d56769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fc4819-0195-4808-9b55-3c626da2c671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956a0702-0f56-4bde-84da-f0791b8bf66d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1477d22-bd40-41da-aa02-40a385f7cb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926da36c-2c29-4687-9d46-f718244a5a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2620e8-43de-42f3-be13-afea79e290d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5698b11a-40ef-46fa-8460-3cd949c71feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1747d58-120a-41ab-a09e-8720a91f2900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87115628-d8c4-4008-bdf3-fba027806ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f38a194-cd5a-4d05-a8d0-929c135836d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fefaad-0e57-4cc8-9511-38b96151f4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f76ee48-9a8b-4025-afb6-a0a74e8e7166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0494ab4c-126e-456e-a118-08eddb0b66f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3d6ede-589c-4900-8c19-e93de772a8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c013a520-5e30-41c9-94d9-f0ea089de6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7968a3b9-61d2-42b4-970d-0d04dde0413d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a086e1-b7a7-4425-acdf-289bd7d5d3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adae10b-0707-430d-8c8a-34f80b925e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdc557c-b449-4c5c-9eee-986bb45b120e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d4cfb9-3074-434e-9c38-c2447672594d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f32129e-3918-4479-b12c-b01a03be4680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f813ccb1-12c4-4c0e-9985-5f08d85a44b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43749c3-ce3f-4473-9905-c819a55f235a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01aa6d7d-3ec3-4e2d-9d0b-53adaa13e12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5d63ba-9ca6-4291-82bd-98a7a79ac30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ebffca-9c26-4034-b388-b9c9f4a85674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac3cb03-20dd-43f3-924c-9722735a74ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4681c3d-65e2-4c5f-9254-b3a954101318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab0f871-4d38-4a93-8401-486acbc89134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988b5c12-3816-4259-b5f5-fdd6e6936859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5b5cc9-59ba-438a-a868-39ce25cec5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557148f8-d7e0-4fdd-96bc-c833c11a252d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b6b394-879d-413c-9d94-f923d806571c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c7774f-aeb5-446a-9b5e-dd30bd52e74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a02f02a-2287-49ea-818a-221159a922c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c699de52-537b-45eb-abf4-a5697e839bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db2d69b-ebfa-4860-a92b-078265ea2b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f1b222-834c-480e-b484-e8776d5a61c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df64832-5cba-4db5-94ac-d5c954c378ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d52ee6-51d3-4312-9645-5051f70bd2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c0bb35-09f5-4ef5-9a92-d0346521ab76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b76c73-2314-4e7a-b7a4-76ea06735e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502e3a75-28ea-4e7e-b595-3138caa001c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873a4606-946d-48df-9e0c-187e8a5fee68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f6f84a-7e4d-4199-9de1-201d3f9f607d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed470ee-7b0c-4724-b04d-1021ac35fb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ef5dd7-a0f9-4df0-bc02-72f4d6a6bc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a87c71-7355-4899-9a42-ceb3b644284d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b6c190-8dca-4cf5-9a9e-b2337386829f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a21160c-326d-479e-896a-367f9c46f0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800c6d2a-dd92-47fe-8766-69648d0fd9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d62964-11f9-4f2d-b26e-21a4f6e283d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be71d51-deb8-40dd-abf7-03620b0958bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903a8eb3-ae40-4e2f-97b7-a58ab08a9895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fab5ca-825e-47ec-a14d-510282e079fb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.48.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7792bac-f88b-4ee5-9745-b3f511fbc5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.60.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2c34ab-b94a-4501-82d6-0e6cebc2e66e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.161.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8919ce-d330-4da4-afa4-20930e20cfa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.164.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05124a11-a7cf-4b1b-9c4b-3eae453507af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.209.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed403e56-bbba-426f-b8af-d5f04d4e96d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80e5345-4703-471f-ba56-118b9b4797a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b157bc-0ede-49cb-9d39-6babe0cb5e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3303876e-5cb6-41b0-bca6-12313f3a69c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ffbc4c-7b13-48eb-b268-d931785a7bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ee3f2a-e74b-49d5-bf6a-95dbb3eb6bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.204.73.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af486f6-4e2a-4c68-bd8a-dfebec6bfa06", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.243.170.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41b0e04-e1a5-458a-89ad-be0a934efebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.102.246.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17446e7b-b126-49b3-aa5c-9298d084480a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.106.132.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cfc86c-c726-4bfa-95f0-b591596f73d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.106.159.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f858ad-16c3-4bb7-b1f7-d81d092dba2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.111.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c99802-69f2-4328-a06c-ea8544884435", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.182.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093cc88e-d8eb-43ff-afd3-84c4f4c01a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.148.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bf570e-f250-47c0-b983-04598d2c50c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723d9477-5466-40a0-9030-a91021218706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc3abbe-8d22-4732-9168-db5de4469920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fb6924-3cb9-4ce3-942a-0df7578d3c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2dc182-3d40-43be-b3af-9da480fbb532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84baba4-0775-427d-b092-3cf26276f805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b41ee07-6041-48fc-9159-a53243b96950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047da89a-d50b-49a6-b28f-2f44d4d9dc40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edde3bd3-e1ac-473e-81cd-80018b4ab1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584ea03c-ff30-4dd1-9731-8cc5bf162cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1605b9-40ea-4611-80b6-3a4a662235d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.40.242.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8958152d-1c43-400b-9ff0-432e7d5fb628", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e5180c-8e47-42ba-a0ec-ec165d715a95", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.95.27.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0ad7fa-11aa-4b64-93d2-29f9dc3068ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.145.196.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da62948e-ad4e-4573-8e2c-2ee9348485f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.108.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e799b4-23dc-4eef-b67f-1b4cac12fdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04bef17-a3b2-430e-9aaa-18c66896075e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6817b8-09cc-4aa8-9b06-a26ac4426c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51d0f79-a0f8-49d2-b397-6aa097e00bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd2461d-1182-429a-88f9-adeb3ac69c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfc48d2-a880-402d-97c8-79f8b57af816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a9de42-ed24-44a4-9e53-21fb9bd5ad0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987e3543-6cb7-444c-9ea7-b316bbe219f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d583a20-e12c-45be-a046-a8824a0e4f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100e6085-b551-41f8-a92b-3bbbf3277b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01199d09-577d-4b8e-af0b-d20007c51292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b79ec07-26d2-4ccb-baca-fcd07bdfae96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9920d0-1d09-4c79-95f7-5d296981b93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b74e991-06b9-412e-935f-583dfdccefa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417dd0e9-4e4e-4f78-96bb-bb24672ee8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41e83b0-7f95-4fb8-bba8-56e66d444c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3f8c10-9ad8-497c-bcc1-3b23bc64ff4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49161c2-1473-44c3-8098-0a91633c8957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfbbe45-07d3-4264-b29b-4f616e6d664b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9e777b-e2a7-4224-b12c-aaf6db968348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa62fb7f-ff84-4147-87a0-d7b69cd2fb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5447ce82-1588-4412-9f39-6dd95f693dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0fadc8-e337-499c-b734-2aa13203259f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bad93c2-e980-4305-87d2-80423c02473a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66344c75-e9e5-4a59-b103-c3e2be39612b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2949902-5480-4b7f-b02b-b2ff71d38f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee2e005-6947-48ac-b756-b53af7b66ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25db1e11-e8f9-4f47-b9cf-74adb19e7fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145d3f23-7d91-45cb-80fb-27dfe60c444e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc45602f-fd6b-40bd-9157-33f0c41bd22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01102c0-7730-439d-85a2-1fd08c2442b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce6f2a7-6a43-4843-a1fd-dfa70257d793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceeb40fa-3bd7-4273-a2b2-ee75515f2763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8b7029-c210-48e2-bf31-f42c3d78acea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aae172c-00f5-4809-b292-4b9a0b6eff45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06c7e7c-1e37-4d60-abaa-15c497676c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62cfcf30-d65d-49c8-8359-7417b74879c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9ed599-094f-4877-9a30-f88db1f07d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584834a1-e0e5-472d-919a-6fc6966208f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef9ab83-31c8-4d8c-be72-c579f1e6ffd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f154e93-1380-4c7a-bb0b-37ec9b4848e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36469126-8c77-418e-be30-57b84be9cdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7360fcb-632d-4aff-9374-b046c55037da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b679061-c52c-46bf-9ac6-d42f2ae73d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3b76a9-2cac-4e69-9f71-308bbe5cb450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755cb4ab-c6ce-469a-9603-d3b169172476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c07985-46f3-463d-a237-255a3c00b9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b905a5f5-36d0-4378-9b9d-9249ad72a79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944414b3-2052-4689-a25e-fa69ef252244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9223b372-05c0-421e-be25-f89894e43291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b2fea5-d97b-4104-b828-47301a44c0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbac5e85-6f03-45a0-9fa0-ba22171111bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315ab4f4-8df0-4fe7-9f2d-847ea1476eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec89f93a-3dd7-4d53-9890-209133bad97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc90c63a-f21a-45f8-b4d8-aebc7886e646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.233.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2255ca-8a68-4b49-ae78-df7f7006da8e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.64.203.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cdd62b-e623-488c-9b29-ff4049767b5a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.69.244.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdef424-802c-460f-be83-c5b0a9d670f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9def43b5-1915-442b-a28d-2d7dd03439ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.228.236.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c2d4ae-659e-4ad2-b9df-940ef32883c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bfdcec-ed2e-4f8b-b474-bc9c231e84aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1b0f0b-1e66-4738-b4ce-60aa33d8f1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3fe662-0e71-4d11-8351-b610fbaa42b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb8e4b3-6b12-4bd4-951e-76b0336177d6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505f9260-8b2c-4c76-8e8e-fb84b63eba16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508305d4-7fb6-4b73-a797-486e0349ab3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ab6df6-8a3b-4af0-8925-20bb1cbfde9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1eef1f-fa34-4e52-a046-158ac55fef49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf77980c-7f31-48d8-9e82-a684d8149e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a64c0d-d835-4d62-8f7a-4b0b393565b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e0ec20-8577-4441-87ad-6678e5d86ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f6842d-81b9-425e-846f-c43e15f34c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748ee1c6-9b41-428b-8c62-e09e810471f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7cfc5e4-c547-4b02-a228-949070002545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db0a848-238a-4a01-bc27-0ccd96097af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f636b4d-ffac-4734-b2b2-a61e7b3dbf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bf35c7-78b8-4b3f-a00d-7e5012a34454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4a9587-9989-48fe-beef-567761dea9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2571b4e-f577-45a1-afbf-28bffc16dcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb79fa2-57c9-419e-abfc-565e3b26a5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4464fb3-8b04-4b2c-8567-683d3527284d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e77ab0-79e2-4be3-8fca-ce0ccd7a7399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1575e6de-3281-43c2-9afa-02841fdaebaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75845ca1-2992-4480-937e-4ff10703b967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dfa832-6331-47b4-8b96-7a635efd8044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--face05ce-b19b-42cd-8e08-203116c13fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560aee13-0cd2-4c2e-9ea3-8b3373b62a86", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f02da3b-7554-4cd4-86df-dda2062f0ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad601851-d4d0-447a-b1e6-0419b8b34ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0447c710-14f8-49dd-a416-e70b2e35a0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cde2fc4-6bf6-4037-b0ec-ef26cae455e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae44bc6-9073-4b46-8e9e-36b4617e3b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b484f75e-fb52-4811-978f-696b31e71aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37b6067-799b-4614-8569-fcf1fa9a7d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2365f881-ac76-4d07-a8e7-773515e10f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fb3b36-4a3a-4640-a8e7-4cd44471675f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52c5e6b-ff95-4a5f-b3dc-b123ac3157e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d7b1ae-d34e-497c-976e-5bcf96c19a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a44dae5-635d-467e-a4f4-95c4b7634b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c2c73d-1b48-4d85-a66c-3296859afdda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09d621c-e0b4-477b-a670-624a1332ad51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e942b6-01e5-4ab7-a49c-680836c16c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db0d3f9-2b70-44f1-892a-c8dff3bc0ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ab8a81-9573-487d-bd39-d8e33c1ac097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9e490e-060c-4505-9e79-6fb339d69260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682e94ec-7b7d-40f2-a1b0-119740ead874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396bd476-0f4c-453e-a0a7-42389dda406f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9c431e-8d5f-42d4-9ada-a2fc581509db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253effd6-a8eb-4a88-8f4c-b14000b69261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ede260-b790-4f22-8652-29ed7a249d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8ed730-dc7f-4e8c-87e8-37414b52fd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8605bbf-0c26-443d-8696-29bd7512cf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac8beb0-b07a-4557-b29e-39447f38d3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aecde24-a160-43c9-9768-c9034b7b7401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a526159-d502-48df-8d8f-a8f61fd68627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb743beb-e780-4926-8fcc-f5b288b83edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d068818b-dd8e-49e8-a64b-4b10abd2b587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1d3de6-4101-401c-a9f4-fcdd3b5954e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ab3291-9f08-4582-80f4-38bc81543bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c90d29-b723-4c8e-9bba-c5bc2b9e46b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb03a7ad-c507-443e-8388-3ad421811b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777ecd2c-f7d4-420e-bad3-e0c71e25658a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2204003-7948-4101-8a30-b2c44fbbf914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8164c956-b882-4602-822c-218bdf27617e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2c1200-89e5-4504-9615-1622ca2f8eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9a7c55-ccc2-42cd-b4ee-347521e2d883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4a6611-6f69-48ca-9c82-8099ab9edeb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8822655-706f-4f45-a646-e65b617ec53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2616ab0c-88fd-4000-a747-9f2cc34bcb17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb80e93-4a07-4486-961e-1ef6899dbbe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390fa44c-c636-46d1-b5a3-038544015ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b7533b-027c-414d-94fb-e4a345e56ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a17356-393e-4496-9c9b-41ab973acda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6528a23e-1a3e-4024-97af-24728567547b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce77db44-97d1-4954-a3ac-396848d0501a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd50fb6a-30c6-4e4c-b226-199315a6eb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c9c540-0fd9-48dc-8ba8-b4c7a6e78a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d10c67-07cc-43fd-9bce-be2f8da55b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ee296b-9993-428f-b4b8-dfdc274d868c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06308138-66a8-4b5b-9bbf-4c37cdf4a600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b6bc5f-fbc5-419d-b124-1c1494a738d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d908e43-03e0-486c-95c0-42039749afae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f719a3-afe9-43fb-b140-c92785a9c31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64ea27e-b543-4556-9fef-238a5f05facd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea7dbe8-a9a1-487b-a1a4-9a72563846cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99114d2-3b57-4803-b79d-27c17c57962f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a541d8-6522-48e2-94f7-cb1ad49a70e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d84cd5b-7341-45ff-ae06-022d5e57c059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9fa997-c5e1-4cfa-96eb-48a01196e49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a9e96d-e6a2-4afb-9306-32550f7c46a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50b1a28-6462-47b4-9c53-ddf6dfe82f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b1a73a-3c64-4540-9e7a-f275f8bc19fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbc7455-9d42-4d35-bc50-7654259b7fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9208a8c3-4ccb-4e2b-a1e7-9970de2a80f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc17986f-8bde-46c7-a566-7b52c2a90094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6277dabe-8233-44c9-bfb4-d069168dea01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1fc8a0-f35a-4e51-be72-bb2bd86c9ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14722140-0b3b-4490-b644-d16961904426", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db0f7d4-8a25-4231-bfd5-cc3515757398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ecd2e7-819c-4660-a467-17806cb00f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09523f3a-89a2-4f48-9181-ca70af60d394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963cf7af-ac9c-4770-baf3-e6d537104312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2760ce-754f-4cb2-9746-659b3264dfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be156f51-d7ba-473e-9db4-467527921f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad46c94-3dce-47e5-973e-ea0e4c9d1d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.249.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe477bc-47c9-4b43-8277-5f3b9e6cecc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d644fe45-7e46-4173-bb70-e625e3ebe2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.141.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3a2b96-bb7f-4ce1-9837-c23c2d2c669f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.212.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b4a758-6010-4804-93b5-5c91ca0b807b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.0.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e9558b-8439-43fb-8b2c-f8220b747347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.148.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb12bba-bed2-4256-b790-c95e1da3d426", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.185.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5aae08-1a63-4837-bd39-559146144513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b203060-71c5-45e1-8b91-28d38a9b22cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.21.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af95b881-4960-4c56-80cd-30ff2e4011c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6288e2-364f-4e64-ac38-684f41d2d0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.0.125.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76780df-319c-461e-8f0c-aee045d225f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.134.68.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f16c2ae-f045-4666-8da9-cac5dc351839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.195.243.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8b6de7-00f2-4ec7-9d22-8ee8e15b5f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02de518-5eee-4464-b61b-efcb689d48b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba85ef96-80f9-4f0c-a7d5-659b8a057b42", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb20f8b-5fa3-498f-8d72-0004db15546a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f61f913-4b71-4e26-962c-8f490935a633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b159eb7-8635-4201-9508-621608e671ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af8792f-777d-45b3-ac95-d98647f81cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.201.73.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cea243-d314-451c-8ad7-1063b6bbb539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.73.53.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef74b4b-10b5-44dc-b124-faa049b8d40a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.15.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff79c6a-7e53-4837-b7db-229055d69390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835dad7b-f303-4615-8dde-da9a33043b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8633082c-b306-46b2-b3c0-10b52f4ddf92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab237b33-e774-493d-adbc-f998c5504ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb8126d-680e-493d-a19e-32de31d72527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c15bec-d99f-4c68-b387-55ff75b23136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcadfff2-afaf-4bee-93bc-25843b0282d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c056c9d-5551-44da-82f1-e8d6580896ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885ea876-5bf7-4569-a672-6729aab25f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.23.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe1881e-5335-422e-a81b-2dae3be76c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.13.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f04c34-ed95-4fcb-8171-97cb4406475e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.163.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8d36bd-f572-40a2-b5e5-c8cbc5ef48ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.197.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e75595-6f28-4d1a-879d-8eb166d99cee", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.214.57.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c0235c-72d4-4e8c-a688-dd46df18eabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7c6704-6f40-4754-9bbc-69486f4e2c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f0d765-9df3-48d3-ad28-cc3bc9d9f259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d293bfd-0f94-4441-9381-c252c71f845c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73da6558-3df2-418f-8ba7-91cf22d44118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699e6514-86aa-4473-b72f-4d25b7f547cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e226b569-9c7e-4254-9529-844b01ef9d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5678b90-12e7-4e71-9f5e-0e4528ce66e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010d2879-66c3-4f60-943c-a0f316093efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.58.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc94b33e-ccdc-4714-a2ec-06b023f2451e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.144.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4247238-6608-4aac-a8f2-6d67031b4cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.154.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fed4bf-49b8-4612-aab8-42d2dafd7b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.19.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4e7a1e-bf47-41e9-958f-d6f17ecb84ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.208.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2566eaa0-7d68-4e35-a477-65d8bbfb828f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.229.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f198a3-de5e-4f26-8c3d-d1eebeb7dcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.95.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b0781d-6876-4039-bcb6-c282417cee9d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.129.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084580ba-5e9e-476d-b486-4393a3fd9017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.138.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f449949-7fc9-4a92-b918-9b732171e72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.143.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f939ff4a-b1bd-4b9e-9105-411643aead44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.151.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397e19b3-9716-4cf3-8b61-4411eb3c78cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.247.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fbee7a-ad00-4fb1-a917-dd472ae08727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.45.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa90b9a-7e0f-4276-a28c-2059c2dc6ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.66.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2cc224-cd63-4756-b48b-4924d3b3dcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.68.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57073108-a668-4e67-972f-6c28f00d31b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd0ac1a-0e80-4361-8ed1-ca855cc5c531", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c403ebe-f5b6-4ee5-8eb3-9a30422c4cf3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1364cdc-b724-46cd-967c-ea41aaf3df32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe388e6-168c-43da-a3cf-4fca023c1fb1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106a5ff2-1585-443a-8665-41d9344ae6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.25.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36eb4c49-1ec2-4ef2-8bae-48773898672e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d8e91c-a1d4-4f59-b774-e921f31691ac", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.46.238.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ae06de-7a8a-4a98-99da-f1227f72cc22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.60.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3780c049-0892-4266-9be8-a09b87358b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5a1d14-a56f-4128-b561-d79dc61cc370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61f7db5-e4a6-4ef3-98fd-cc0e1888ecc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.192.146.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf66707-8673-4ae2-85aa-7d42faa93868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.157.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb9a2a2-83ff-478f-8a1a-46e52138b431", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.123.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be316c5-0db7-405f-acae-820c94a93166", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.61.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a443caf0-fd41-4a55-bcb3-6f9b38eee58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.61.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb46297-9d40-47f3-8a26-3101d6c5c7a6", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.152.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c45d422-bd3c-46a1-87d1-5e27a939a14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.169.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc3c241-cc54-4455-99ab-50cd3343bdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.171.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3275c81-6848-4017-a61f-785ec96c0a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.195.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fbe179-19c8-442e-9077-a5d0f356b6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.228.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba736815-0b41-42fd-8f91-791af758091b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.120.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa83152-a6b5-4754-be7c-1b9bc0fc213a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.223.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfcdbc9-15c5-4732-9e59-cdfbc38e57ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.94.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e65fcf-2266-4ce8-9a88-25971e9d4384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.95.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd401b0-abfd-4698-82ff-59a3368df414", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.158.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7e9661-4ade-422a-8d81-869c9ef3cb1a", "name": "Malicious Host", "description": "Web exploits: vmware-vcenter-sdk. CVEs: CVE-2021-22005. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.21.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdf7dfb2-7b06-4c8b-9974-66871eeb6a17", "relationship_type": "indicates", "source_ref": "indicator--cd7e9661-4ade-422a-8d81-869c9ef3cb1a", "target_ref": "attack-pattern--a841d696-cb24-420b-9d1a-d7f4149837fb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--714a2836-8cce-4c31-903a-5978e968f1a4", "relationship_type": "indicates", "source_ref": "indicator--cd7e9661-4ade-422a-8d81-869c9ef3cb1a", "target_ref": "vulnerability--144eb3b7-226c-48d1-84fc-614d19a08ee3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ca3b09d-4f16-47c4-bb74-dd81bbe9fc00", "relationship_type": "indicates", "source_ref": "indicator--cd7e9661-4ade-422a-8d81-869c9ef3cb1a", "target_ref": "vulnerability--689dc27c-ebc6-4b07-b6b7-5b76d64f0399", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f168e5e5-60fb-4d66-bbf9-6566c4007c18", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.80.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4914092-4d9a-4f74-a8f6-dbc523913c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.66.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e462e6f-7141-4aea-97f3-a9a019c1e8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.66.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b19cd3-4b78-4abb-bcb4-f435392e408c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8394c729-64af-49fc-ada7-a873415659b7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c807ede7-7cb5-4c12-8e39-c1ffbda381da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1d6d5d-ce8f-48a5-ab02-4daeffc13b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94de47b3-5661-46cc-af46-03d867d43d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f7c783-7a96-4e1e-854b-849a026da4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.19.156.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd26bca9-3235-4229-bc8a-54fc47115c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.136.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3328279d-83b3-45d1-9d6d-34fe6668a949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c06e57-50cf-414c-b8de-fb0be1f901d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.120.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcfc0b5-925a-4a10-b34a-ee45d5d29fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.57.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cb9e39-a3f5-48ba-a085-007221572f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.169.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0c0a6b-a180-4aa2-80d1-e91e80a8c6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.0.209.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a28c3b0-6ab9-4d7d-bf15-2daeb03377ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.0.220.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed838e5-6e4d-4254-aad4-0a85d75e5369", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.245.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156fad28-928c-4759-880b-5f3cc338b575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.210.245.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57f71b0-7414-43fc-a5e3-bb97bb02761f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccbf74b-4254-4958-acee-0d703839f907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944635dd-1841-48c3-8ab7-4edcc0c05405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c15201-46c3-47c8-9136-5f21850e55c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b0b3a9-bb94-4381-8121-e6389d703197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4c7df4-5e9e-4a46-952f-b8dda27db4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b063f399-89f3-4911-8d59-b0e00c28cc57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6502ca1b-0c15-4566-9711-f33db7896664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b931a73b-8e9f-45d2-ad30-5aff5f28f739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0f634b-48d6-4d6f-8347-547b1544c986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea06608-a9ed-4c23-bb07-438accd5f307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419159d6-822c-4fb0-bd43-494e103ad8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f39fe7-de6e-464a-9387-65a6c326573f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0495567-5405-4172-a1cb-e3af79788c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f28310b-5819-4c61-88e5-04a0d87c89fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6715c48-d7e0-4918-9dd2-f5cd4fb6081f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb46ae3-e10b-41a8-8f0a-7c49f1e3fa20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2194c4e1-7eba-4250-9c46-d392ac551e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736f69ec-78c4-44e1-910e-ad1def76ac0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb793b6-d866-4bed-be95-5cdbca0a1f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98076ce8-fd79-43e1-ad20-d7208feae235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3649722-1f55-47ef-b807-fa3ea0a1c5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5265b609-aacb-406b-9f45-847cf442962b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd203de-a8f1-4722-993d-03ba4ad465ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c7bc0d-00a8-4d84-bfb0-b91d91df51bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4509ad-da4d-4ec2-a318-1fb6816a138b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db07c0a9-f71a-4264-9312-0992c8cce35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50de4eb8-fa0f-44dd-b722-c2be4ea803cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011eaf91-c20e-418b-8374-01a2cde831e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d0be57-24b6-4be9-84f5-1b20f2798c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda1d6ce-867b-4f03-8987-f1c8504ee81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92352c7f-aca7-43f9-9150-fd672c5d04f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a8c5af-fc9f-4436-a8b6-8cd950e0d3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f821f33-8566-4055-a187-b868a00a75eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9d6154-39a6-4c38-b7a8-8e87fe958a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b67e0f-4938-42c6-8acd-f5a5e3cf516e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712e328b-41e9-42b0-b7ed-b5f46eb0f80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fc5459-cf64-4489-a721-0df3f1444263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c2860a-28e0-479d-8039-a0d04b115f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca8bed8-45e1-42e7-82dd-a99a0355c3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce00f38-52dd-427e-936d-0fd697362d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ae5cf1-76b6-49db-85d3-3f5df87052f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ad6cfd-2d80-4f54-bf30-31a37b8c95c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94edbf0-10ab-469b-b8bd-5e3d96680fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3849d4b3-c5cd-4315-b5cf-5a912dcedb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1213fe1f-1b0e-4d45-a051-6849e00bc969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912b10bb-084c-4ef8-837a-a090cc91222b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3534912b-baa0-4462-878f-c85049f6b3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cef515-9043-4976-b8e8-c88f85c56fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee5d4eb-b84e-4d89-99aa-52724af4be98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6c4b84-d2d3-434a-aa26-62fff8a1944b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad91c927-b0cd-4eb9-befb-bd43293bf71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd6d7bb-a0db-49c7-a2eb-dda68f7ce9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6c9075-18f2-49f1-9a64-4aa1283436cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d2bb06-1605-4e05-adac-5eeb392862d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5705ec-8744-4776-b95e-1b880a6a14f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5497f6a5-b684-410a-8d00-b0c3f8d04299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d676d6ab-c034-443c-b671-a5ee38fc023c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f5ee69-4491-4892-ade4-7b168fe0a85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae53894f-466a-4825-8b18-33ca7cf42fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e5ea55-4334-4b5f-bfea-a5b10bd85498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b693bc2e-0e7e-4476-99da-ed50b060abd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6bdb4a-d4d4-49bd-b28f-187901c5eca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be73794e-5146-4036-845c-f2553a0e86a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed5bf99-d9de-4a35-8f17-bfc8bf669cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f3bb27-f0a3-4147-8e65-c3f987dd841e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1139dc95-4c59-437f-9f66-09ebf5f8e6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e5b16b-858d-4dd2-918b-caa8122808d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea65b09e-066a-4c3e-837a-68c7bbba7dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7b6cff-f854-4871-8bc5-f72f2c17ed15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7296af-3bae-4cfd-839c-ea9efdcafa29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9945acf4-a266-4ae1-ab5d-62bb56c43f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8f177f-a257-47d1-b0c1-068f35531295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946a12b8-84bf-47ff-bdc5-e1c88cd0403c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dc44a6-50fd-4cfc-9049-1fe9833c031c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d9f5a8-8fde-4e13-925a-8ef4a1bc389d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04de5dd-05c5-45f3-af1b-c2c1f5f3786b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9258646c-5d14-4e06-bc2b-3ca8e1e6105a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9303bcf7-0d2c-42b2-9d11-e719a0807626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c6c364-2575-4b5e-892d-c5a7db2a9616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961674a6-994a-463c-8b6c-a8b769839901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d78893-f0f1-46cb-95ca-d2dc6d98cdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b79ddb-ba65-4c3d-abdc-32b5c8794c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c25465-00aa-44d3-9916-9d6c5d04b0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f280d804-4343-405d-a194-d46827e7636a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8abda7-73b0-4bd0-8bd9-eeed164b2ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb183ba-5359-4d34-9478-0ad91c40381e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baedd4fc-a1ec-4f66-876e-6bf1544f3ece", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480ed67e-9526-4a1c-888a-3e20699dfdf4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.130.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534a25f9-8d90-490b-b652-46047854aaba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.130.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf24d72-f8f5-4263-8389-5bc6b8e9cf75", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c1c679-3ec4-4e92-bd9a-5971ca4b9d43", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb07271-f035-4d4c-b0eb-332dce58e801", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.181.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5703d50-9162-4d08-8c4f-0a96c4a2bad0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.215.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca61463b-13e3-4144-8560-88dcbcbae061", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.233.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb8f14b-468c-43b3-bbac-1e348afee6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.234.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de235216-ace1-482f-a9be-4d79c25c2f69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.235.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c60ec84-d111-4b8d-93b7-ac17de4df0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276fd00c-fc51-49ec-a3b5-125a4bd0bfae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.43.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397d6590-457e-4bb2-bcf0-3c8a8664589c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.91.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624ffaa1-e8a0-4ab2-ae99-e9b12adbede3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.255.235.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c64d5b-9051-4cfb-9799-d9064f27499e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.33.178.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53a6621-99b1-413f-9fe2-163592f08b38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad23b7e-4c54-466a-89fe-a9fa341e837e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.4.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce360dd-866b-4a0b-b36d-69cad85e59f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.175.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2716d43-65ca-4940-bf00-7ba668892caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.206.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f8a139-b741-4b6a-99e3-1ad65e0ff499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.148.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d9fd96-809d-45ef-907f-5dad856edfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.217.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf2b803-9bf2-4085-b940-5a40fd6f4655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.219.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a4e07a-e930-4408-bca3-b2c2b1fc6f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.228.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8e5bf2-99e4-40c9-9c83-181533e5d527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.237.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bce589-7406-46db-aafc-f2933ffabb00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.251.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180853ae-98b3-40d0-8540-c7096e59a58e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.132.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5308dd47-878f-406c-ab7d-b0dc70fbdac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04780fe-b1cd-41f9-b828-cafde443704f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81ddead-3095-42c4-9550-fa3627549a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb7f124-e401-4078-8ed7-ed0865d80885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c5fa91-a5df-4f47-a569-968460d8df5f", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56900058-fe1e-4c54-82b7-13d1daf8c42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5189b4-0e89-40d6-9429-1f3196489913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683f5fe1-1763-4103-bbad-3396d2d2ab6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9dfa80-8f95-49dc-8983-07eee72cb2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc82790a-1fda-4c4e-ad0e-eb7c4f8a06e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb16107-bf97-47e6-8495-cd8044571209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6d842d-875f-42aa-beda-76b3883fc617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc70e6ae-dcb3-40a0-99a2-10b998378f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be276e75-4d4f-48c9-b44b-9680b55318fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e18313-aeb1-4950-84f0-9cf5a40948bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e22274c-f813-47af-a0db-aebfd0198452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bb146f-73f5-4cd8-b9cc-891643b5e67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f44cdf-555c-46d1-b012-6dcccf73adad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d40c609-e937-49ea-afea-b4d89c600ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79b677a-af68-4c08-866d-033a89742bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb60192-7dcb-4138-ad57-24aed57eccb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf95698-b880-4201-9728-5394f1f993d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd0f15e-f540-4296-89ed-edc086b15c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714862d7-03aa-45e2-8bca-b69e5d3a9c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700b8906-97bd-4b0c-a53f-3e0ded209c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.150.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62de84d9-8318-4064-9c0b-4378ac914ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8dbe79-5623-42f8-8204-e1210d6ac04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22de868b-0b2a-432a-90d3-ac7c3ec142ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccb093e-017c-4438-99b4-a4ddab069666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1560b9-e6ed-4353-9c77-75ed25122007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0eb892-25a6-4ba8-b98b-41eb6a453772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2af930-450c-4e5a-a666-5241b1d0f491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3e180d-9193-46fd-9290-471a3764b001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ea1d3a-ec32-4193-8fa2-ff7774fc6275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eefbb58-21ce-4ae9-8964-1f7185b6e030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4163cb-1169-4b7b-a527-1bc5d92fd065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784a7873-5290-4731-9466-e3f16459509b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f3e86b-6afc-42ac-bf34-5110f0f1169d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f23a3b9-f95b-40dd-974d-0d79fb7e8eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f67d485-86a5-486a-a4ca-f18ee6049630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061934b5-3bba-4c1c-8aaa-279a0b74e757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04afa5d2-1f71-4a1c-a8f7-db66812032a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb2c0c0-2efa-43c9-af46-668fa711d338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401be111-c7a0-46c3-b231-4c3039f30afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae44da2-28e4-4b59-a809-fe6d9b0a3a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e135e9-e1c9-47fe-9823-efec4db89ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0290c0eb-0209-41bb-a55a-c208341395a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a222d5-9fd7-4b98-8803-9249eabb2fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311f3f3f-c08e-48bc-9873-2078d70e0bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e551f2-a995-4e39-af0c-6e456384c6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e7a437-8b39-4065-a5b9-65aa75c09670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f01390-38d6-498d-908e-72f2977658a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b54eb0-afb1-45dd-be8a-ddd1b2232b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6464c04-61df-4ff0-a45f-c2dc41aaa66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcdc041-b271-44ae-9855-ba9172a57ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a71277c-7b17-4c63-b312-8924b7cef5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07ddd48-af65-4c53-a011-101f0e89f39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e21e1b-a1e7-45c6-98df-f9aa8611386a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4355b75-3a62-4a56-8595-5a026096c949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2ed9d3-6a55-49e3-994d-ca2921191af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bec482-0f27-40d8-9a56-df9aabe5ce81", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.227.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783d9cb5-783d-4752-927d-3de39d39cc59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.252.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dc8ba5-40d7-44e9-b907-b543c01837e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678fd1a6-98f0-47bc-a7df-b2742fecbcda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08744a3-d752-43ed-b440-b3944071d639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.32.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb6f34b-4061-41e6-8035-caf94bdee718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446b03ec-3db6-4a2e-8397-ae71b8c58e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12aa68c0-e7a4-4459-80c0-e731f1863a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ff3c02-86fe-4eac-a8a7-0cf5d61e8916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b81bb4-0718-4b7a-8b4f-e6ac0c4fff6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a60626f-0e02-4650-bd4b-6e20ec30c007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5bc2cd-15b8-4eac-844c-84f1af29b552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135450cf-9019-4acd-991f-68e4ac1f7382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fa935d-e04b-488f-bb2b-bd06f0cf8218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c6e49b-868b-4a1a-82ee-a03e9a000aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0248ee-62f0-44cc-840d-991cd73f6a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc9168b-9a79-4d12-87b4-dff9a38692bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b6e070-4e51-4f12-bce4-5f701d201cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e0a6b4-2bab-4f23-8684-c13721cfe36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772b1219-fb29-458a-8e10-c8ffc542e8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40e0a77-a56e-4ee3-8829-c989e5062db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4937d5d9-1292-458b-8227-413d2f2d95d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2d6543-4013-42dd-8bad-ef1bb3de42da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4206d8a2-d24b-4e7f-9635-865f27d36994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03c2822-f2ae-4611-91e2-2c52c3bf1da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280f4e0e-467e-4251-82d0-89110985c508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3687031-ae92-402b-9d68-1d69dbac0cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e6a4b2-2fcb-4372-a94e-47cdb4d8ed54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459c9496-c9c2-4619-8440-1083eb909967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ff867e-09ba-48de-b50e-0b98c2220f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.171.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74add943-dbe5-426c-ab1d-789d5738614e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.195.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e36f2a9-2dae-4bab-a0a3-fe02edc57f16", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.41.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42ba9c1-5a28-452c-8b0c-eb6adfdbd1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.118.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b883921-d2bb-4a30-a3e7-4bade2522577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.142.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51caec79-83a0-41bb-953c-e25797de009d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.151.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68518494-ca9d-4b07-9d7c-2e49c263ee50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.90.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be89650c-7541-45a2-b1b9-50dde1390f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.234.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4e066a-2d09-4f80-8db9-0799adb01181", "name": "Malicious Host", "description": "Web exploits: apache-solr-admin. CVEs: CVE-2019-0193. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.255.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74be8092-385b-4836-b541-5f67c380ec50", "relationship_type": "indicates", "source_ref": "indicator--dd4e066a-2d09-4f80-8db9-0799adb01181", "target_ref": "attack-pattern--a841d696-cb24-420b-9d1a-d7f4149837fb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59f33fa9-2642-4f54-beb4-bb777fba9178", "relationship_type": "indicates", "source_ref": "indicator--dd4e066a-2d09-4f80-8db9-0799adb01181", "target_ref": "vulnerability--33b94e6e-8bda-4d2f-bff3-a39b3d5e3187", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd20783f-047b-4df7-90c8-8912727fcb11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.70.75.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d84c91d-12c5-465f-83cc-13fe2c431ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.126.6.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecbddd9-1644-429e-8138-9d8538c5201b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.117.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207e9b8d-e370-4b4a-9af8-54eaf7c859e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.117.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5f0fbe-1c2f-440b-990e-460bd438a443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.108.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eadc4bf-8885-44af-99b4-310186687694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.10.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4644e2-e6ff-4dfd-91bb-225dfe2b7999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.142.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c131b40-4cd2-49fa-b882-d38a255427a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.119.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85449b0b-2700-4816-a54d-a484223f7adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.126.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e4d5af-74ef-4d63-8c5d-5c63d5a8e070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c79e32-0747-4654-9747-fcd9dae424c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b99afda-68d7-4e4e-b9ec-b2b17f827744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bbd4d9-20e3-4f37-9337-ded2b8d50db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40ff18d-8664-4d92-a1e2-f6792dfd50d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e53643-13fc-4a94-b582-7930703851ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0592dd-5e22-4bb4-b9c2-f5f2922d4b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5aabc9-dfb6-4432-a01d-b909ee6f2c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee052a09-f41b-425e-91c5-cf2725811c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ba09b1-925d-4897-b455-15b1237978f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf6ec4c-cd1a-4385-82a0-c531b15e69ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f809ff-f760-40e6-bfd3-2adbfb530d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcd20e4-9382-4834-a522-33c1c7dfce73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e2466c-8825-4c35-94fd-1fabf2c36be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c783cdd5-8968-42ee-9353-5e2ff0497511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ae9499-3c82-4fa9-b2d2-1299f9e93860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0f2a32-66b4-4dbc-a945-4a2a4590bd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0874573-480a-41f2-974f-b880185353bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759c3aa7-a256-4dde-a61d-52fd9106f173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15726adb-dc9b-4064-9a43-1f9a5d80ffcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5904d55-821f-4dde-8bae-5129073effa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efa6d1e-4938-4c23-85ca-fc954e4dc328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11105907-aafd-40e7-8eb0-d3de8c756a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3952e177-5368-4fdc-a5f5-d777dd50d64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbd06b9-654e-4593-81f4-a9724ac0272c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b808431a-12c0-4a70-a975-c51ff5454de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da50db6a-7160-4a74-a1b7-6ed6abbe3283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d30bbf9-6677-4775-b5fd-6defa771bd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef89e08-b2bf-4554-8bee-c0441adb5789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4366d8ff-747b-4930-875b-56a00b33ea5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eccbbf0-485e-4baa-872c-123932354a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66e63fa-3d4f-48b3-87c1-744820c4ad18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe868348-2abb-4b41-8a20-29e50568f01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc00bf49-2d7d-440c-9516-21c5dd13c639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18f15f2-a2d2-408b-a445-8bdb644bab7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb6cb71-39b8-4514-b76e-3fdfc31f46ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0e4a54-9c45-439f-a029-e9ad61b65934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb215633-4303-4e9c-a725-a8d072966a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c647e9-71c5-4599-8a7c-42d16d8993ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b015ad8-5127-4a7a-a9b4-198899fdfe63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900ce5a7-6713-4b94-abbc-81a75e28fc4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802060fa-49e7-48e6-8fab-2077c911dc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d820d1-aa27-4c84-9596-9ebb3fc70efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fa0b39-3c8a-463a-b923-b27cc29002bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdec73f8-8ff8-4392-b596-78be2117e56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bc6308-4b30-4d12-81d9-ac9b9c621769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70403c6f-a4d3-447b-a0b2-895282e2866b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.109.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5526dfa0-9dfb-445b-ac98-b5fccdf19f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.150.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df536c5-966b-4842-a053-fcdff41ed45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.172.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12044589-6b9d-4e53-bf5a-488af2b8dddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.194.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09887105-9817-4ae9-8e01-4c6b9d29feff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.243.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0511898d-0366-462f-b150-5194f268aea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.243.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaff428e-881a-4d81-8bae-8cb9810c5008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.44.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d58fa4e-d7da-40ee-ba0d-acfc7fd47ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.93.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1414b30-545a-474a-a4dc-f49aa99fc047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bb736d-7547-4681-a1f1-45aeaac8b421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.164.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c064193-b5e9-48c2-926c-ff864473e454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.168.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b516c0-c380-4793-a910-1f250bd5571f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.172.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee83a4fd-0520-40bc-9078-e6f24fd2a71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.65.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1478e2-6bec-42da-870c-c69dd6ea4de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717fd9db-7ed2-4019-b3a0-70c1c635f18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.152.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce32515-17a1-434a-8b71-b035d4aadfa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.174.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed3d9de-2eb2-4785-9dfb-dc1a8278c196", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.22.253.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc65a92d-08f1-4605-9e02-5ba0f53d9f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.180.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25190df7-c543-43e1-bb1b-6bb0be591c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066767fe-a9bc-4def-abeb-6d0af336b623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76d42f2-2ff8-4334-8da0-43b3223c5971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466f7854-0985-4e8f-bfcb-be0434d5adaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e4d208-74bc-457a-9ea9-74c7f14e33c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e05cdb3-a0fc-4cbf-aada-24c27080a977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18f6ad0-c045-4188-8970-224cca4a98fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b7ca2c-5ca3-4a51-b972-d60400d54e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5e8cab-a2b8-4b0b-b8e5-dfaef7eb79df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.163.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8b0146-1cd6-4224-ad17-1ff1de679164", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.245.18.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fbaeea-1360-4fe0-9e22-8f49407185b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.253.37.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332b5cab-bb12-4eee-b252-eb04d9247a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.39.184.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74838ebe-1e6e-4379-8b72-29f5bfe54488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.39.216.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599bb8ef-7852-4bd7-b7a7-cfbae5ab846b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.130.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388cc03f-5cad-4401-9f45-9949f81b17a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.141.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d8a98b-79a6-4a55-b658-370e31b75ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.168.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64398940-a020-4777-8fbf-f5aeb40e372c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.184.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622cf296-c58f-480c-968f-26807f2d8e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.190.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855fa69f-9a41-4dd6-97c2-264b0e132039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.235.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21e3ca5-cc1a-42f5-8ed1-b8deba49a69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.78.119.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9471707b-78a8-441d-80e0-7d0fe051e4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.113.204.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded52bb5-6256-49ac-b7cb-2e7d9272b001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.113.243.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f0b82d-6ca8-4695-b35d-b475a1a1cbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.224.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167efef1-d865-4249-a3fb-79a03b779dce", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.226.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a1a94d-0aa1-4cf8-a775-db80a4d3fa87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.227.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8f1a8c-8ebf-4907-915d-2ec1455e4789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.230.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb86ff9-e415-4998-bca6-22497993f0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.230.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ceeaf15-334c-4ac0-a1ab-a2213960f4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.13.42.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438428ef-52c1-4e31-9612-bbb3908ef103", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.224.240.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42be0cbf-6ebc-46da-b202-da79d5accc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.225.209.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab5bc12-b0af-43c9-af21-0fb51f92f8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.191.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ca16f7-5b03-4a3d-93b2-98c0d7b1bf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.48.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7ba10e-a676-4361-9f13-fa60482f76da", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb38bedc-7ea5-4e03-a952-d53a71b48c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.41.153.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05945c1-8cca-410c-ba1d-79411a6434fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.42.124.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f9335f-1ac0-4498-8c22-99a1496eb85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.30.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e6296d-d7f5-4a09-b9a9-138172aea3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c5f7c8-a358-47da-b42d-1fbb2f5221ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64fbd55-a9fb-4c41-92d1-4b7aed4fdc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d4349d-a2cc-4aef-ba51-0c8f4c1343b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e60f83a-738b-4e7a-a2c0-73f3ecfeee2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fbe642-92e6-47f9-9529-2da0cbbbd427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2bd5ec-ace6-43d8-8c89-952af5dbcfe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39dca561-950e-457c-895e-905a702c44dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff95352-fb11-4071-809e-addb8a578898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16acafcb-03cb-4e9b-95d4-b20e1cc4f3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d10f932-ba1b-4dee-bd3a-e80bd2a2bf06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ad158b-3dbb-43b5-a169-1710e8ebddd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcb43f2-50bd-4b84-906b-a3259de44551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be73137a-5ed9-4578-9de1-d67611b02404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12fbce7-abf0-4a22-ae98-e42f9f6d85d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42b8259-64a3-42ca-be8a-24e9ad11c04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e921d116-f57b-49e7-8962-5895aded9f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa7370e-2b83-46c0-9639-cab68418e31a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe363a66-b4b8-48ca-802f-e1d86019c436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f0ee61-06b8-4882-9d66-517bdb2662b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85712d4-8282-4f9f-a4d9-65d10113f3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ec8821-ef87-412d-9e7f-3cf72dd1f882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0596e3b9-d73b-44ea-9beb-b4d1db6388ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.196.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056fbda0-aea3-4142-bc4a-b783fc59155c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.199.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744be07e-a9f7-49f9-a671-832de827a672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.208.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c416e34-42b7-45c7-9b6b-1ad0b9a060f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.224.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c08c6d3-ce9d-4326-8bef-b37032d0155b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.92.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520c757b-f843-490a-ae40-a416cdc54577", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ca366e-afc3-4582-955a-98050f97fd99", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1daa91ab-2d0d-47a8-8097-b43d5b0335a1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686e8439-0136-40e8-a173-87af6b7174af", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5a4760-9f41-49f0-af37-88b5d8fe5ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b02d3e2-4f44-42f4-8937-5682e99dcdc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.161.79.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d0c533-a8da-4da5-982e-26dc5bb9f1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.243.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0ea051-23a6-4638-bd8f-aad426fd9c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.26.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1daeb283-37f0-46fc-8f8b-b6a2f19ee8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f097e61-5727-4c58-bb6a-5a1804f8caf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30c81c0-5080-44d3-b629-27b6ae95144e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f32e64-0e23-4e01-a884-ed484d51963d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae53fb1d-3e7b-4f4b-b116-9a1bd942e180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.112.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07293d9d-eff3-4203-91ec-14d9627b8110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfc2896-3c6a-4ef9-a781-c8b55463ec46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970367ea-2d84-4ff1-925c-ed31a84d3a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d07b4e-5909-42c8-bb5a-555f48819855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.133.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad801fb-db77-48c3-9970-60482e6f2147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.242.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfaeadbe-8991-4315-8adc-228ccf7193da", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd65cba9-48b4-4ed0-bf32-06129857598f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de29ef0-8834-47c0-8512-dd87619a4f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef9533f-1e7b-4de2-ad67-43d09e83c05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.65.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62726b13-b1e7-49c5-b26b-b9f5c3c26d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5465052c-3214-4f7f-b519-0be9224cb422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.5.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45933ab-4e9c-47a7-9415-c667522742d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2220f0e9-62ef-4026-bbb6-7e7dfdc15a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbcf531-b8b3-497b-8272-5da2cc056532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86888ae-2465-4ddb-aa82-d134933dbdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1789286b-4339-45f5-aaf8-e9b8574a04c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9178d7-d5df-4f9c-9b3d-39f9d4235919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c130fe0c-1672-4f8c-8fa6-1df429f24b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ec2bd1-499c-433f-974c-bdd1f8d911ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd330dd-11e1-461f-919b-ccc1430a31b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b753065-1cb3-4101-8895-15244b946cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8cc1af-0e4f-4629-8994-9eca6eb9184e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204d2429-a0d9-408c-b0a1-49a6f28d8942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a6349a-81e1-4b9f-a77c-97032f4f84f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67cfd33-0ab6-4dde-92e9-8ab1f4612aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad2db36-25f7-4724-80f1-f1f9352bf365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3872a690-d42d-4062-9532-652293f151f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75634b1-eeff-465e-ae77-a75d268e289d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfccea4d-571f-4518-9e75-d301c940e12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bc4c17-158a-4352-82c3-516a6733d7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3359f83-f6a0-4354-acbc-baee5c024a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af145065-cc67-4e72-8e91-fe14bf585c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e2a006-0861-408e-802a-a0d4cc9c8d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0cd0e2-63aa-435f-8cc7-cb66e123a577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7629c6e-4d4f-4435-9bd0-1103c0e0589f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513d30db-9856-4751-b3a5-309029f0e40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70d42bc-8581-4699-8cc3-7670825f703d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc62d22-cc17-4ae7-bca8-8a1e7bb5601c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86135773-7728-4d9f-bf74-5b423f9a07a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6ed15f-5de7-4c7f-a879-acec2a753b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387dba66-13c2-4ba3-b03a-2b9e59dfff2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5204b8-0e5e-47b0-aa2c-505d5cb72444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cda032-d093-40b7-b68e-6ee5faf0083a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b63e10-1fe0-4666-a6d4-9a6c56bc67ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.103.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e6c0e1-ff5b-4e81-adfb-27f0181a9de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2515beb4-cb71-461b-b199-f1efbefd57c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a833a7d-592b-4d09-bf5a-0d3a06c931b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2c2ad0-64a1-4fa5-ae9d-2f7529011d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01d0bba-a7f4-4611-b53c-48a5c09f40bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10838f84-6845-40af-8a49-d8fe80f5a82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da69b98-f3f4-480a-8cfc-f5253e343366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacf82b0-9ee0-49b3-9559-beb424f6ea40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce4239e-9351-44c7-ae34-050d01a484dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2f9e8e-d809-4be6-a1e7-a05383c753df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655f7f7d-f7af-4430-bc81-067643e57ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8cdb2d-5a2f-4852-a176-32a78550811b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4d7010-1252-4dd2-9f9c-c83b2507e0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f83d895-3422-4df8-ad79-fed14c92a91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483d84b2-f6ea-4aec-9e92-be6477ac1ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8ab530-a602-4f00-a738-88eb40902133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ec3aa7-e8ae-45b6-9642-66b30e05c9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6e3b6a-e46e-4397-9c96-ef9beed1e2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6f07d7-d9b0-42ae-9a23-a3cf15e9b208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3581789b-fef6-4196-8d7a-2a49ee3caa33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784267b6-6f58-45a4-9a5c-55c24506c7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06126c52-bc04-4495-9a8f-94488130468b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fab956a-9a2a-4c10-8ac4-7ba915dbae51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b2fcf5-bff3-4d77-9c82-1ae3760cb6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d290eced-5b14-4da6-81f8-1755f2dd1176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97c57cc-f469-4305-9ffa-e7b0e2bb3c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae67d56-6bf6-449b-8dbe-d12f51534544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24ec068-f24d-4842-aae8-1854df11e932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.83.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5696bc17-2075-4b73-beaa-438acb55a793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67dc0e1-3b19-4bd2-a732-bc32b7bc8031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4883d347-8c9a-46bd-80df-bb27568cab21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce5345a-bff0-49ee-ae10-a5850208d1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f251e2d4-ddcb-4902-bd70-7ec690a3dacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d21194-899a-4ab6-bb9b-99e1fdbb1f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faba924e-2bd1-47da-95c6-9075e8f53bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1ae015-262c-4c64-838c-af2841b31d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d32e68d-5ffd-4f8d-82f0-08252cd8fb6c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.224.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1935faed-d9d2-414d-a1e9-55d43ad77cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f09ddc-cc97-45ed-8a79-4b183a3acd96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.214.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b83cf95-231c-4543-b79b-64ed39d0d07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21739bd5-2dff-4ae1-a069-4c76d8b85f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.214.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0778c977-d355-44f4-827c-bc9ca9f28ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98da5b5-bd48-423b-a13f-336d77617c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a966a40a-c57f-4c1b-bcdc-da97e12cd06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b401cb50-c8fc-4440-96e4-e7e43061ba02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063b48c8-feb8-4d29-999d-d5de62efe4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8e74f8-9659-475b-9462-6e72269867e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca79406e-cc04-46e0-b5cc-8b480dcc1e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833e8e4c-d683-401a-8e74-af0f932c45c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e368bb-b718-4e72-91a2-e27585f136b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daceb47e-e468-4efd-9c13-7cc243510a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10193583-a37c-46ee-b0ab-2048f22562cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc174199-df7d-448c-83eb-d5b5dccdd55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11245326-0418-4cb3-b792-8554ac707970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19318d78-931a-429b-8160-9e2cd98206cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.249.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1484c8b5-ab2f-48f1-b5b6-8e1a3aa73dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.73.62.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cbde97-dfb2-4308-bbc0-2a55a3164c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.89.179.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253a15a2-d943-469b-9933-568fc365ebd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.129.56.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dabbc7-1268-4c8f-b992-8737db490087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfa6285-c1c7-473f-95da-d8c8289c7238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.0.38.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b21b340-89f3-4670-8436-4a20fa64ea01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.119.225.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9c77c9-95cb-4c49-b0d6-bdc56e7f483b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.137.62.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b62dfd-7d27-424c-a9e3-2adb1bd23f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.150.142.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9916eae3-9f38-41d1-abbe-39923be2ffa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.19.74.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f7c434-e79d-45c3-a90a-f21548332285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.199.13.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b0a895-dbc8-45cc-be84-e193e917b8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.22.14.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4d8bf7-a774-45ab-80fd-3c66d04cb313", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.136.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963d8f5c-9537-4b69-8206-089dc525f63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.8.62.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83225378-e4ca-4a2c-85a8-3ce6107cf544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.107.30.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2cf61a-a2fa-432b-b6d4-1dec4c6c6501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2869d0ea-75f9-40ee-bdb2-444becaccf95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.192.198.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e33703-a33b-47f9-bc09-26ba4a042564", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.193.239.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf4bc8f-9cd9-4ca9-993a-c64b45691f6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.223.77.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8281f172-c23a-4051-9788-71b251063527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.227.153.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5be269-df55-4459-865e-d4155058748a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.227.240.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adace7f8-2adb-4189-ba40-803714a4ccf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dec5136-adc2-49d9-bbb8-9b6ffc930dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.64.8.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82527a0-ac4d-4533-9e92-4aa931dbe62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0abf440-4691-4f8b-b173-19e0c381c2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6a8ea7-c0e3-48f6-879e-ad990d922cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177be103-39f7-4d4c-9e18-88e2b46a43c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32d7863-5b73-4499-911e-3c80a98c20cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04f1a7f-617d-4c96-b75e-76bfefacfc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf51f86-871e-46ab-bbeb-6e2607711440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8e047e-bc15-4450-816b-f8cd8071442e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e906a1-98f5-4bc0-9aa3-6644f5fa2d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8297780-ec65-4b35-b2b2-f3b337d244f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.21.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d0768f-b6ba-46a5-8ae0-8587a905ee10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.98.155.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040e100e-801a-457f-9d09-7f444fde55ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.104.180.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9218937f-2359-4b4c-b41a-cbab9eab89b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.140.104.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c3269f-2089-4f29-bc18-20d0a2e2d7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.162.168.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d63a93-c39e-4239-a45f-39ddcfebcf98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.206.40.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ecc703-200f-46d8-b89a-33c9f68aadd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.23.209.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c703155b-0dfc-4c20-8afb-ae3548a36fa6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.47.168.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31da962b-7984-4ebd-9eee-bf2e243c740d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.55.79.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcbf710-6c94-45bc-9237-223b73364c2d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.72.228.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e709414-9cde-4d57-8947-a66de718a7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.76.33.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2a0b66-8683-4fda-8873-1ac560d1813f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.200.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ac1485-7831-46c8-955e-06ce30a73d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.108.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a719ab6d-3a6c-4950-a3e6-66b9197a3870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.123.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c41fad-ced2-4ca4-96f7-25efd038bac3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.183.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bff4a5b-0377-4540-8d46-995b304e9b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.248.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b1ba7f-5d7a-4aaf-bcb2-7c23dc2f68af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.32.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54d133f-9de3-4087-968e-f405bf321376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80a4124-90d3-4079-ac84-7bd7d68b61d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5972856-7dbe-4052-a239-246d91e85e7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.172.209.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fd68bb-6455-418e-8128-75c1a5e3f791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1e9049-4783-44c3-99a4-633c229032fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0c7577-eb71-4d45-bd32-4512b8e41c82", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.45.98.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be680a0f-76a0-482e-8b12-a82ec3018a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.246.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb1338b-8850-4f6d-864c-edc6a0e6f480", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.241.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27375ef0-a4f6-4dff-9f2d-e32849c07450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.104.183.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfb00de-5370-41b6-8c12-a75d8885869c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.238.57.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3be2b4c-4cbd-4fab-a630-5e806e0950eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.126.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2523cf-199a-42c1-af7f-aedf7892c54d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.213.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a083bf6-fd75-453d-bbcd-9f311d79d18d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.6.101.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc82b39-2330-4eb5-b9f9-6afae1dcdc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.73.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df57aa9-4095-4cef-86e0-968fc7532881", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de88491-85a5-4355-b6de-54d2c02fb2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2eceba-e429-4735-88ff-06eae47be4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.247.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a924c442-9236-4856-976f-41801890e7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038aafc9-04dc-4c8e-9923-1eb8fffd35d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43405ad-3e0a-47ee-bcf9-094faeed5cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343f185f-db77-4cf0-9425-6a25f861cccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7378069-1a75-4804-a935-899c77509690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.77.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddd2fdf-4043-4e02-baa5-5ab145539e9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.102.110.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec32ec84-e850-40d0-b74e-d4604c54f225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.148.27.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11abc5e1-babb-47ce-a6b8-332669a60e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ce45f1-7489-4bd3-9973-1026e702a47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900feb18-aa77-4ddf-9fa6-106f1d32efaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.195.115.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cadb873-5332-4ff9-a46b-f07a3b62bf59", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.243.28.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a835f05-6707-4d80-b1ba-c599686b6fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.252.53.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6635d427-3c8f-4e22-a6c7-0cab41b1dd3a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.120.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d854a641-5ad4-4e4c-ad12-c4a7f7ac79df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.168.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8886f13-b701-4606-8e23-57f4a07c2da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4470af-102f-4a49-95c2-dd73a25398c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.235.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01c20d0-9145-42e8-a1dc-648a7db756d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.236.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0a4692-073f-4956-b68d-241e676c4c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.1.26.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cdf5d2-549e-43ec-b991-e4391dea8c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.116.248.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc8a054-f60c-4ae1-9cfa-14c530881905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.119.89.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8446aa29-7508-4c04-b941-203801214a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.225.32.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85670e1f-ab44-441b-b08f-b9fd5aae49eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.226.217.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e76fc9-52ef-435d-a029-598f6746b613", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.235.160.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea7497c-6015-4421-a787-2e1cd951fe55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.9.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc03396-c152-417d-ac5f-c43a715d67d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.47.126.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7123a5f4-2bd6-4923-aaea-549d94656358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.51.34.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c87245-b93f-4341-9f4d-f8c47a1cebc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.88.182.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acc61a1-c45e-4022-b590-5873b3421eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.105.123.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8593cea-52ef-481c-a159-97cfd14bdfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.112.229.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8131fe73-54db-4e16-81e0-751893b7dfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.115.225.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fd3a32-a023-4e7f-b2ac-76fd6b6ed979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.121.12.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22ece8d-1cb3-4c9b-946b-fdd593688004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.122.89.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01f2f73-7ee5-4252-90a1-6bc45f74439d", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.134.23.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6529d17-e7ac-45f3-bd66-b5faf9cc85e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.208.82.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57226095-583f-4e50-bda5-be301c0f9a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.244.172.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81efe0bd-0a5e-487c-9e15-56a63e27c581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.34.143.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a02570c-834d-468c-b1e9-c37cb6d97ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.34.228.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6c3183-d0c7-4f89-8ce1-bc9430f960a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.45.34.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddb5009-ab47-499f-af85-4045cdecabff", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.61.51.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8176b7ec-86a1-47c4-86c3-ef8830233bb3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.70.249.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b660d390-a833-4ebc-a4b8-cd0b5eddcbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.8.178.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870901b3-7b6c-4fd7-8893-38d9a9debae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.8.225.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7bf87e-58b6-421f-bd58-ed7957b7de0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.19.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0acad76-dee2-448c-9296-450001c91b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.12.164.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce327085-910d-49de-8f1b-113d3d9e7ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.161.183.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e65cfd9-1f54-4fc1-8d3c-b202a28df8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.198.64.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0f10a7-5a71-4bf7-99c1-9cae1c4da4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.202.148.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccd52a8-aabb-4abe-a85a-2bd741a7fa2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.60.202.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d569f179-90d6-4353-ac45-3772779b8e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.76.202.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f39111-05f6-4369-84e4-0456d28e479a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.78.201.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01df232d-632b-4adb-882f-b778472bc3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.168.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff70c565-e952-406f-9c75-e8498193287c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.115.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47a354e-f79a-4ca8-bff3-17295420eced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.97.89.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd506a7-3124-496a-9f1a-9dfd2e1eb36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2a56ba-1ec8-4501-815e-185cd85d160b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f808c2-5b7a-42fe-9c1d-8feb7e937f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c587d6fc-b3e1-4e41-8d54-182fa4a6f9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3006dc-a46a-49c9-a0eb-56f2148e8d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669d3fac-48f6-4074-85ff-8d7e248ec177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4af703-2cb6-46dc-926c-038828e2eaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144baa85-4db4-4c96-8d6d-55fb72bcb850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428af4c6-3d9e-44ff-b985-be40990366fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6d804e-5892-47f3-bb36-0302286c1967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1856848-41ad-4b26-b2f6-8bb3a73c5271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99390ffb-4728-4a0a-b22f-5df6d720ec92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99686459-98d6-4bd7-8912-5cd396cfca73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f4a94e-5a5f-496f-aa32-edbc56e279a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66588357-5187-4335-a172-cebf74614d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7208a808-0896-40ff-92fe-7b5e7fd8b894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9e3b5c-9ac5-4c4e-bfa9-f009ffc8da15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbac4e5d-b7f7-451c-9341-b8fb8c0a3cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980c1c86-7032-4c5a-ad5c-69b4bf7b1b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99210fcd-b1c7-4f4f-aadb-eb31e4b332de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f297df-c935-4fb7-911b-7238b4047ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ebc76f-9f60-4b33-aad1-f158c673b049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596676dd-063e-434e-9102-4f340f6ac46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872478af-4315-4cac-8ca6-d92cff356256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9373183d-3af0-4ef0-8004-2ef09f53d0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf634e71-11d2-49e6-9be4-2064da90940a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37c2f2d-03ea-4207-ad03-189e7c4b7950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2591b6f2-b27c-46b8-b5ef-3f81bfdde07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3d7cc5-67f5-4d08-8752-96e95fb0904d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a506dbf2-96fe-4354-9048-3ce9c1c784cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49327bd4-8a70-41ea-9e58-226a2ee4c073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6ccd04-f5bd-438c-b060-31548a5a5b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e6e57e-230a-435e-af7c-4f7a76d6b865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cfe3d1-db9e-431d-a18e-8cc8fe65db2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69655fc1-9ae0-4462-8aa4-8f7eaa8a33f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae6468c-f7ea-4ac6-a35c-e9712007387f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18f0ef5-f11e-4c0a-b4e6-c29227b6dd4d", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.106.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2431c9a-85b5-4fbf-a2ac-c9332cd283f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.82.188.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69098de2-278c-4871-8c08-77387f849dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e331f660-e3c5-4a4a-b3ee-e740c0577600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263eb75f-4dda-4ef9-bbff-3a31a5d6b344", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.112.33.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf1664f-bb51-42c5-bf75-e26997676081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.236.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bd2f96-a4fb-43b8-baae-9025b0f374b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a8cf84-0499-42e8-b45a-fef4b8044c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d98f33-05af-45ba-b9aa-f1d73a189e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.238.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3215e635-0cf1-4e1a-9511-ef9c591ac959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.239.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9419437-f890-4b39-b1b4-776db7c5afb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.239.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a41ba9-05d8-4ee3-94a1-4540c068c0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c24c39-70d6-4cd9-a276-2bc089907956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.164.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d54fa66-36bf-44a7-a2bc-9e17a8ea8f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.164.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299334de-4dbb-47bc-bdc0-91e320f9d94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.166.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c37f0d-43b6-4afc-b996-e96ffe43b781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.166.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb46043e-7d89-4354-a716-cb04b99e6f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.166.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25835de9-e3f5-415e-8b68-ffe0f94bffe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b706f69-513f-4789-bf90-86a333736811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2a9f9f-f21a-4d79-9d10-6d2745b351ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d22f60-96a0-45b4-91b0-5d148f114e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e3d0f9-a3a4-45a2-89be-6031c824ff9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567b39ad-1863-4248-862d-d2824ed66150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.151.84.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5969e5dc-e0c8-414c-a49a-1808dddd5617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.80.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5714c0b-d794-4aaf-949b-cbdedc8f3abc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.159.162.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fff170b-df24-400e-8d8f-2db615eb4402", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.171.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea77b3d-cd7c-4baf-a5be-163f485575e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1169429b-569c-4535-911f-e5fa1ad5abdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f2f49f-a50f-4e15-afdf-4a27a251b024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a325a54-108c-47ad-bf92-9055b4fc06be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.175.116.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa35575d-09db-472e-b9a9-8092a71174af", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab. CVEs: CVE-2026-9198. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198", "external_id": "CVE-2026-9198"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0397cfcd-3f29-44ce-8da5-1ea0c98f1a32", "relationship_type": "indicates", "source_ref": "indicator--aa35575d-09db-472e-b9a9-8092a71174af", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e294c42-8aa0-48a2-92a3-fe8cc5d300fd", "relationship_type": "indicates", "source_ref": "indicator--aa35575d-09db-472e-b9a9-8092a71174af", "target_ref": "attack-pattern--bf47a23b-89fe-4708-a316-3b190265bffc", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1cf0c863-6adf-49bb-8b18-fb05a24f2813", "relationship_type": "indicates", "source_ref": "indicator--aa35575d-09db-472e-b9a9-8092a71174af", "target_ref": "vulnerability--0d21ae39-ed83-4196-9d43-30a823f856c0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28de867f-5b61-4a68-9bdd-8d110c80aae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d81562-ea3d-4f79-8721-13855f005d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85da2c7f-8b65-4df3-80a1-dbfd2cc74add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07aa7eb2-3cb7-4d08-a2f4-c36b64ef62c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25ab6b3-e554-4187-9d86-f7e22d554a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042c3ccf-eed7-40d1-b462-87a79fe5155d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.181.9.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7344ab-e481-40a0-9ce4-ae1d6ac7f2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.68.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbd607b-cff5-4957-ad02-09aa5316eeed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.71.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568290cf-1fb0-4d73-b388-c07e53e10cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0543166-38ee-40ba-8fe8-97c842fd2424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62a1b37-7cc8-418d-ad68-da994a0461be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea753b8-4d4d-44d6-8cf1-618b9e24babe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8f75b7-564c-4b7f-bfd4-8a49eddc76a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d262410d-179c-4b8a-98bf-5b90766896fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c92ffce-0c91-40a2-989e-e10804a6ef98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a56fca5-7ebb-4370-be4f-89d625b79b5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a016ba-83f8-4585-bcc7-1fe6941fa38a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4feb1d-9e1d-4641-9c77-eb41defbae12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1fcc61-e493-46b7-a308-7aa61d15029b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53d0f69-0b70-4dc6-9812-92faa11348cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da91a3c4-2c5a-4e50-bbec-d3160c2333fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030f1143-cfe5-46ce-97ae-af282a1dd4b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2956c4c8-1dc2-44b5-a289-53658b1d4a76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50025b3-0392-4b0c-8d71-57b3316fc718", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086389bf-83ce-4d06-89ca-7c098a1fb4b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13358c9c-54af-4ba1-8f6d-0099af353607", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedf697b-e048-4376-9696-ab9c7e9c87d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bc5fbb-6555-4acb-a2c2-0eb8eb55195f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e968078-b839-4297-9e0a-008627cc8eed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235b15f3-d145-438c-b884-5b73d1fa7d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2462003-d5c5-4763-a331-80e67cea69e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12118268-e286-4217-b8f8-c31cd5501601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b158e65e-c3de-47a8-b3cb-2df09d0ebfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360e21a2-dbb9-4c57-bf2a-a2fd64cc525f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f63287-0674-4bd5-8127-b45a87f17c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cae0e4d-6789-47f1-ae9b-678cc5450870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ee4442-f52f-4c30-b99c-b54bf299f46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c81207-f714-4835-90fb-a24c12351976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e01069-c268-41cd-bcaf-487620f7d67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb75a55-7803-48b0-8864-c606b6ad92a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c2a8cf-a81f-436a-a81a-43c8a812646c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a78bf86-55e1-42f5-adb7-95cdfba38688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934786bf-b645-4e63-85ee-9cac2b7bbf1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948f8636-cfec-4537-aa29-8c6c493079bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.195.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0c115c-76cf-4aec-8adc-864f29b338b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04769355-3c18-4f62-a9d2-801098a6424e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0917712-e829-4b1c-a992-118be9b94d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2a8f90-6f2f-4692-bf6e-bca0b092ce1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc2f798-6117-4726-a8cd-99a1efe01422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ed50e5-bfab-49be-bafc-6e7c03f025a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2b6e35-1952-45e3-bcdc-113d2d11e680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb14b9e-a8cd-4aca-8589-87c804d49bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e4b12a-e31a-4719-9a9d-dd0160eff6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340ec146-bb0c-4bbf-be53-d62f10d7ef41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d3ad40-fe1e-4367-8da3-147ffb6a4eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.92.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e44006-4739-4e24-ae2c-268f2f764274", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.233.247.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e26f83-50ec-416c-a3b3-7d3aebf1e478", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.239.41.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9b0c98-079c-45a8-a088-5e1d5c913de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90b2e86-9ee0-4c2a-9c85-8c0f9b18aa9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f66c90e-7eff-4795-b8f4-e1877345f8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c203c9-fbde-4aa5-b004-fa7804a2c59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5c6bc4-4a1d-41e0-a842-4689d4ac4c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a169101-b279-417b-8ce2-c2cdfe03a14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273ede32-0e5b-431a-a870-955325bfb5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881073b0-609c-4e41-b8f4-b9681c004476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfd13dd-42c1-45ed-8d99-b47c93346a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8568f79-e71a-4631-9c03-4633ad8b7a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225f161a-1018-4891-af62-09013a0ca893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0614a9b3-34d6-43fc-b1c1-71f76efd6a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cefd60-68a5-4b04-97c3-ccdc64fded6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1b158f-c70f-40df-9409-8c5fb6392771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dada3c-6e38-4c0a-8721-c6aabf2f52bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03881719-1c23-404e-8dde-d299380cd399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fca2a1a-5029-40e5-8fad-b97b20196759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c4d92f-6d99-4c2d-89ad-efb57d6e35da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806fd650-8ba0-4f48-8bf7-7c111cb4e35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba5299a-8eda-485b-a101-81e2481bdc80", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14894ed4-1696-404d-b989-25e5a899055b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.245.104.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6976b0-dd10-43ae-8439-e812bdebcd61", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.130.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e4e503-8bf5-4d07-9e44-00f17e5bb944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e63985-ce8c-4dbf-afcc-917aa6bc0eda", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.68.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40f8998-b70d-4733-a24c-84f814506719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.23.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5d9de1-cf53-450d-9cdf-757c53dba9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.76.69.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daecebd1-2555-4c6e-b028-e3c6dd5ec61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e69fc31-f0cf-45d3-bd4f-0f91ec44e21f", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862ddcf9-eec6-4fc3-b83f-adfc41e28780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0beec788-cdd9-4d3d-810e-7200bab800dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4e73d1-1962-485c-b8d7-89cb67850720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea5feb1-155c-4e17-bce3-af78d1067f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.1.175.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a667aad-6257-43a8-aa5f-fab57cfb13af", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.116.1.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71693581-dafd-44c9-a1ea-4dc8d0a31a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.128.146.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a110e0ad-f729-4745-89f9-3244aa0e8f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.132.22.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc129a4-e13e-46db-a55a-14f39991ba5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.158.120.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bbc1ea-75b4-4734-88d5-1b9d60920788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.168.246.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea24c775-d2f7-41e2-b052-a113985dc5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.189.107.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e740df-ac2f-4a8e-9e9a-94d1e9eb92a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.19.30.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38837140-78c8-4194-b4b5-6800e02b4dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.19.65.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8e5f0d-faf7-4fdc-8972-6ce301bcc2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.22.238.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad267823-8825-4544-a8c7-5a9936447981", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.226.33.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9a3000-6feb-4df9-a329-5ab144289732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.236.254.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fc638b-9e1b-481e-8aee-492511eeb752", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.33.25.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7ae8e7-d774-4ab8-a5cf-75fa78c6138f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.67.130.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b23e09-f443-45ce-90d8-477cf124d1c5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de621424-2c35-4326-a164-16794e8a9b11", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.121.172.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbdabd3-2af6-493b-89f5-a39e99479aa0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.15.108.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317abf95-a486-4f8b-b522-82d7751d51c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.248.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79f0f41-e1d0-49cc-8900-b430fee2d02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.190.142.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c10e8b2-60e2-4e64-9aa9-47d6752cfbfb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.60.99.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdd08cc-6fbd-480c-afc9-88d84ae9aee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.107.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575d12b9-7c87-4671-8bea-6650dde5bfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.156.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1af1908-5f57-4a04-8521-0e134ec5b047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.235.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b950ae8e-ee5b-40f4-971b-e429b372f046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.68.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa26bd63-78db-4e30-885d-b3b4d8edc347", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.74.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcfc395-ffef-4da4-b9a5-bca7bd2139f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f513524a-97c6-46ad-b11b-87b60bd0e4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e3665d-48ad-4926-9a68-a98c30b0f59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbb50d7-3179-4587-b2dd-e842c08552a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369863c1-694a-4ea6-8717-3438569c9c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6df1b2-a9ad-4090-8ab6-b35f879867c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096b05df-e02a-48c2-966a-1def913998f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.241.120.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5ff358-fa75-4f13-b747-9557428d1307", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.151.34.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d8d6d4-a8ab-4267-93f7-9e4e82e4ef9e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.179.1.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2727f06-7608-4a73-9b49-ea737b0ac9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.183.56.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e238da06-9e87-4858-b8ae-d5820a8d268e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.80.253.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ba1e77-95c9-4a1d-b858-cce8747c4644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.104.218.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af06794-da5f-428b-82fc-37639fb9fdcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.115.189.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b73f3f-b035-4462-914c-afe6a5d55665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.137.26.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea3d043-cce7-4b1b-8f4a-01ad37721c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.190.97.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6274e8fa-0cfa-4016-bb45-8afd6bd17766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.55.123.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1a31b4-cdc4-4d3f-a040-1803c916b901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.88.11.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5d4b44-a874-4c87-b1c5-ef4c733ab3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.89.29.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34dd5c2b-5b32-42fe-ac44-8ddd6f2e1d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.89.29.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c5f8c4-aaaa-4c63-9679-df7ad999b2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.103.36.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2861411-4284-4139-b098-440846a836d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.183.39.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0bc68c-e2aa-4ec5-8cbd-50166ae5d3b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.237.254.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b3df19-74af-4b73-8318-5b3b3fba27c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.251.102.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe14b0f6-61d6-4310-aa98-7f1ababeffec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.253.46.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a737d1e-0fec-4391-9f33-1eb9e85b8a17", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.96.11.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df440f47-13b8-41e8-996a-400958d47e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.119.108.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07329f7a-4a2d-4ded-ab86-54258fd9ef2d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.141.253.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6c1725-9470-454b-bf2e-94b74ba5cd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb34faa4-9c07-4c10-9215-2257df806938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92ad425-0614-40be-ab5c-37de9ac4d006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752f2caf-044a-4c82-92b5-7540380684a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.158.140.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445b5d2e-c382-4275-aace-9a59d3af76d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8126576a-8ce2-4344-86ca-80e0b0aaa072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.161.49.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7e7370-9fd7-4e63-b4e2-55ba36fa1aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e733f72b-3692-4c85-85d3-276d1bcabb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4d0aa5-9165-4833-94bc-e3056b03d14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64f76ce-8ce7-4934-8f98-a1d709356d4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.52.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0ab45a-66db-402e-a73a-b8248d67e96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.132.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12db6ce1-6044-4fb2-8477-aa17c1016d70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.141.65.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c848846-48c3-4b76-b6f8-698cf2084c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.42.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f67f8a-c7e6-4a9c-b527-4c22d49a89fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca47b73d-67b1-433a-9d5a-b019161f7fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090561ba-43c3-4fed-ab43-f1858923c349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c3c294-90ce-43da-86ee-dc6330517f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75500679-0f5f-4a69-9f2a-130f9c87892e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16077da3-d2d1-445b-bee7-98d6798d8a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c677c359-934c-4974-9ac4-6301629e0b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea49139-a331-4fe5-9ed1-d7e952bb1107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bbf861-35f9-4782-a0d6-aef32a204b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddb2e2b-29e9-4777-9367-3ba783bdbf5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3879caa-a496-4507-9c17-7376591ed1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc6fedf-950a-4960-81ca-d46391cc9f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3fb0fb-5fa5-4d3d-b35b-6aa826263036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2a8a1e-9b2e-49b1-b0aa-590906c9a848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff604153-22c1-4dd8-bb32-257a21ce5a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1df6285-f0c8-439d-a5f0-a4c978b19689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9c0d69-13fa-4c89-8674-e90d3cb88285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f1ec39-cef2-41ed-8596-79085c5a236f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc777b70-51e8-47a4-9051-c20391abf92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5774c1-2833-4b61-93cc-07cc4baa8126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b936dd64-1271-4cd7-b116-b627e2d9e53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1cbff5-0fbf-4770-a339-4d3f072f7057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fd0108-9a0c-493f-bda2-1cce93ae8d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87672be5-633f-416f-91ce-cab506aff2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ca241f-b9d7-4f9a-9f21-c47164f86c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527b6bc2-c032-4952-8fab-963be46b388b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4986afc7-b984-42b1-93f8-9919c3ece92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed63d9e-bd4f-4562-a46a-5746e5b6b98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ececf92c-a49e-4ffe-841f-0940457aa527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb67a235-81b4-4103-be62-99909086ce57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7243be34-d807-47c2-8248-5992da9dd6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defb955a-0ae7-4518-aa5a-ebc7e89671c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63504ea-3511-420e-a099-9b6d9626519b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5a3e3d-b3b8-4f35-8621-c035d09f810d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647aca28-f642-4be2-9408-53dc6d0d3037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c51c523-ce7c-4707-963c-86eb207b27de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ccd486-2423-42fb-9d53-6ad7f19335c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce96697-e8c2-4236-ab34-a0fa6f8c8756", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30575fb-f7b0-4b01-b55c-65cdb9e506b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbc63c7-1e8a-4cde-9f41-36737c3a5097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842868f7-c69a-4dde-b1ec-0aac5e233cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebc3d40-87d3-4d44-a23f-0a85764a4e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.130.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96de2a8-f1d7-44f3-9250-522665a8ab15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.239.59.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f417485-7e81-4aef-bc5d-95c193430585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.126.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4f2464-137a-41a9-b624-6fe34b4af225", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5bc250-0cfe-4afb-84ba-d72540995ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004f917a-556a-4f18-ae2a-fe2423ee5c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31b442a-c316-46bc-86a1-27cc24e681f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb104cc-5813-4b64-a36c-64e89b8c1c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74593627-6ba8-4188-beef-2ab0bd60fba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.30.245.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fa7bfc-ea7d-428e-8e79-eb812a8abb42", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59622ffe-84d9-4944-a043-ae0d35fc14c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1babb7-5c2f-4d25-9b82-81e947f38077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f91062-a0a3-4f08-a703-fd821fdf8355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43eaa790-cb7d-4c74-9614-5f8d9e0f1c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee03560-f43c-43dd-bf57-5e8c58c75b75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.36.224.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38331ee-bab4-4065-a537-de00dea9f6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.69.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164eacdf-ed36-45b5-acb6-6a24e601a68c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50424605-31a8-4f74-911b-21fe570e103b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.47.62.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2b5011-b711-4fde-bb19-871a88d38f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e5130d-8de6-4e8a-937b-9e572a851a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce12660-0641-4476-975f-a12512fc8113", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.194.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecd73e8-e4ec-4782-a6ef-bdffa4634ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690b1d92-623c-4f6e-a7df-3333e0562527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cca7e8-79f7-4b45-945f-6164aba2b9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418e2a73-a780-41c1-af8d-b7cebecb5076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93dd5ae1-f0d7-4c25-bbc6-229bc68d7deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799902b2-0ba5-4ff5-b0fc-aab7621b459d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bdcbe0-20e8-40e0-b825-57968c90d6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd80d889-8575-4c9f-8940-70a101997642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a87ef07-646a-44a8-80d0-3ad0569f52d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d9c501-9bd8-4751-96d5-8f0417bb381f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d108b7-dc58-4b0c-99ff-60ece2b60968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854b20a1-6ac0-4ee4-8194-91704a4be5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8871829e-8d33-4adb-b936-385ccec1dfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3b2bfe-3b50-40ee-a426-47e210fcee91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1765755-abac-41be-b572-0fc22ecc9428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb136f4-d848-4fda-be18-a2e6bdef6378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14cab151-c359-4937-82db-7882b0e4a485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff87bfb-14fe-4822-86e9-6f6b95da4c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01610b1c-17b0-4967-adce-7379832eee92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3b0ae9-f8e4-457e-8282-5b9f14a832a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af672a07-defe-4b55-b206-2991b8ed9637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e25a20-fe25-4a6c-a55e-59ec3a598548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0329854-47aa-4c41-8baa-435ec0516da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081f646a-9982-433d-bbd6-2143d304616f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4e23e0-ec17-4a83-ae38-cc253ce86fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f0bf7b-f5d9-4f20-8572-905d540bf285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0601fb81-aaf0-4f20-bc71-1772919e1edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f216a57-0a68-4d3b-979d-92cbe0ba366b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.24.161.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94737e3-5038-4444-9c58-388cbe8fd2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.242.98.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca92e161-7531-485f-823f-6cf090654652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.31.9.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3e7811-ef2e-4c61-936c-09d4cc036dcc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.42.112.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5dc7046-effe-46b2-96d5-3a156e962cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719097ab-1520-4d68-b282-6a41f9ddfa9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7578134-f4ce-4323-be54-325b8c8e3e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912d80ae-4bec-407f-902d-8d720c4a3a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266dd460-c21f-4f0f-b2dc-4fb87918d936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.122.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9df4dc-5165-4383-9f4c-20310ed143be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.71.102.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfeedd8c-e94b-4e9a-8d4f-177dcb1b34d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.9.69.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a54817-2a03-409a-a7da-8741d8ae1529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.177.94.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac260424-a833-4171-831e-2211bdd7c439", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c21b266-98cf-47b4-bc8f-e5adb478b168", "name": "Malicious Host", "description": "Observed: WEB activity. Web exploits: aws-credentials. CVEs: CVE-2002-1149. Sensors: cfglobal, revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:cfglobal", "sensor:revproxy", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d6dd637-7273-49a4-8710-b274ce6a285f", "relationship_type": "indicates", "source_ref": "indicator--5c21b266-98cf-47b4-bc8f-e5adb478b168", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f764730d-71ea-4274-8172-2496acc76fdb", "relationship_type": "indicates", "source_ref": "indicator--5c21b266-98cf-47b4-bc8f-e5adb478b168", "target_ref": "vulnerability--8c2d939e-e4ae-4ad7-8b59-9e6939f117d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75c1265-c186-4ccf-86e3-f48032e70870", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aabb0b7-7052-408b-8830-5aa8cc0754ca", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c90cc5-ca4b-46e7-87e7-6373d83cbc02", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc89d145-7d04-459f-a5b7-150659a56630", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4464c494-3147-433c-8ca7-171fe9ebd113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6e0d3b-10cf-4c62-8643-96bd01092fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.182.16.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3e0d8a-f90b-4743-b44e-8f3e03adffab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d864d26-1b95-4ac2-a90a-29cf38f3ee01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2d5069-47fa-47c0-b1ba-43f234498de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0360aa4-5142-4124-b2ae-3951f4bdda82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da12f444-8fdc-4099-a60e-8c94b8e6a5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4707996-2c40-41b9-a076-b46909e33b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e45e91-ddbe-4a97-8d39-a7ae94be1acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6d1544-419f-4bf6-8131-a25668a78d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132393da-b533-49ad-9b22-d02b23784658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255b71df-f123-4dbe-9388-8c406910e421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad185cd-a579-4776-a6aa-f6db9575652d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30246e21-5481-4846-a5af-3588d5f9d7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604f057e-764a-4e95-92c4-cf28263bd515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f2e62d-db11-4ef1-a670-77d58b54004f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f795ce55-f141-4593-9305-cf53f8b1de5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a0d3be-ef18-4efe-b3a2-b526a6c88fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6418b4-cc8d-4b83-9cb6-c7cc3b6a20b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1500a3dc-3231-4407-b66e-164f79f31e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2b6113-a6c7-4ab3-8649-97b05d661f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2414f222-4875-44e4-ad38-43ca4d50bb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a97fd9-6043-4c69-9a3b-5ce85806173d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fbc36b-fe1a-4a07-9ead-13016e21c15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff6730e-8496-445c-89d6-f842ebb31795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e149fb1-f68a-427f-819e-dcec7f7c36cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf29a359-5512-4762-8ffd-57731bd2b340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5dc8cd-0590-4720-9b79-b5de685fcfa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f064a9-4617-450e-893a-b0ced980a469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ca6883-5d56-481c-a203-973e1ca7ba45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567bf957-bd4c-4bab-adb0-eb3a2f8225b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331432af-645b-40ce-b352-0b25b4e8cd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea01d35-f215-470e-90fa-98199b10d297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766cdad5-7e2d-47fc-9ff0-c1ebbd951d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e9cf5a-595e-4886-aa22-1a0e2fb49d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdbb574-3794-4e49-a8bb-cd5366fe3380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ef1276-86df-4393-ab63-973dc0308736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7f0d04-45b6-4e18-8aad-560ff49c2acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc18717-41be-4304-9bd1-d82688cb021f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2986d3-d10e-4856-b581-9bb8d89b8917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1c3e11-59a5-43d3-85cc-ea46d0a65ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d31a6d-d7fc-479b-8e0f-81a7dd325e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810b39d4-4161-4dd0-ad2d-a23dd5441476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccb34cd-cb47-4277-b901-0a8562dbdf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d2d6f4-1eb1-4831-baad-35c519abacd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77dcda82-baf3-4506-a6c2-6620ac38ade5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdae654-92d8-4548-bef9-643294a27656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee66b091-c850-45ac-a8b9-fe56628f5093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc28b184-d254-43ff-b9d6-a914dfe27981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10fddbb-b661-4c24-86e7-765e6a785a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b046a80-1c6a-4358-b016-f7ebb35e87a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b46aeb9-2eed-41ce-befc-fdc22a70f86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58d4999-37f9-4d0e-8d35-6976a9d47516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8f4f59-3758-4be2-8f91-b326c80989b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de28de98-7530-4abe-9bae-ee6ea55c4bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79212578-06bb-47d2-afd6-aae6559e7d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b787bd-2aa1-4458-b971-a3b32e4e8be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd002989-b1a6-43b0-82d9-427ff912dfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7057ee49-66fc-4f80-964d-d994862b85f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd51004-deaa-41af-9bd1-f0cdf19527e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39f2c0d-8984-46a5-bd1a-eba3f3827067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2111e20f-66f2-497b-a806-7e71c2793975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7cd820-6ace-4ea8-8f54-6d059e71e144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f010cf36-141e-4537-a12c-392cb5b92e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991a5939-7203-4bcf-aac6-d5a68076a955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4ddf03-5e73-41a2-a2f1-0115c6dabfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71d2349-5a28-4f10-b077-0040cc83419f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9d9e64-2a75-4487-9659-a19636acc3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9074574-4c7d-4926-8ead-09c25b71c228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc6809c-9004-4954-9184-ca39cdcc0f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79070f2e-df6d-4626-8fc0-1a4d1807e584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529b752d-4845-40dd-b8c6-a483d06f77c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a93e1f-b21d-4a9f-bb1a-8748745896a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f725ca8a-bb8d-40ad-8327-98bbdf38c0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ab151b-9aa7-4c12-9c6a-a9bf88fbfc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bab4b8f-f92e-47d3-99dc-9f9013ff78ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1d52fe-de85-4751-b21c-bb51e04b2799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83306bad-53b2-4484-beee-f1ffd08ec96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30316e68-3910-4e4e-8289-13382c7e0c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6d7882-5140-40be-acde-f76e60dbdf4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c377ec24-728e-445f-a4a7-059fa83d48a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9716a55d-259f-4fc7-adf1-0491df870fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a864537a-51c8-4949-9b5a-53f80ddae27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551c262d-e89a-4ae2-b1e9-6bbe36357f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e03e20-a744-4649-a81e-afc284f2d8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f7f886-f4e9-41d3-94d2-057494e88fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44e5ee6-6f10-4ca2-b76e-8829e5031483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bae6e14-1856-4dbf-a58f-da832881458d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefca7f7-3842-445a-a306-a67765fa7944", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e4eddd-5900-4921-8894-dce0ac94d719", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.78.100.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e200fb4-4acb-4b6c-8e2a-9bf643d7334a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.95.147.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06362c8c-bc13-457e-9a57-41f872b761c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d326d0-9700-4a65-87e9-660fd436be04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db60828-eff9-4daf-8072-8a3d8968a160", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.218.16.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0775993d-a20d-4575-912e-fdf742285d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.237.234.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b778bc-bc55-4b7e-b91d-f5255fde5f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.249.204.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4eed78-bc7d-4047-a099-236446da4fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.92.163.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8227f4-fd77-4175-9be5-f3231f7a1817", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.253.54.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe5778f-d637-437e-b4a6-666eeed1752f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.102.28.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c24bf4-a066-450f-b292-9299e396d1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb85a5ac-1dfc-41ff-981f-f1f9abf714af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.114.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ffe74c-6d86-45ce-b4e9-2846fdd1c5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.96.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3b9222-6a0a-4e9c-84d0-031c2c61f354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e15367b-c4e7-4ddb-b4e2-270389d36445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03578c5f-4a3c-4d4a-ba7a-b78a9a14f61e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e397ab-0b9e-4520-b43f-2b6a3e2a9fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1eafa15-552b-44f1-996f-8de9cb9fb275", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e85be6b-235d-419b-8959-478eeaf90d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067a3de5-57f7-4cc8-8d5b-182b6803994a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd3c4b7-c56c-456c-9b5e-cc4f3165fb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dae0a1f-cd05-4eb9-b5e1-04a1f04001c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9a186c-cd90-4928-aed5-5e3a73a004f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb985fe-9adc-477d-9403-9282d0591056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9a4005-237c-4cc7-87d2-044e7171a9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951aaef5-6df6-45ca-953d-11af7adea1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bd5e8a-b1ca-43bf-b7bb-6ab02269f393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1397ccf-4447-4c31-a350-111d770ff745", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1f7ba7-eda4-4010-9c47-ec6d7e897601", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d95419d-6ad2-45ef-ae92-263af26d8472", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c660d4e-efe2-4d3a-85d4-777c8ab7cfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41557a9-b027-42cf-9113-80a9e9720157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc132f0-fe5c-4a40-8b4c-93b69b14dfa2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694fa23e-44ad-41d8-b39a-d3cce399d922", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5202fa6-0bb2-4195-824b-1c691e05d5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cbe473-f3aa-4002-93de-1bff42b746b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede4aea5-0793-47d2-9aee-bac8503db6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249d2d33-69ea-48a3-a543-bff6e7e0202b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ced8c8-33f8-4c55-b40a-30f801391fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c9051b-b3ce-44cc-8c4c-2e6f4bca7d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577a9629-5770-485d-b492-99ede8ae80d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30c4ec6-f813-45bc-9d9a-4d28e1fc3b35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab166bb0-860f-4e6f-9bb9-e6791e339b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dcfb4d-ffa4-4b3c-85b4-2a0e5528a68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264e3021-5b3d-44b0-b88e-0af8f031b606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905eb929-af9f-40ec-97a5-028c04ee6872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db0b543-1663-4a73-bf7f-b5f0b8df862d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c86565-730a-4aa7-a124-788577e359ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c613116d-fad8-421e-b3bd-2d3a3e82af50", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95b6ab2-e41b-45ce-b665-e503b79bb1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea86016-d84e-4b20-94e6-bf23989a2818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26789491-7c79-48f9-958f-857c8a78a1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810f328f-955a-4458-bc90-7ca423325d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67ccf0f-7392-4f92-a8a8-419e05dd8db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00088607-4b2e-4f85-a071-88f27254ed18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984219bf-fc83-42f1-9e45-e753f2ebf2a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c29183-7ecc-4b13-b67a-d0b352c9bd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f8d8d2-85be-46c7-91d5-10056a90e1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9ae65e-30ca-4c9e-8f6d-15ebbc2a8cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22bd8575-4181-4d50-88f8-a34c432a375b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f1f082-04dc-4fce-b702-e18f99babd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45b17a9-0bab-4143-b069-0e4f3a75089f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067ad84e-91a8-49ea-9b8f-a77403d78e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3c00f6-8587-40fb-8298-b3401e221067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9dfecac-f367-4afe-babd-53208a5818d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5ff7f5-3f21-43d6-b25d-b18805940070", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88197520-4649-489e-a826-87eb821093de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36978fb-c8e3-48e9-a31d-6dbcc4371c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f76a53a-ed88-43dc-999e-1c133d0d9a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1c4129-d3a8-46e9-955b-3e00511aa269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148ad55d-50ee-46f7-aef4-f211d6767cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb569f6c-3dd0-4d8d-8f58-e7de0adb7116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3030455-39d7-4285-a266-d6ecf0b7099b", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85819446-e650-4ecb-a8d4-c9a92ad06ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ad36b7-e947-45bc-86a1-577824e422a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2fb260-8828-4ca2-aa51-bee33656910d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc92dc9-356b-437d-ab75-d6e4d1dfd231", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9faa72-70b4-4e9b-b478-66264afede38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c953d20-9e99-4ed2-9923-14e0b604d195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0025c5b-fece-4fb3-a829-af08a3101223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bcf050-b98c-4b8f-ba9a-137ab37c5311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd2a047-55b1-4c6b-a0aa-c905f2ef5a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08aca47a-7dd3-49fb-b115-79dcd62671ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8682e6-c047-4731-9d67-018cbee604a6", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189024ba-1f1c-49b2-92ff-d64d060ba848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6455365c-f5fc-45ab-92d9-b1034fd20956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641a74e7-bece-4f71-8578-a43e5cb0022f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b973bf9e-7429-4a1b-9905-a890c00da0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3385a940-0f9d-4340-a9fd-c9af4aa6ef87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f1bf13-5835-4091-b10a-5a12939033b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb5b1c3-0657-404e-86fb-046e64d4ece6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f54c0a-2a4d-4a24-bdcb-3704ab429173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38d2c0a-8b1a-4c50-9c7b-04518f6d0f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2f55ef-1a70-4605-96eb-1c7c70fab7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1974396-f2df-49ec-b439-80e061edac4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235104d4-a670-46b3-83bf-14e096de14e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b734f2de-4082-470a-a189-681edc555e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a64c13-b134-437f-9ed4-a1a7813f5d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b071bf55-22b9-451a-a23e-2dea1f5a7925", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceantoronto, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aba93e0-060b-47ef-a7ef-0988f748b659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de47ca6-24e5-41e7-bf2f-2d7a5f9d17bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad872aa7-96b2-43bc-b690-c38029387f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757e225a-824c-4d63-83b1-9f274a93facb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f67a19-dd8a-4ad0-b5b6-b87207a00154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7785d0-a11b-4dc0-b9b5-e09e01b49f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45e906e-2bf2-42cb-b9ac-5bf2315288fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49811a1c-906c-4212-8250-87bfdc2d22ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acfece4-7d4f-4bfe-a727-51cb347b744d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2de5ac7-25fe-482f-9898-26dfb70b1fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c2a424-0f7b-4152-b92d-aa4db2253c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc3fc5f-a40c-4cac-9354-406688c5109d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0568a913-a0c6-45cd-a941-7a1faa881a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268ceb4d-9952-45ed-93e4-6596a3f13a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e221c6b-ca5d-42ca-8ac1-dad45f45d8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7327719b-58f6-4632-8650-1ea48ef148d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f37af9-9fbb-464c-9155-3170d043a408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba75c635-cc67-4555-9dc1-331c7ae7349f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5de59c-9ab7-4625-b5cc-114351aed84d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf768b9-cd36-4968-88b3-4156f8f83f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4986f753-021f-4d6e-a1f8-263bdd4b8d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fff7cd-271f-4ab2-8543-ca2f4646e032", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd454ac3-3fd7-4069-9cca-27a40f5be94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bea6eeb-3931-4e77-b930-e43876ae09fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79918760-4855-4452-bbfb-aee4f1700bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cae8a3-3804-44ca-81d9-b3174454b73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86b0e5d-8918-438e-aac5-a4e9adae5809", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02bbc24-3bec-483d-80ee-5a9723dd44ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2e588f-cb56-4bdb-bc61-32dde09ab468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.89.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5de1344-e1ad-4fdc-81cb-62fac0c415c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9b7d7c-b921-4a95-9381-4ff68d38655a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b89b07c-3764-4a26-8bef-1c108e5b247c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff9a87b-55b3-4065-b494-bb5d5828b46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86cf6ae-ea7d-4df0-91d9-1b155f105440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdbf499-0f45-4f70-b83a-f27806f36098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e30fe7-4ce2-4f4e-932f-fd2f5dc0c53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8189f92b-ff63-4aed-a5bd-c1ec8114b5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a491209-b3ff-42d2-b180-b90615034c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3a6b1b-d0f7-426f-84f6-5aea8cd15604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9955254-f1e2-47e5-9b98-41a0e5ec8fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47663285-50f5-4828-bbab-790c15dd0f32", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.58.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fab6f01-a0f4-45bb-a236-43c6014b49a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.60.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47b830d-991f-4c76-997b-8d3b7e4c6c5b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.249.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e9d3ac-22e0-4c41-a96a-3bab2498d75a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.254.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3462084-5723-42b1-9c69-b543df5f7e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4306fe-696c-4443-a2d3-0b6439d49588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764bf784-4b94-4104-874d-cb49305f455a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b257fc92-43ba-4192-9f64-8d0b5dddf634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1582fc6-2f29-414f-8a53-e3a82971f46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f909935-a032-487d-80ee-ce5210bfe638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bab133f-174c-4792-b444-4557ffba251a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a13ba1-e942-456b-9157-6f06d5ffb6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44ab8e7-033b-465d-b192-d2210a0465cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2139dc2d-f99d-4d12-8877-7e8a0c9057d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd584880-d5c1-41e1-b7b1-deaf5d29d635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8352a46-5540-4c2d-8c76-15eb30688e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cdd984-e0c3-483a-ae09-b6857e3251e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05b1a40-218c-4bb3-b1f1-8d9507892ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6769df9-416f-425b-93d6-ea28d22182f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e0c5e0-d1fb-4a1b-a06e-4da6d3193b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5a1815-7a90-4721-847c-71c33ee28769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5658db0d-4141-4e7b-af83-342edd593b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d9280f-595b-447f-b1d3-31bd355fd662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d792718d-5270-4586-88ba-3fb1451a3551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f12fcb-82bb-42c1-87f9-26391496953d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214cacc9-44de-456b-b961-d53dd08a1f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6c62cc-c034-443e-9fcf-ceb057f964a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b02bc96-5053-41fc-ae15-f13770c7fe62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02cf4c4-3b04-4ef5-ba1d-5f6f5bba8b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e6c519-0e6b-4374-8b38-6b9d98e9db42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb4daf9-0e20-4e27-b8b7-ca548524d1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5a6423-562a-45b5-9090-0dba6761a583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d0c7ea-6293-4f25-859f-b6a68fe282bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49311c1f-7e26-40e6-80d6-d33a78e91a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cd05aa-0221-4ab8-b06d-d60b2095075e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8486d051-8694-4b55-984a-4b26eae6177e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cfeb52-1d60-49b7-aaf2-68fa47c17732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11dc7967-3a78-4181-a563-90b7fe4ed7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a380fa-921c-4b3f-bdcf-0f97389b04be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a1c99f-94ed-4ba2-b6b9-839fc5957c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d4f09e-1d05-4563-9858-63be66b9b01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361acda7-cac6-44b1-9618-c294daa74531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43eef848-186b-43fe-af9c-a4361a46fe86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6999e3cb-366c-4830-82da-b623a9d9a9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d308a075-2c47-4e6a-b2de-74f86b0906d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83c43af-3490-4302-bf37-01c160ecac81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.144.22.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf1c44f-ad70-4c5c-b029-851a7f50e31c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92728134-5872-4815-acd0-998a09822c91", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3597b660-4734-484e-a9e5-624943b8dae5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18969382-9953-4639-8bbf-db1243d4b089", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88ebd11-eed8-4eac-9e8c-cdb23868a8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99910bd1-cb16-4227-a85b-95bf097b8bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.202.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7da0a5-2af7-4942-9c05-55c4a5df5605", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.100.177.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c5943d-5774-44f1-bcc8-277ec9f7ba85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.100.185.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13deec5d-e7b9-4169-95b6-d48a7db208a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df580e7-808d-497e-8dba-d6575cce6136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.76.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7ea57e-3e3b-45a5-a74b-80c514ab41dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97ecb5e-c834-49b9-9053-85a3b53e4ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493bfa21-8899-47ec-a806-9a4f1f2ce11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dc35bd-9f62-429a-b246-8780c752a27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727835be-4a17-402f-99e2-62894704f6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add142a3-142e-4c79-ad2a-6153a5f21f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51343e84-55f6-4aa2-9efb-35732bbd6cc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.58.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c4fc69-4eb3-411e-aeb7-e58113f97cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.72.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d9b381-3590-492d-8b55-5adf652defe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.75.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141bd21f-e160-40c7-b05d-b861747c9275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.67.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4ded32-93e8-487b-a576-9f8799ed6af2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.247.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c86d88f-0433-4122-aa1d-c40e66b7e359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c4a011-176e-4687-ae68-67315b3f4755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6748a32b-c2c4-479a-8dda-bab9e74532af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.217.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dbaea8-e903-4cc8-b8b9-99968605be7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.83.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3005d68-3034-4fbf-a44b-3318798e5262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad5d261-4ce5-482c-8626-e9d0ccc54276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31373f92-894a-4371-b9a1-987d2c90742e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73527df-44b1-4e7f-9ac5-12f8abcbfc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d80892-0f18-45ed-911e-beb08e939125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8dd9bfe-e8f1-44ab-bc8d-906e01b5fc1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a6b561-4a67-4315-a1df-4bc054af3d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fd72b5-d10c-44d0-88eb-4b87820c2930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6442a7b7-3cff-422e-b44e-214a080b50dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.195.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbb4f2c-1f2d-47de-b793-14ba9a058e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fe9bde-8e0e-49f0-8573-82dcea9a37ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e98ff09-144b-487f-8e03-03ffb1722e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c75b1c-b701-49a2-a0ce-866ce1c52e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14704877-1c87-45d6-8fdf-5259bd958cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ccbefd-3272-44ce-baf5-ab6ccbe51596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e564dc-0a30-460b-af1f-d80e65aa42b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e286e9dd-39ce-4048-b894-180efc3d504e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71f8494-8d1d-467f-9d76-e67d8259b55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c07bc2f-b36a-4c07-bc50-149c9dd19e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcfe315-516f-4a3c-a62d-a69ac122eeeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943055e9-2ede-4fc6-8c5b-56a92686a609", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.157.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7a62a5-1aec-4295-a3ad-649e83a06042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59c3708-cb49-4eb0-8cb0-3db8e597ef47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.156.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83026bdc-67c5-44b2-90b5-576aeefa6982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5ef556-f2a0-47ad-bdd2-ee15f95c9286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef38b23-cdf3-424a-a463-2b7f87ef9755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.80.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67489d63-aa0c-414a-b1d1-bdd22d842d5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.30.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c035841f-c765-4a71-b341-b4c252e35d94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.183.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb5a0fc-e89e-4e4f-a3e9-517ca5a14e7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.112.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2682cb77-fee9-417b-8610-b20aa2ad361d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.36.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66b1407-9e5a-402c-abf0-7b5e62fe854c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.56.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c6f893-eefb-4a95-9ff6-a0329b285a97", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.6.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8caba000-df02-4883-9a23-8df0fa6d3386", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.25.139.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058bbaea-a26a-4e94-98ee-1cd61e05bc76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.208.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5a8ac8-0da0-4342-9a81-1c9b639944bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.92.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056be071-495a-4672-becc-77bcf1ec4010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.95.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373e5927-18d3-4ef9-91d7-58d5814cd866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.48.238.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7537d464-056f-413a-ab58-bec604f169a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.153.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcebe7b-02fb-4ac7-a01e-4c33236d7b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1749c16-607c-471c-9ba1-4bb7dfb315c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b344a646-d1f7-49d7-9655-cc9095721857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee0455d-bf2a-4ee0-b9b1-67c9c9f7b82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3cd9da-d44e-4346-b803-74b1855a2ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5a13b0-40a3-45bb-a9e3-caa82443db14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9b59f0-bd43-46c0-bcc0-e47058be39c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f1529f-2bcf-4acb-824d-cb4cd0fb364f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0372f08-f635-492a-ab9e-c00b2f1e52ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384f7136-2590-43d8-9503-627f761eaf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a67d1a1-a1f4-43e8-9c72-85fe574d5da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3189a3-9114-4c93-9c66-5c7457b365b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4c2bcd-f899-4cd9-8a80-fd175a31162f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.105.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc55bea0-e5b7-4841-9029-f6e2d031b687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b478cba-c725-4098-8e2b-3d24e0853635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fe2511-5c01-4438-9a5d-5b69471ac0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d17376-ab15-46a1-8f92-209163e4f0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897e5ea7-46ba-4155-a549-710782169c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b68734e-bf8c-46d4-9f02-7f144ce7db3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3d220a-1559-4260-8193-2079933ef937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844c53ac-bdcd-4de6-945f-613ad9d47686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba6b1ce-1af8-4054-9651-2632650e9f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c31d259-a441-4170-90ee-fd8906775420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Web exploits: exchange-ecp-proxyshell. CVEs: CVE-2021-26855. Sensors: digitaloceantoronto, revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}], "labels": ["sensor:digitaloceantoronto", "sensor:revproxy", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d7a8b9d-9777-4b7b-af8f-d81cb25bbdf3", "relationship_type": "indicates", "source_ref": "indicator--1c31d259-a441-4170-90ee-fd8906775420", "target_ref": "attack-pattern--a841d696-cb24-420b-9d1a-d7f4149837fb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a9ebedd-00c5-4b66-b91f-a287a075788b", "relationship_type": "indicates", "source_ref": "indicator--1c31d259-a441-4170-90ee-fd8906775420", "target_ref": "vulnerability--04b30a2c-731a-40e6-b839-cff8952dd34d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf193ba6-3ff9-46aa-bc9d-cae1e5a1a4a2", "relationship_type": "indicates", "source_ref": "indicator--1c31d259-a441-4170-90ee-fd8906775420", "target_ref": "vulnerability--ee0b9713-dd37-40db-b20a-9b357e4caf4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fc7b55-9e7a-4470-96c6-847fb8c30a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d781d3-60d7-4f0b-896a-3ec5c26466bc", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe3c8857-b3e5-49ec-abfa-769e38dfc997", "relationship_type": "indicates", "source_ref": "indicator--c8d781d3-60d7-4f0b-896a-3ec5c26466bc", "target_ref": "attack-pattern--a841d696-cb24-420b-9d1a-d7f4149837fb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b097b4b7-45f7-4a3d-9177-d49e2d85b0a3", "relationship_type": "indicates", "source_ref": "indicator--c8d781d3-60d7-4f0b-896a-3ec5c26466bc", "target_ref": "vulnerability--04b30a2c-731a-40e6-b839-cff8952dd34d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b677ecc4-f2a5-49b0-936d-9ca81b306508", "relationship_type": "indicates", "source_ref": "indicator--c8d781d3-60d7-4f0b-896a-3ec5c26466bc", "target_ref": "vulnerability--ee0b9713-dd37-40db-b20a-9b357e4caf4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4ed279-7c50-4ed9-b7a9-e0e52ae3b1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b255d1-ed88-4a0c-b3a3-9597abcd5d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b8b7e0-d712-4e7d-ac04-c5529aef3db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6e6174-ebf4-48ec-91dc-b18188480223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213c819c-4e80-4571-b080-7bd3dc68b943", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74185e5-f957-435b-8339-007f7b580c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217d3af1-2298-4a11-beb7-f74b5cbe7ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd8e551-19a4-4ac4-a645-f267a939ba36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8136f624-1df2-40d2-88ae-0c2adba2d1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c93f9c-8ae5-4cac-8dc3-560df8b7b151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19eb255f-402d-47c8-945e-47d515404b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3121b419-49dd-4e7b-85ba-790abc674115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685b22a3-77a0-4fe2-955f-c92c6d27b7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33213837-1dd1-4b55-82dc-32decdcb3f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986f5056-554f-448c-8267-d76389f20df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e866542-4189-4f70-bef8-fd65525db8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9429c89-dba1-45a5-b269-ed831a4bd2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e67cdbd-e146-4b82-94ee-5923cbc20b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bb51a9-e0c5-4e38-a5a7-8f058717def6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404eee66-276a-4742-a18c-24b93eaf64bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7ad224-300b-4d3e-bb0c-c7936b6c391d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ca554e-08f0-4df4-867c-390e177103ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b9e8a8-9af3-42d9-8b5d-5f3761f500cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.224.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28d3dc8-fe40-42e4-8f0b-c1794aa98041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40852aa6-ca3f-4bb7-ad8d-569e4e4c14ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbac682-c8fa-4e08-9938-d47d669adac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1f5d9e-4a34-434d-b3b9-776aaf220f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8192ba-0f21-4e18-9f32-a3304923ba54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.162.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2796ae65-b60d-4395-b598-c26be3100f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.41.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340eecf7-2780-46e9-9b84-a839bb7b0cf4", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.86.82.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6fe6bc-a2f5-46fd-b5a1-8d552030b935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901ea259-2589-4371-badb-523b1d69217f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.136.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659cb557-bb77-4e15-bdf4-444240d0e5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0ef028-2be5-4715-b700-332126e1e052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc84a4c1-3a86-4887-a68f-99ac367e49a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fab1cdc-972b-45f6-b9e8-504dd57a6087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.115.27.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fedadd-135b-4dcd-8057-e5897676f1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.202.252.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e02245-1356-4c14-8831-10d8352a4a39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.30.204.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f2c7dd-f2b5-4e67-a94d-80545c7fe733", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.46.142.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c50405-a779-4a8a-bc2b-827ba946f5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.127.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e58835d-9c50-4ac7-960f-e70a9d49e8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.93.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0316abe4-f26e-4cd2-a800-1fc9b39103a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.6.182.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7453cb-e0b4-4e3a-b6ed-795fffd8b69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.69.61.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14def2b1-515f-4fb3-a207-97c9bc1e1828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.132.11.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd288042-f84c-4b8b-9bb9-ee3f7b2d72ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.173.65.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a40516-c459-4d89-8c61-7618e71fba66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.194.61.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161f215c-100d-4ec5-870d-cef936bb5010", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.196.15.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63f92ec-4d0c-49a1-92b7-15dc37e5d261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.217.246.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c389a475-51e5-4877-8fe2-20a10fe89fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.239.56.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004b85b9-927d-4bc1-b748-c2c4db86fd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.248.44.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a76218-66c5-49e0-8084-876f8a4fd90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.254.113.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4033ae34-ebde-4f18-8eea-027c5c0f724e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.49.38.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fcf890-4789-4041-937c-f02eb039af8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.79.3.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7755a097-7cd2-4206-b079-3562d5425dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.107.28.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305b1778-ea25-4091-8596-a44de886fedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.110.213.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b9ffbd-9795-4d2f-a433-d671ddc769dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.165.25.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe7a219-08c0-422b-bbd0-39255739b0bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.170.91.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00277c55-ba54-4337-a52e-d23520157bed", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.175.179.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7224e3be-53e3-47c2-b5b3-7a7333d98cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.185.158.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb46120a-abda-47f1-85eb-9367c0b8eb99", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.189.4.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5196fd8c-bd44-4daa-aed5-5bf870442291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.46.68.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799ee394-cf42-4c80-8596-96345cb9f98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.57.1.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68783eea-5c17-4350-98ed-079d6ca76bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.65.118.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb0250f-14d5-4dea-b6dd-3e838cabe114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.100.164.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d5b0f9-f637-436d-8f33-cba8f330137c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.132.61.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb77c332-bf45-4d81-bd6a-09e657704f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.156.108.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db3009c-1e21-4bdc-affd-d91c0968a73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.186.124.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b171318-2ff5-45ba-af4e-da831ce436c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.189.196.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d073c56-8e5f-4e6c-9c8d-8f5883626687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8a1af5-5ff6-4940-90a1-b535115d7301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337d494c-ef99-4ab5-96c1-df949f9faf1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d7f9f9-4f75-446d-a800-d82f676381aa", "name": "Malicious Host", "description": "Web exploits: openwrt-luci-rce. CVEs: CVE-2023-1389. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73fbaae2-5407-4a96-ae6b-188ef5fdc02a", "relationship_type": "indicates", "source_ref": "indicator--90d7f9f9-4f75-446d-a800-d82f676381aa", "target_ref": "attack-pattern--a841d696-cb24-420b-9d1a-d7f4149837fb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba8db94e-4f6b-4ac2-b3e6-c775435f3d9c", "relationship_type": "indicates", "source_ref": "indicator--90d7f9f9-4f75-446d-a800-d82f676381aa", "target_ref": "vulnerability--2f3c530c-f3ae-4594-a59f-18f111f1c5c1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11af7459-9c87-4297-95ed-0cc7925f7aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879f4c30-e849-4d0f-9d12-b813fa594abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd366d9-94a5-4544-9f9d-e39eddda8852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a601d9-51dd-4712-be89-2a9d192f92ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc9ebc9-c878-4f3c-8612-3a96d5a58ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfac9feb-e26b-41ac-93b2-237f2169e694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f60ab7-87e4-4b75-8ea6-682cdbb03839", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3aeb564-565a-48b8-b698-4d19bd752b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf24cb3-e483-4a9e-a73c-4052f4e387de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7ee6be-6b82-454e-8176-1d61d96ceea5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14894aa-f3e5-4acb-b26f-532cd8074181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278865e2-1e5b-4f79-886d-98887e981d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2e3004-9045-470e-87d5-284618fc57ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f645d80-3f2f-4abb-bcb2-b4b718a4529b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1713ce-3ff4-445e-8862-cf702ab16ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3023372e-b2bd-4112-ba83-a6c32e7a5d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f6de60-f7ad-494d-aaad-7fab024f9d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadf130c-cf75-428d-bce2-b3c3a293372c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044a5990-7fbe-4226-912b-9b982458df06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17290d5-d687-40b2-adab-fef180ecc5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68094292-7213-4a35-9560-27cb77b82e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed5fcf6-3b33-4977-9252-62d74ab035d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4383ea30-dc9c-4dcc-847b-9b36e18d091f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34754b21-8655-49a5-87c1-65d81f4d359b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56d5bb7-7910-4fc9-af10-b53bc5dd30ec", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ee3af4-d343-421e-9387-04947165ad82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d5665d-67b1-48f0-8836-23ad50f4505b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9ed690-4a4a-4557-b590-74c02f372ca0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a9dfb5-8197-4cb6-8376-288f354692ad", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d18c749-bbcf-4a9c-8f6d-3f820bbffe4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5908fe2c-3858-4a54-9d7d-513f3103c28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51967c80-a13e-475d-a111-8cba9b364904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c742b0-9310-463a-859c-48871cb46a80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f3a83e-8846-4bcb-a9c7-647c82947a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6eb923-bde8-4c50-9263-5a7fbb9ac674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332804b5-476a-446f-87c4-b2e1a98c87d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d99f86f-1ae2-41e6-a6c8-daba26e6a6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d352f3-78af-42fe-95c1-2823e4abdc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e975f54-ab9f-4874-9f5c-59f5e7966942", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320ed344-1358-4c1d-a426-a1815ec96457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f8c825-5bef-4297-a2fc-fd8bde8ee4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f78ceb-d9a8-4267-a112-49430ee47bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb89a16-3612-4140-979a-6f2a1037e8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19be3d3-bc93-491f-aa23-99f4e28df616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bb1d6d-1897-4e75-96a1-73e149559ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1deb25a4-451a-4091-8399-157cd2495636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56ee7ba-a274-48d9-8046-c19c983a1466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc57f84b-ab88-4077-a0b1-6e5724c0b686", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8659f3c1-151b-4d2f-a7f1-7aa0699f4271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40da604-a4dc-41f4-bd2a-104b52179d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbef2476-97e8-453d-8b39-096cf51f7d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fe2151-7783-483f-bc59-44250fca498b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e949500a-e5e7-486c-b174-4345e742344e", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecef908f-ec51-4c46-8f98-99a7ccf72560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac14b39-397a-4ba1-8c78-611c6b25cac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2f261e-caa6-47a6-b712-893ec0b0545d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7942b1f3-5480-4bd4-9e00-b961beba2b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3390e8d4-d06a-4449-a872-1b0629e4cdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257a242e-dcab-41fb-ab27-2cd9ac477311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ced9d3-7f31-469b-88a2-29339f0f8be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fef30b-0432-414e-901f-73afebf519ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca7e018-63e1-402b-b179-a013892cad03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c910fd8-7d02-4a7c-bcd0-32501d127544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da18d194-f801-4854-9b08-a3447dff9134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3e01d1-a36e-4016-b7f7-2c4296be7cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ecc5ab5-9293-4490-869f-29d920272279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5178d057-2bca-42f8-82ac-ee57d95aa7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341c04d2-d7b2-4c47-8992-9dcfd8410774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1243e47-6657-4b7c-9790-2925c0bf2eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021f527d-3efa-4e54-a27f-e83e526a372a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d11637a-df1c-4efe-bc54-abded97b93b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e512acc-4654-4c5f-b96b-e85600addbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc7f331-b218-42ab-9147-d96590645076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164e1487-1ffd-4ddc-a067-9db6fb436c2f", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac25518-e814-48e9-824d-3f894bd422c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1788fb8e-f7b5-4b7e-b3da-1b315a7c8166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de986d8c-87eb-4a94-b4c6-be8778f392c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47593c46-8934-44b4-90a2-f08036aa222d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642da2e1-ecd1-408f-b9e3-2ab866b3a9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4487b659-a89a-4964-9766-7ae3f05b4191", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0eae77-acb7-4c3c-9527-307e360d3254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f925619e-5623-44e7-a540-0bf2e6319d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce53158-435f-4412-b829-0a5f72a6f03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8591bc-058f-433e-b701-fd89e051c8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da90755b-2e06-4e31-b7a1-20ac4b10416a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f0cfc6-6c36-424f-8da7-2c835d92e6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffe6477-d34c-4215-bba8-c1cb60682c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0872f9f9-e599-4925-ad81-e0ce948600ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fc95e3-4054-4b5d-a4e7-628b84dfe65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557f0c2e-3236-4daf-b37d-21307d05c13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2399418d-2dd9-473f-afc0-650d597a8805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.237.106.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0557d0-bf50-47fb-94c0-b1dc1687c317", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.183.111.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08b1dba-850c-4d45-8481-1350a86cf96f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.133.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846d8708-3623-40b4-b500-cc4683af78cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.172.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73d9113-175f-4ba3-9a46-a9bbd300bb5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.184.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210c173a-bb9a-45ab-8d5e-0eb7051c59d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.194.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e405c63-6ad2-42c6-85f5-f022894f9e2c", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.42.55.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479f4ef7-1a49-49ea-a24e-3952b763433f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.19.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07192ce7-41eb-4676-b113-ce680159ed25", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.2.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e14408-1de7-4774-a16b-b504ec62cb61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.183.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dcc1b9-6e34-407c-89a0-4cbfd6365f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.216.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc9d4a7-6677-4fdf-acf0-f342db1a1286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.49.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dc975b-9b89-4f1b-ba1f-e45ad5a93161", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.58.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425c5ab0-8d4a-4057-889d-86dde4e78bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.58.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5bd9d2-3132-42cd-95a9-53973bf903bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.8.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714dd6d9-19a7-4c7b-8e5d-21a251a56222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.86.0']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6aaffa-9ec3-4936-bf98-5a05f1d259fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631f0c2f-5690-434e-87a7-5b413fce1e56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad1679a-6051-4de2-8e2e-64ca919a45c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66f9734-59d0-45a1-a06d-0b3bb72825c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7999ce-9d6e-4ecf-bb4e-5f578f2e5051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abf8d0f-5fda-461f-82e9-7fd7c9ef0482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e5ab99-9d6f-4ceb-9d21-03a386a8f2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf745a8-e88f-41bf-8cec-afbd564b3287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c9a9e8-429a-49c5-b3f9-4c329facd4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4380fb-8d67-4fbb-86ee-b1699057f009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8f0f66-fd77-4549-a687-bbe631b5731f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.96.191.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5951cf-cd4b-411b-aae1-f2ccd0c6f0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4aadb4a-cc48-42ba-aa0e-039110430e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfed453-dd66-4b5d-8256-be177ed4a91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.178.158.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c594475c-d090-4daa-804f-985dadb7d411", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.240.111.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795e7915-ec18-406b-b6b8-c53c9ac75e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.33.37.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8edd3b-3d50-487e-9709-9dda9edf64fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.106.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b9961a-3dd2-4408-a4b7-c6f291e00223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.133.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88446d52-8ce3-4f06-9950-913b94f9fbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.137.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccc2a3b-e0c4-4579-a4da-07bc115d1fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.17.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3580ee-e087-428f-8b6f-7d8e7ee0ed78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.242.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d836b53c-df92-4f75-9cbf-11daf4ec0fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.34.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662bb9ff-4a4d-4176-8c80-69c4759195a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.90.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a1615a-0a47-47fa-9e17-74dc61c0c511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.166.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ad5d4d-3a98-4094-baac-e53761438b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.185.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388d6973-ecd6-4404-9770-2f6d402d25b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.184.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58f4741-302d-4fb4-940d-f586010afd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8560cf4c-214c-4b14-9571-175dacf3fcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16496848-8867-4680-9ccd-376f3a5031d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d26d94-2fb7-48d4-b5a4-29e1b3c65297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.191.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdc0acd-5088-401e-a420-80267c0e9e60", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.79.142.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb62c8e-d962-4386-a90c-c4956ec281a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.87.93.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae174fd5-97c9-4a36-83da-3392f98417a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.199.165.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544e38c6-cc8e-4bb8-88ab-400610557239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.225.139.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c71f6a5-ece6-43ca-85fb-636fad135883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a7f4e8-0b3c-4d18-ade6-393429ab7742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a82d2d-15f8-45f7-9b11-d2ab09d5c480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.32.58.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d6c59f-1929-4ad6-afe3-4884b8984607", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.32.69.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb38459e-01a4-42a5-ac2d-ca87e575f5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.65.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f051dc99-ebab-4270-a909-b5e4a64be0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.242.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854b23ae-cbb7-46fc-ab23-063c5ef3beac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.68.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671c7cc1-65a0-400f-9763-0c9b19beca01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1ead6b-eeb1-424c-9ff2-7c6229698c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2524b2f5-3289-4758-baa0-fe464ff1da5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9305e7-ca4a-4690-81e4-1c5c843bb3df", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e2be45-d036-4c28-a1bc-a2f19cf92275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2073701-4aa1-4592-89eb-7d99cd5ab7fb", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad5e024-9faa-4bed-8f04-b09e424623dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17273a92-3982-4f31-850a-cc9580bcb2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc7cdfe-35c0-44a2-87b8-84fa920e9aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4fc9d8-536c-4839-aebb-d8855a3b5830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58356033-8020-4510-bf84-0158fc2ee765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e0fbe7-8b6f-4e4e-a697-24d7025d2c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fd8e20-021c-46e2-892f-dd6c5d7757b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6812311c-e216-4ea9-b8c8-31c183b49b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a0ee08-6cd9-4008-8121-1b1b88cf3a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ef8c0f-8eeb-4227-9eaa-715634c04836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014d4b68-0b9d-4c3a-baaf-61c438e4bff0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.78.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1d109d-8e4c-4ec3-96da-25faa10281bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.86.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1eb5b23-8572-452b-8751-13ce43e8b5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.90.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bd833d-b5ab-4fe7-9a64-bfe789ad18bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.172.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68109ca-c911-4acd-974b-3759f6a1e81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.241.22.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4ab830-c500-443a-997c-0b64b8c24706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.5.130.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e538c09-d4fc-4467-8893-25212756b29c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.55.79.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946072f4-4a2c-4b2f-8638-552c795274ab", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.66.220.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf4877e-8725-48da-9afa-2747e9b18588", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.225.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e692f00-652d-49d8-bba1-c9ce630497aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e58244-9c7b-4549-ad6d-74ade30cbbbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7ec67f-4955-4446-a66a-faeeeba887dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9fb320-9160-47d4-a75f-fd8723891271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0674527-5ef1-42fd-ba04-a09c8b1e3e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48918096-ea82-4e31-9f82-599da65883ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acafc149-6f4f-47a3-8226-adf828ca067f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01274538-3db4-4969-b308-d74fd7217ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89050d8-1daf-4398-8154-b4352baf2cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83de71f-45c2-4cd1-9bf8-a1cadb421cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1eb5a63-254b-4fe1-8946-0d1f50e388ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fc5d0e-4da9-4958-bb1a-a7941e5a55c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58947871-13d1-40a8-9359-4294368e989a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934c4197-fc0b-4273-8194-e4717553093b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0b7313-c0f0-41d7-b43d-43b3a4093987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6924366b-3b12-436e-ab5b-6075ced78fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f982cf-f62d-4954-a3d1-d0967bcd37e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1541900a-ea10-4a22-970a-425c231d3b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8a4eb1-aaa9-4db6-8fca-98497f5dbcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc13496-91e5-421b-900e-2a4c921d2167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d7fd1b-ad48-48e7-984b-26881f9410b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbec1a3e-0b0c-4339-ba8c-a1d4c82ebf04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.219.89.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b560feb0-b82b-4e5b-a078-ce60a6993d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.225.206.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f1065f-85ae-41a9-bdc8-49fcfd5ffa04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568e3c92-3709-4366-872e-48e6595296b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2827fd5-35d5-43d7-97af-20086d976e1e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.241.2.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0f2c7d-2f96-4f9c-a700-00644272d439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.250.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f224ab4-35cf-43c3-9c20-073445d562e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba89e41b-6302-4cce-a514-6f31a6e82625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8835e891-f9ca-44de-afeb-c455acb5bb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8364bf45-b96a-484e-9a37-ed4a6624aaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62608347-00d3-4dfd-a1dc-5e4cd8c5f19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1ce7ff-934b-4ea7-a8d4-73e7cfc8e992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350d41d1-2e94-41e3-a6c8-907e38037b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8bd0fc-5698-44ef-9d4e-64a1538b1a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562fb767-5317-41ed-9246-f1437dca8d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d73dd9-afde-4547-bde9-70d7e32c0df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5346799-f76e-4744-867d-37eb553a4376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021c1b61-bc83-469f-8e98-2e2e9634563d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62621220-5d90-4947-9d6d-614ec8f08c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1301c931-8034-4fb6-b7dc-08a198faacf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5533f5-60b5-473f-aa86-d05d0aed3df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34addee-b88d-4c21-8cf4-a849d15ad310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8867144f-d2d2-443b-9a2b-8bc862b0534c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a821a76-2fe4-47c0-afa2-c669b7bea73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f003c45-12a0-4afb-90e7-c64269108b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4acb978-3c1b-4334-8c5c-9870cc9de91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1037be1c-5445-4e97-89c2-5bec26a91949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6200ce-94c3-477b-9a08-32d9fa50f3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b0122c-8834-44a5-a948-40b932e63e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b031f103-6cb2-467c-8c3c-6feb16bc156f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab732f86-08a7-4523-995e-996ca6c79227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f9174a-b81c-43ce-9a6f-d4990aeea0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dd9a85-58f3-4959-9f0a-d5bde08d6e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b532aa-ffe7-4286-8754-bba3496331d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3062ee52-055e-4552-92df-8b3fcf85f474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2c0c48-b7f8-446a-bbc4-001cbd230c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1747e7ee-0458-48c1-b366-a3918091ce4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167a9eb4-4de8-4635-9317-4c2580ba055c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.163.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da4d64c-a17f-4923-8ae4-6b2b0bf61451", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1e615c-adbd-43d4-aaf4-059603d5df39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4115c9-9e9a-4564-948c-9ce95e7c7881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b99ed0-34f3-42d0-ab87-6b782773a28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be497d0-7923-407d-ad22-7d20018930b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735aafdf-4fa8-448c-8ae1-952aa79c47bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46a793b-02d2-42a0-8a02-932478d5a0ec", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.150.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f262627-581d-4a89-a3ab-b3cae402e0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.165.93.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426c8526-e8ac-4989-b695-d775e1fc3535", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.94.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43441dec-d312-48cd-8807-a35aca66f71a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.199.148.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad31d976-c057-4d2e-ab2c-dbebad05ceaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e03768d-1554-4b12-b9bf-6f8f8c23398f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4600dc20-c612-4860-938b-3be6efd3ad1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.240.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8387620-bace-454a-8577-418ad41f3306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.77.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69673ba-7ce1-480a-8bff-1d06e8f91535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.161.22.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4ddf66-e18e-4e74-b8bf-c179881c8fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049325b3-a9eb-45b1-9a9b-3ecb2ff71d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.201.174.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2610fb5-8a2a-48ce-8d38-d0548e35e212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.244.143.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6f9d2c-9abf-4546-bd12-caef43c9150f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.248.44.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b895327-64d2-4c60-ae3a-d08f913ebd3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.57.250.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea29599e-667a-46e7-8f33-4905a5e284b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.201.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258a5389-ce99-4dd7-96ed-74ee36a6a2d3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.243.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ccad6c-7e2a-40a0-9085-a7cc6e8119cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.71.177.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf9c2e5-5069-4192-a6de-ec3c86fbd368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.71.45.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3507b1bc-6b0a-4058-b3a2-cf24f81c4059", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.78.131.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60dd95c-56f1-4f82-bd34-88f04c8c7a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.140.109.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7167995f-d79f-469f-ad40-e3f4dbb016ae", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.145.37.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518f7c81-c567-4530-aa91-adf2468dc477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.156.249.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a019b4a5-420d-4be2-9abf-091ab42a6c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.85.63.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4102db30-b696-4213-8929-9012e25b83c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.194.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56be7d52-65df-4033-a287-98585a07e21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.133.53.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6eee89f-5d4b-424a-9410-263d7c4d3966", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23d766d-4378-45c1-8d82-3ca2e6a14626", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33db3147-520d-49b1-87f0-6eb927b76d4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dfcea1-ebc5-42e4-a6f9-818f5b8e268f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c115493-f7b5-4c29-8bde-6858c32dd40d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.76.68.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6100d4c3-5864-4d3c-94bb-aef630a5dbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.80.135.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78c529f-0c64-4a8e-b57f-c881b2ae6424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.187.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041a332f-673f-4e2d-9795-56e96789d26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.167.97.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef6d083-3c36-446e-b8e3-c64bb5ee39de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.180.47.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaf3417-cc61-4cbc-a649-ab078f232ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.73.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c915fc-3408-43dc-b83a-4dbc004c3a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.235.195.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67edb5a8-9e37-4365-ac0c-fc81e3eddff5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.112.46.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df55ef6d-3d09-4fdc-a87a-b23b3d31f17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.136.220.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28e3d06-e184-4c3c-bc4c-71b56cccf404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.168.36.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b04a18a-b99e-4da8-a89c-40a0ea2fb3cf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.223.177.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58dc10c-a1fd-496f-807b-6b60a44d9a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.101.184.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82face7c-7eec-4983-94d2-85e42cbc47e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.255.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a8438f-1690-4538-aee7-52a81416e4ef", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.124.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be7e2b7-6b72-4abc-9e81-7ded18dd10ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e577ef-5394-4851-9518-ed1595b0b351", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebe4585-0091-458d-aba2-4c4295c8d032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.92.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65351356-f9aa-4b73-857a-d823078e5f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.179.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d389b2-5f16-427c-ba70-a2142efc2db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.204.222.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4547c61d-2ad8-4a4e-92be-c7e8eac32d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37d6046-6e14-450e-bf6b-49f3c2e335b6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.74.185.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f937c88c-f856-401e-ae80-b75d90d82063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.78.237.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e548879-6e8d-4c26-8963-947550df3c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.78.245.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33eef636-5189-4eb6-bab9-166bd408d0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.87.116.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e4ca39-a299-4dc2-8b7d-6302366b4c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.90.225.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c86c4f-040b-4fe1-b650-94efa318e668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce689f1-d1c4-466e-89c1-a9d05a30fc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.227.217.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32834ad9-5cde-40fb-aa04-7ecfe3cdb279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.236.181.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a57ed9-f426-4b6d-8030-0b7597b5cf2f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.236.64.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268222ca-c61a-4b55-9abf-882b7a61a143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.47.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10b06b7-3aae-4e88-8b6c-f1f53d04b834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefee336-8ecb-4734-a17e-05bb8696a080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e734347a-8fdd-4ce9-b72c-c5e2eb6d3285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfed9ed-11de-40bc-ad8b-c2839d541207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e0b1df-fdfa-4c42-a198-35de4742e9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcdc276-5279-425b-90e1-141c922e4a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba0e3d9-b27d-42d0-aeae-08f225c23fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41111a0c-e072-486e-a1cd-058058c85165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422e5e18-429c-4f8c-bbb9-b0e68ae32742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916ea379-41d9-4c1d-9b44-2855a7c24b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b180d80c-ea31-4cce-8fc9-bd6dfa5ac350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c538d1c-9b48-4f5f-8e02-c7dfab05b791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607f85ec-cab1-46b9-a34b-4ea80f43ce05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e310d4b9-d1f3-4de1-9a37-dadb152e58e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5fa8f3-5bf6-42f6-9dd2-dabcb0269c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb164a7-a1a4-46bb-b77b-529f8a7acd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.17.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad440320-ac54-4b52-b55b-59463b8a9ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.191.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9865a52d-9e30-4b6e-b9a6-80d02e7f4e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.32.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f81b2e4-e057-4f6f-b7f7-f01b970528b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.118.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818acde3-4efa-4368-a86d-5f565fe6455d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.208.220.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276fc100-a15b-4fc8-aad4-6e5ea622099f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.211.148.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078f0ec1-5951-4407-8733-8e965ab99940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.42.124.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0898d015-36f6-4c0c-a638-7f1dce278667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.130.62.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9f6771-8666-42f7-9c2e-bc2d4cc6667a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.152.25.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fe9404-a2ab-4aa1-a99f-7e88d2981d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.185.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed3a91a-ace5-4a4d-bda7-b18a2e0672f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.197.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc80de3-9fa2-4339-91c1-d6e1177d3b3a", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.185.17.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec90baf-09a8-4b41-8b2d-7b492f33ee53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.187.150.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459922e4-5787-4f84-be5c-562c73c2a820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.194.42.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2996e06-a75d-4ab6-9d73-412da76e12e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.194.97.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f70f1a4-9813-45b4-be56-44854c38bbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.196.254.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb12f49f-fe53-41c7-9075-f32f359a468d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.199.254.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d70758-678b-407f-974f-db80c6eb7be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.20.177.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b91a3f-63a1-4620-8ecd-c902b6ccdf3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.20.94.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8e5124-9c60-4bfb-9b55-2c5ff4ed5d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.200.66.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8745ccb6-3033-4531-9fdf-f7bbdfacfbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.207.237.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d9f530-13a4-49d2-a89f-8035c83a4946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.30.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a847de8f-1d9b-47c6-bae8-00e3cb1c0def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.22.209.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cb9667-d300-4f7e-8ca3-492726e1e91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.220.255.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0007bf-6a64-4c55-89cc-8d688fdd145d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.24.12.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24dde0df-5f2e-4e37-a299-8ab10d00fbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.24.90.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199ead6f-b701-4f25-8a52-037525bda1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.29.164.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc8ea90-91f1-48a6-9c6b-3e270372a360", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.44.125.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298c7707-9602-4ff4-b3b1-48bb6156d1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.72.90.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f23f0d6-923f-4bad-837f-77568d727751", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.2.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7399ec63-e5c8-42a6-8c05-b2116e5b79ac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.3.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a2bf69-f343-4390-9003-bd5968961bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e1760b-9e2f-42f3-bb78-8213b8c6ae0b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ce0074-7645-49fd-9b05-e50c4d50e71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6387ee0d-92d9-46e7-8bf4-88fe982b8f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e234f9da-7e75-401c-81ce-d807b094db97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.147.122.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505a50dc-2328-444e-bccf-d8cbf33843d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.249.42.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902acdef-7aba-4de1-966c-d5ade8bbdb44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381b3a82-58c9-4a3e-81ee-4f4580a610a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.80.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ffd0a8-d9d5-4331-91be-68bf9821a81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.210.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353a464b-c145-4983-ad54-6e881f92427b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.230.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa7ed7c-7816-4992-8257-f0cbfd9d04ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.81.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d398079-ca8e-4003-b917-aa58beb52036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.94.102.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af806878-7182-4b88-b060-f51433924544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.95.169.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a815a19-9756-4602-b3b7-ec82742bd01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.232.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166c3ce0-30c8-48fc-9cff-13b464540e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09055f15-0a76-4c62-8551-c91b7fdf2fe0", "relationship_type": "indicates", "source_ref": "indicator--166c3ce0-30c8-48fc-9cff-13b464540e6a", "target_ref": "vulnerability--0bd3e549-ecf6-4a17-8378-45dba1533e77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdee5405-81b5-44f6-b02c-79ae02750b23", "relationship_type": "indicates", "source_ref": "indicator--166c3ce0-30c8-48fc-9cff-13b464540e6a", "target_ref": "vulnerability--057f8879-e1f0-479d-b6d5-eab7b39d4678", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3aa4b77e-081a-4a85-93e7-432df0c03699", "relationship_type": "indicates", "source_ref": "indicator--166c3ce0-30c8-48fc-9cff-13b464540e6a", "target_ref": "vulnerability--936c41ea-996c-4d52-8311-0cce370449fb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe1a154-2921-40b3-9f60-97f675e4bb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd086901-fb9b-4a04-b5ba-59985625ffb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e354b2b6-7c9a-4e3e-8c3e-4ac236edf149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbabbcb-7abd-4dff-90c6-b8ef26d2e08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d086d624-bee9-4694-ad82-75227f9fbd3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c84b40-37a8-4b00-82b8-1dfe03a13afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8701350a-ddb1-4c79-a47e-4936df037c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019f5b46-a7e0-40e7-9102-2148d78a2ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3684d64d-566f-4a7c-9099-34cf45977df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11328339-447f-427d-929d-b7b7acc16871", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.149.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e03c23-c6e7-4d6d-b343-70eb6028899d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.193.54.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d768a9f-3305-48c8-9131-657eda6fc312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.200.234.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461df821-64cd-44cc-8956-5bbb6c858724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.3.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df768666-b87e-4c3e-8f14-9ff22417a32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.235.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c801d29c-1e4b-4ffe-a209-c4d07470ff99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.235.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e277a066-071c-48b5-939d-ad98e58a4404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.235.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7309a7-d490-4959-bc2d-b4beaf37dc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.235.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16fa202-3689-492f-bbd9-ae3f6ce808d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.236.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fc912f-99ef-4a21-83a2-0f06565146b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.237.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8288a5-7930-404d-b01c-fa6cd1996961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.237.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8189d3a7-c1a1-4521-90e1-2f0219f3c659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.239.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef61448-8d06-4c56-b46f-ed4173eee469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.24.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d292cd-e5e1-40b8-a4f7-c2901df05331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6edab93-e88f-4b09-b385-d3f3ac548421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295ed1f1-be4a-45ba-a65c-6de3663d3800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ace6557-98f5-4317-8194-df917dc74808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20625835-4236-43ba-86df-600d72c6c83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.28.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d84b376-7b0e-4e15-a5b1-7dbb92ea1cdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.193.31.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac1e6a6-11a4-4673-838d-5a24792908e7", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149, CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.12.31.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2cc48777-9032-44d6-bafe-876d32e7bcb1", "relationship_type": "indicates", "source_ref": "indicator--dac1e6a6-11a4-4673-838d-5a24792908e7", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c501218-6473-4ec8-b563-9da6f38ea6cc", "relationship_type": "indicates", "source_ref": "indicator--dac1e6a6-11a4-4673-838d-5a24792908e7", "target_ref": "attack-pattern--bf47a23b-89fe-4708-a316-3b190265bffc", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70580c54-69bb-44dd-a6fa-6eecbda804b6", "relationship_type": "indicates", "source_ref": "indicator--dac1e6a6-11a4-4673-838d-5a24792908e7", "target_ref": "attack-pattern--de37a587-ea6e-4f07-8cd6-ebe65a9e79ef", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--650fd8e3-329c-4a5b-b4f3-d361effc072a", "relationship_type": "indicates", "source_ref": "indicator--dac1e6a6-11a4-4673-838d-5a24792908e7", "target_ref": "vulnerability--8c2d939e-e4ae-4ad7-8b59-9e6939f117d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b725e26-df90-408f-bbdf-07d5674babcc", "relationship_type": "indicates", "source_ref": "indicator--dac1e6a6-11a4-4673-838d-5a24792908e7", "target_ref": "vulnerability--0bd3e549-ecf6-4a17-8378-45dba1533e77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b30ab0f-60db-4b52-a181-c6184e6aa2ca", "relationship_type": "indicates", "source_ref": "indicator--dac1e6a6-11a4-4673-838d-5a24792908e7", "target_ref": "vulnerability--ad4e7fd8-fa82-42c9-b9f0-b3e45fb74e42", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3e8d2f-0ee8-41c7-8488-0480b77cfa99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.217.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0927c80-7390-4aca-abc2-842af135b7ef", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.138.129.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29a12499-0f76-43a3-a31a-3b903184d4dd", "relationship_type": "indicates", "source_ref": "indicator--c0927c80-7390-4aca-abc2-842af135b7ef", "target_ref": "attack-pattern--bf47a23b-89fe-4708-a316-3b190265bffc", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fd5172-f3ff-475e-9d7b-024400ffd569", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.13.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882eadd2-de2c-46ae-94fa-597fc9e6e2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.90.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72c7d97-7ee5-4b92-9f20-615e06e9b957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.120.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644ebbd9-d53a-4b38-bcef-d66fcb95eaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.18.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665a5188-f538-4f15-ae33-db9ca3f4235d", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.47.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4285f23f-b17b-415b-9042-7996258e00cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.141.122.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38455fe-53ed-4ad6-ae28-d75526ccce20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.141.215.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c7c03a-15e4-462e-83ee-5fdcf0a72d85", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.148.192.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a790d717-24c1-4f80-97aa-5e552e824f97", "relationship_type": "indicates", "source_ref": "indicator--03c7c03a-15e4-462e-83ee-5fdcf0a72d85", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7efc7d01-f0ea-4530-901c-ad2cdd142746", "relationship_type": "indicates", "source_ref": "indicator--03c7c03a-15e4-462e-83ee-5fdcf0a72d85", "target_ref": "attack-pattern--bf47a23b-89fe-4708-a316-3b190265bffc", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ad9c34f-12a2-497f-a67c-b3b3edb7c81b", "relationship_type": "indicates", "source_ref": "indicator--03c7c03a-15e4-462e-83ee-5fdcf0a72d85", "target_ref": "attack-pattern--de37a587-ea6e-4f07-8cd6-ebe65a9e79ef", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7924e11b-47d7-4cc7-9cb7-bc28535dee24", "relationship_type": "indicates", "source_ref": "indicator--03c7c03a-15e4-462e-83ee-5fdcf0a72d85", "target_ref": "vulnerability--8c2d939e-e4ae-4ad7-8b59-9e6939f117d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89309761-eb7e-45ed-b4c8-8a77528e47bb", "relationship_type": "indicates", "source_ref": "indicator--03c7c03a-15e4-462e-83ee-5fdcf0a72d85", "target_ref": "vulnerability--ad4e7fd8-fa82-42c9-b9f0-b3e45fb74e42", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6caf3f7-d6e1-4508-900a-bab4da1982c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.117.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a8bfb8-7248-44dc-9cc7-8c9acdd10eac", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.154.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5cb13d-d253-47eb-adc4-7ac5fc6b472e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.199.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49fc6b3-e8c4-45dd-a37f-69675295dc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.211.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8185a2eb-87b5-4e18-b4e5-8460f1fd2794", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.224.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5b2bda-2fe1-4a2e-832d-922068df0b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.19.107.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e49ea6-e40f-46a9-8b55-8fc8020bc21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6daf0372-a920-4358-aa66-a4007a4dff6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.72.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d9e02b-bf1a-4645-aefc-2449942ede9a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.151.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7635f5db-d114-4dd0-8b6b-fbd7e6148506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.162.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d17be5-4c0b-43df-9fcc-5077048eadc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787f916e-3473-4a0f-81cc-523edb431b62", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.23.254.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a2f06a-b682-4e6a-85ef-ba11ee32395f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.98.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d41a09-f093-4558-9122-c5c0cf3af187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.179.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8c8450-0bc7-43f5-88cd-b7edaf42aeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.32.253.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9856133-f3b2-46e8-a2d0-55ca31261385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.91.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f685e9-385b-4317-9485-22ebfd889008", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.46.9.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c00d62f0-a44a-4e7f-98d7-00e163f8b290", "relationship_type": "indicates", "source_ref": "indicator--58f685e9-385b-4317-9485-22ebfd889008", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a64b022-0a99-41f3-b4d2-19d224fdb819", "relationship_type": "indicates", "source_ref": "indicator--58f685e9-385b-4317-9485-22ebfd889008", "target_ref": "attack-pattern--bf47a23b-89fe-4708-a316-3b190265bffc", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d206ad94-8cd2-4e2e-97a1-10177cb6f516", "relationship_type": "indicates", "source_ref": "indicator--58f685e9-385b-4317-9485-22ebfd889008", "target_ref": "attack-pattern--de37a587-ea6e-4f07-8cd6-ebe65a9e79ef", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c304e05-b49d-48f4-92c9-ff2fdab34512", "relationship_type": "indicates", "source_ref": "indicator--58f685e9-385b-4317-9485-22ebfd889008", "target_ref": "vulnerability--8c2d939e-e4ae-4ad7-8b59-9e6939f117d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00932843-84ff-4365-aeb4-f8b7634a4195", "relationship_type": "indicates", "source_ref": "indicator--58f685e9-385b-4317-9485-22ebfd889008", "target_ref": "vulnerability--ad4e7fd8-fa82-42c9-b9f0-b3e45fb74e42", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14eecb21-93cd-4adf-bd0a-b2dae328f598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.208.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3470737c-96b3-4928-b720-9255ab488ad2", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.239.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6c6cbc-c473-4444-bf4e-2439b10d816f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.253.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a08992-ecea-4c71-8bec-dfd1f786d306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.161.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3efc7b1-dd43-421c-94ea-8502237537c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.60.97.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252d7166-0f4a-4f6a-ba50-36579f491291", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.153.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96daa6d2-e533-4093-aa29-f213c051894f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.168.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf496592-a674-4934-95eb-90eb27ed54fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.219.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192aca9a-a377-4ecd-882e-1bbc979d705d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.234.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8747f520-9e2c-4b32-b717-5c6cff65a4f0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.3.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235642f5-2891-4b2d-8994-36e894e077fb", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.44.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82900186-9e83-418b-b7c0-f488927eec37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.73.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34c1577-3402-4aaf-ad0c-4e8557fa5156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.79.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b04b69-66d8-4233-b676-569b5c300488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.129.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27392b3-6b69-4b26-bf28-c078c3f3a940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.210.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3de538e-e10c-43f8-8e24-8f28cbd43bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.62.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cad676-9fa5-4494-9942-1cc7235099a8", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.73.198.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--897138e7-1c6d-49e2-89f4-7a292334a972", "relationship_type": "indicates", "source_ref": "indicator--74cad676-9fa5-4494-9942-1cc7235099a8", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9358e188-2040-44b1-aaa3-4b0940d31ae2", "relationship_type": "indicates", "source_ref": "indicator--74cad676-9fa5-4494-9942-1cc7235099a8", "target_ref": "attack-pattern--de37a587-ea6e-4f07-8cd6-ebe65a9e79ef", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2422bfab-8959-4cd6-a8c4-533eea6fd85f", "relationship_type": "indicates", "source_ref": "indicator--74cad676-9fa5-4494-9942-1cc7235099a8", "target_ref": "vulnerability--8c2d939e-e4ae-4ad7-8b59-9e6939f117d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7d8f61c-5cf8-4fa7-b307-c17aedb72f80", "relationship_type": "indicates", "source_ref": "indicator--74cad676-9fa5-4494-9942-1cc7235099a8", "target_ref": "vulnerability--ad4e7fd8-fa82-42c9-b9f0-b3e45fb74e42", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45f14ee-4d61-4920-b16e-f67d367b6bc3", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.74.130.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e0a00e4-2b1f-4c67-90a0-8c5fed351ede", "relationship_type": "indicates", "source_ref": "indicator--d45f14ee-4d61-4920-b16e-f67d367b6bc3", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc0959e0-4b68-4a42-bd40-76e4ed5946e4", "relationship_type": "indicates", "source_ref": "indicator--d45f14ee-4d61-4920-b16e-f67d367b6bc3", "target_ref": "attack-pattern--de37a587-ea6e-4f07-8cd6-ebe65a9e79ef", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7aff7f65-2bce-480d-9b6b-03271eab0781", "relationship_type": "indicates", "source_ref": "indicator--d45f14ee-4d61-4920-b16e-f67d367b6bc3", "target_ref": "vulnerability--8c2d939e-e4ae-4ad7-8b59-9e6939f117d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45012489-40df-4336-80d4-479befc8836d", "relationship_type": "indicates", "source_ref": "indicator--d45f14ee-4d61-4920-b16e-f67d367b6bc3", "target_ref": "vulnerability--ad4e7fd8-fa82-42c9-b9f0-b3e45fb74e42", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f9335a-20f6-40f2-8496-629517e24e86", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.74.17.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6db1fc1-e3e8-4e57-aca7-59d4bd5225ba", "relationship_type": "indicates", "source_ref": "indicator--c6f9335a-20f6-40f2-8496-629517e24e86", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bc6ac2-bcbe-45ca-b8fe-2d7173492dba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.74.243.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c650de43-501c-43e1-9f31-21c144bb8ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.80.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e66fead-0f21-42da-a3ec-e08c4eef1ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.107.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e59ffd0-96d2-4bf9-a6e1-fcc552372d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.187.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07933cd-72c0-41b5-b344-8a8dcbe86dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.2.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca98c0f3-fcc7-42ec-bbc1-29daf3cd57cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.164.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24960ac3-4cd9-4221-adce-985a1d364581", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.20.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0fc889-a62f-46ec-aa6b-08606b379ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.227.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95322096-c7f3-4375-9d5c-51dd82ce353a", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.30.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e026f2-1d8f-4185-a4db-06ff9a9d9ed5", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.62.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e55e58-8a24-4a31-b37c-d3ecd24d0364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.87.30.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdde4a5a-5bdb-4933-bf2d-765a85fe08f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.131.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3432628-bfa3-458f-9c25-abcb4b147499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.96.207.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54db456-3f88-4ddd-8e35-8d42bd5ee128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.220.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1aa3ec-56d3-4f35-bc39-cbf3133e3764", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.145.252.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa220e1c-781c-4e07-b7c4-e6cd45366ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5626ed68-5384-481c-a0ee-da161fa2aaaa", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.185.85.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1600f3a-9402-413d-80ed-e504e0205ddc", "relationship_type": "indicates", "source_ref": "indicator--5626ed68-5384-481c-a0ee-da161fa2aaaa", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66602a10-55ca-4497-9fef-d6b5d3a61e12", "relationship_type": "indicates", "source_ref": "indicator--5626ed68-5384-481c-a0ee-da161fa2aaaa", "target_ref": "attack-pattern--bf47a23b-89fe-4708-a316-3b190265bffc", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a477552b-dba8-4daf-9466-c3c8b263e0e8", "relationship_type": "indicates", "source_ref": "indicator--5626ed68-5384-481c-a0ee-da161fa2aaaa", "target_ref": "attack-pattern--de37a587-ea6e-4f07-8cd6-ebe65a9e79ef", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a1b8bfd-0df9-4282-834f-3ea3ec328046", "relationship_type": "indicates", "source_ref": "indicator--5626ed68-5384-481c-a0ee-da161fa2aaaa", "target_ref": "vulnerability--8c2d939e-e4ae-4ad7-8b59-9e6939f117d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7ffec9d-8de9-49e5-b823-60ecdda7421e", "relationship_type": "indicates", "source_ref": "indicator--5626ed68-5384-481c-a0ee-da161fa2aaaa", "target_ref": "vulnerability--ad4e7fd8-fa82-42c9-b9f0-b3e45fb74e42", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8656669-553f-4cc3-b086-3e38bb2f1a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.170.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd81447-e4d5-4cb7-a8c8-2e21a7337992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.231.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084269fa-78c3-4e96-acdd-903e768c518b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.249.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf8aa5b-f1ea-4a80-a3ca-781dcaab0042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.75.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28cb27b-5217-47ea-ac9b-60314d19f1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.9.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32679105-6052-43e0-8535-a4890ab18567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.200.191.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c83948-fca7-4081-9b3f-870d42579381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956bec2e-c62c-4904-9641-bb64a63557a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd323da-2abd-423e-8efc-df0c4504dac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82aea44a-79fe-414d-80ec-cb124558c8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c61290-ba75-459b-abfa-e151a3d88c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4af55b-8a81-4454-afbf-413baa7e4996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb5c3ae-4a12-4c07-8456-83a12d10c99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0a0961-da67-40a6-af0c-d54e275277fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8004a55f-ac2b-4a98-a8af-6c9366d4ad83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9dbe00-adc4-4d6d-aaa3-6042f46be724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fab2f8-4e8a-4de7-bf85-750cc9d27d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bf73f6-d9d5-48e8-915e-5a076c28a0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6921d8b-2a21-40f1-b1fb-01bb24fc527e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72328416-1ffc-47c8-8ccd-e8227675fb54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81abf8c5-d0ce-4b39-94fd-600255345dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82b04f3-3da0-4f09-b271-245edb619b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2d5137-345b-4a80-a6b7-3c6a8145ecd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eacbc0e-e196-4bec-bc92-3a80937f727f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d667ea6-df12-4c24-b8c1-2cdc07af8591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e7906f-724e-40a8-84ed-1079f80ea631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2d40e4-ecde-4dd6-afc7-a7a9e685177c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5572dcaa-6d1a-4aeb-82b0-f37140a54169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a38f5f-8d1f-4a38-a86c-9107c7742ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b670269f-e8d2-4ac3-92e0-02742d2f1d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8c8a77-49f5-4dfd-a59b-1e1d23e120e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda2ea59-84e6-4956-b10e-1b4e73fa00ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8382027b-cca8-42c0-84aa-297e2e962646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd35105-fb95-4ba0-b1a0-000506d3c2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87754364-cfb9-44c6-bc7f-d8ecf26437ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afd9c6f-bbe9-422b-be7c-58e65d3b5169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f9097f-d91c-419c-b278-528e3d2007ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125ef046-e804-4805-90b2-858691d92863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5baa12-af97-411a-bb91-4c4ab52d98d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab0db6a-7c19-450c-abe7-3d03131b2348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf4f1bd-58cb-4e6c-946e-6b2cfb6784f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f0767a-c783-442b-855c-44b4ecd7e5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b40d8bb-5a90-4907-8756-109677777ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6004cc65-33e8-4615-99de-33213d0f0fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d2fb59-8637-4536-b521-1ce5fc7280dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a32b9b-dd64-4587-af32-1c6f8b591303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7f1fdb-1477-4b9c-ba02-2e6fe64f8ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449bb158-590f-41a3-984d-b4ce5157fa1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1ab65c-3475-4235-9907-01e136b974f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725ae765-95cd-41fd-84cc-b0e26aa13b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8ab0f0-b2da-47f6-ba2c-f5f1592111ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810a6ed1-07bf-446d-bfe7-8ad21938901b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4026116a-39b7-4f7c-ad53-57b335b2531e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54be8596-ef55-480e-9ddd-54526c1e53a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c6bb77-32ed-4128-af31-945ef15e2a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a159ad3-4be5-4761-b421-99e4412e4477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65ba560-957a-4cc3-b8e6-299aaeffe5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a17dbe-acff-41be-b8bf-31f1c395fb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bb2468-d3e4-433c-81d6-5c0f5c0ba14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db52cff5-a152-46a7-83ae-a610f014b356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cdaeeb-edd7-4c63-af27-c12b8ba9980b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ae818e-53f1-4a70-ab0c-97991326ec43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8e5874-c16a-4fef-bd73-2b1148b3cf02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f156b7-a2e2-4c64-8873-35c97f8b1cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9644ac-9885-4a5c-be0b-cbf7240891a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d786054-387a-402e-9840-dd01e139cd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c1063c-48cb-484b-a99d-72ba0165c3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc27077e-e47a-40fa-a5bb-8b8a33d74f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1489de-9764-49e3-bc9e-0b6ed8f18730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e817be59-a400-440d-b0cb-9b8322dcd1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a0b5b6-53d0-4b5a-a8db-ddb2169bafd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cfa950-1b53-4a2a-acff-42fdfb210826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494656e8-3af8-4230-bbbb-6f34771c8efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0b067b-d7b6-4439-8ade-d3e69de4df4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ef3178-8ebc-4d43-a780-67cab0003cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b9a529-bb96-42cb-9399-5c54eae7ba08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165e69d2-e9fe-41c2-863a-7fceadc1614d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9835e7f8-816a-4207-af5f-c9867e0293d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3be408d-b345-4bf3-bf18-933f09b52b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5554381c-adcf-4401-8e24-cc28fa50a4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae5eba0-c8b2-4ce0-9f45-38fb5ef027e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4d93bb-b04f-4c54-9d45-3ee2b477434d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3c3cd2-085b-43d1-85ab-498eb9920fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60986ce1-a362-40f7-b7e2-bf5d960ddf58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba62a07-a700-4b94-a2f9-03b871e812a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f9ff22-4303-47a1-a195-495000895463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c211dfe-f835-40d8-b324-42f9b05ab9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2341d1-cf8a-454a-9b44-cc8a852187ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e7055e-9f48-436a-8466-f510ec00a041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750741cd-3c37-48dd-a79c-ac9306cb3775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93961d7b-c4d7-4d94-bf4c-b94d8bfa1200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909189a6-61b8-4ba3-ab39-216f46bdf5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a13e5e5-8394-4575-892c-dbbad3216b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563e99d1-d061-4cc5-9d03-d7f30ac02657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6dc2fa-0c8a-4b58-9211-bd034002afba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28eef82c-461e-4cfd-bb24-799743690388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbb85f4-b92c-414e-bcaf-7028f9dabbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5cce2c-8d8b-4fa9-8f40-653641a1f461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66043d79-f474-429c-9cda-44e9157ab2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c50c89-19e0-45f1-bac5-e25c59492e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455ad3a5-44df-4bea-a792-70971f86f071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8155f4b6-af2e-4607-8a14-cf55144d3c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b297ad9d-9cbf-419b-b256-7766b7ed1516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e993af1-9a86-4c2b-a59a-d08401bbf0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a10c06-fd8c-4282-8706-142123f385dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788685de-94b3-4812-ace7-e89e011cca24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5920b3-8e8f-4bcb-805c-277ebd64b41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5325e38f-df71-4095-9b00-053ebad080e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912721dd-e00c-4806-9c43-825dc1abd598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2680a6a2-1b45-4d6b-9081-bd1e18889e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462eb76c-d765-4354-9f8c-50339ebd3a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e90dcf-fecf-4dba-9478-9f53b024f319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6bdde0-2e5d-4add-823f-1cc3c582bd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29871ed8-37df-493d-8b73-fbd9b0e85c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.68.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31861b7-6bd2-4464-ab8f-5215dbc9230b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.228.29.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6aa4bbd-b39b-4538-a055-6bf81fa9e8f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.229.104.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c770447-af7e-492d-b78c-8e7ef49c523e", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.231.247.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--331b5484-6651-4041-86ba-95544cc52a25", "relationship_type": "indicates", "source_ref": "indicator--6c770447-af7e-492d-b78c-8e7ef49c523e", "target_ref": "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37963fad-75ef-4ba9-b3a5-4247e74b5f56", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.53.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14f010b-c531-4124-9592-6a3c41974a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.8.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2490d0-9d56-4407-9687-673861fc656e", "name": "Malicious Host", "description": "Web exploits: spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.117.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fc663a7-330e-4978-8a91-407743d70641", "relationship_type": "indicates", "source_ref": "indicator--bf2490d0-9d56-4407-9687-673861fc656e", "target_ref": "attack-pattern--de37a587-ea6e-4f07-8cd6-ebe65a9e79ef", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c167633-7cf7-4a37-af39-a65a74b6130c", "relationship_type": "indicates", "source_ref": "indicator--bf2490d0-9d56-4407-9687-673861fc656e", "target_ref": "vulnerability--ad4e7fd8-fa82-42c9-b9f0-b3e45fb74e42", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6843355e-f3ed-4dbb-ad66-163dedbeeb5d", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.241.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d196a5-0c63-4c08-b5d2-c15c2650b8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.92.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e196e138-183b-47c0-b794-56e4cda82187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.252.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5209e04b-846f-4e7d-8bf3-438cd2ff251b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.242.217.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c4cda8-93b3-4879-bfef-2ad126a08bfe", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.173.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2347f1-393f-475d-916f-f8971a923a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.68.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8b8c99-c188-4123-98f9-d4fe9a14f5ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.199.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750a4554-b10e-401f-ac87-fb78e16e2594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.81.39.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91aa88eb-af4e-471b-8e39-3a35fea06306", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.27.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64162616-b13f-4cce-b557-68cf9a04278e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.142.154.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c9ce97-7cd1-4917-9a6a-2b742f3cfcd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.142.83.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316955db-d796-4903-ac66-2e6d1e684bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.143.115.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c83833b-61a1-45a0-b16b-8384470cdf25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.148.171.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5288d48-a38f-407f-bfdb-4c8cfa3136b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.148.32.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6838ba62-b46f-4470-8240-60f09e65b657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.159.195.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8ca6c7-d96d-43d1-b0ce-61b29369384c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.212.51.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d798963-9055-46ef-8dcc-073aca193b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.230.38.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c178babe-2b89-41fa-a8c0-523c86c6b16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.24.21.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813be32a-3ec5-49f4-83c0-f90b6923e8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9094472-7e9c-445f-9f13-00e5d3dc9201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb60ad8d-b37c-464e-9e6e-19f7377da073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.54.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23987c77-9f8e-4918-84f1-b3c86735cb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.54.168.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1575cb55-21eb-4c22-8f30-2f5815dc81cc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.71.180.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d7ac43-db0e-478a-8e64-c960a9d86a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.90.65.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6da31e-8704-4f7c-b946-21bab9755a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9fe559-7925-418e-9bf1-2f03715ea9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7aec7a5-d974-40bf-9550-4038fc71b61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27517786-9133-46b4-a5d8-3a6d0d7b2013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e790b980-ff5b-48bd-a87b-9a60fa1168da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cc44af-7665-4e2f-801b-47edc30b4ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd8299c-2131-469f-bd68-f1ad765756de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b522e4e-047d-43da-b6ea-e01899139f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592786d1-8c57-447f-b267-8176e15ae626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edf4e15-f059-4829-afb9-c5cd5b959c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc0e4c5-451e-4a47-9761-51982b31bcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db749075-eefc-4971-8a87-8c9a1f2f5a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc61c248-d695-46f3-8f2c-7353d18c2d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053ec13e-d656-4ffa-9ca6-845db11b048f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7718ea-11ee-4a13-9ff0-53f65b47ad54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2383813-0a29-47cc-b7e3-b2dbbb532bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1862041-0a3a-4a85-987a-853ee09e3e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ade061-7b16-4d48-85e5-d33dbc232c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b3b8ff-af9e-49f1-ac3e-edce49d5499f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41e1b20-f175-45a8-8e6b-7f229b9b1ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0e1828-9be5-4ba6-9ce1-fb36b051c8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c036263e-1b93-4407-aa47-6496ac03ba51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c519c7-4115-41b9-97cc-4fa762a26e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b689057-bcee-462f-bfe7-2571e804daf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545627d0-632d-4526-9144-266310a091b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a4b2c5-5674-43bd-9e29-35d72408a009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8e0810-eca5-4b08-b348-95ff844f84b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9390705f-9c10-4a19-8129-71d6bec1e16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f85d00-d5f6-4c74-a076-3ca033106387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696fcf17-12fe-4d33-b15c-03d79a7ec535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed068058-858d-4ef1-af44-aacce0de795a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f262ebd2-ba9e-45e2-a037-4111a6391cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18a7f96-e903-4bf7-9e4c-a04029eee9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e4187d-20e1-4609-9016-4735c7edf19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b4eaaf-d2ae-441f-8536-adf236807054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.37.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248c0170-9bf2-47aa-9ab2-b82d9c631537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.162.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4791522-7ff4-4582-852b-a0ddf5ce4c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.195.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1faed9-59b8-4bf3-ab7b-1c1006a57c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.49.225.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5d7baa-9126-4497-a0c6-1731fd7c6143", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.52.181.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9d0f48-04e6-4aea-b71c-2b7af63acbae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.53.205.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48ccd7e-1114-4625-84fb-af8ba6cdf58e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.57.203.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12232ecc-6166-4f82-9e1f-f1bef4189954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.59.205.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb3b9cf-3cb1-4203-8929-bfd560580fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.59.38.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7d487a-b521-425a-abb0-ff91b29baea6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.99.43.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccf1a4b-4f39-43b1-9065-7da27c9ad0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.126.208.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac894e9-65fe-4253-93fc-dacefd10b94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0dbd86-2202-4c80-bdd8-29ced8ec8f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.146.28.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef478a4-1a1a-4e0f-8275-1f33f1a47b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.156.13.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da84fedc-177d-4862-b476-d80f2cc174f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1436483-d55c-4e65-980e-c77b6c8c5a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.191.197.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f45e6b5-5726-40ad-957c-da2db0f74173", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.226.161.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea6d6e1-1d88-43a1-b6bc-8fe243da9c09", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.248.156.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c53fcd8-387f-4512-917b-a59201b2d423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.3.232.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17c5c37-cc30-45e2-9e9e-7436ae4319e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.51.236.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801e4857-29ae-462a-9538-a05aa7180ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.208.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3d1074-6b3a-405b-9958-8c86bcee1ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.9.184.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b090b6b-eae8-442d-9795-61983102d9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.106.130.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7089703f-b563-4c33-a76d-ec30bd829521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.106.21.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b766db0-43d8-4cbc-8fd8-864fa210ebc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.108.77.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08921590-91ce-48bb-8513-6b170f24661d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.148.51.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694ecdd9-ce3e-46a2-ba8a-ae606e0da3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.148.58.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af295d51-f3d8-412f-8913-69e6fa8c719c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.152.175.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225a8c06-3f6a-46c8-ba50-1b866f27ba3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.78.18.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58284988-f837-40f6-8050-8688b3434171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.78.241.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ccdc21-4069-401d-a1e0-b2bac5835da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.81.27.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ea3fa4-87de-4b15-af00-60a1efa59117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.87.252.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7a343e-6dba-41ba-ad83-b6bf032fdac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a87855-d918-45ed-ae6a-c23a5366bee7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.102.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f48c3c4-0e15-45ba-82a5-a6810e070ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfaea65e-6059-4142-9948-df6a45553574", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825e8316-44da-4b8e-863c-f1500a5b5499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0f6aa1-ccef-488a-aa2e-91f0d04536a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef76042-a65b-460b-aa73-72c3265f317a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2cdb4d-0ae2-4713-ac09-19f991d2e42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8bdb26-b7ab-4da2-8b08-4dd8f8b11b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df463eb-9e88-4fe0-be7a-6dfab3e5def9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f00d4d2-cd08-4829-9145-272d4ca9c3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543c9cde-dd23-4070-a17e-a7def634a33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fae702-fde6-444c-a333-d33eec5c6020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3d4da9-14b9-456e-9754-d492a704e8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.183.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae4a8a0-f67d-416d-9839-d111211c57e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da63cc67-3b1c-479a-ab35-baefe8100e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1e1f80-25be-40aa-919d-995096e9d0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c26973-ddcd-4912-a711-221721dcaa11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58901ac-ee5c-451b-8b0f-5f87ad0dda0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.233.3.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1169a25-062c-4c62-b279-1207d2364271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d527c1-29bf-4243-b4ed-081824f2e2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.212.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8330da-7133-4a1d-b069-ec51f94f45e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.65.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9c5e4a-732d-4c95-af4b-68c2803491b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.117.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6661b200-56c2-4872-b596-e57c5e7e954a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.125.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0338ed86-9907-4e12-a801-18b482253cf4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918ae315-912b-4e99-adf6-0149a88ef4e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37dc9984-0767-435d-aef2-2ea6d065940c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6576977c-8231-43f4-9803-ce4eddc02a15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bbc8d4-ae7d-4504-975b-bada68d96edc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10ca294-f0c8-41fa-bb03-d134e8fd1873", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.23.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e49c53-99de-4dfc-9663-40485db47ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.235.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa12c34c-6c69-460f-b1ce-4593f3bdd0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.142.9.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3f867c-a00a-4754-b035-d095ff5a30a1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.157.86.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe86374-425b-43e9-8b2b-07584d4a6d16", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.220.116.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d1cde9-2a8c-4902-839d-3d8be23dd097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.38.21.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd96f871-9e1b-4508-9252-6973cfcdae7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61335d6-e140-4c04-8a78-79e4d3904e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.20.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb04321-54c7-4878-9a49-bea064e1b2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.56.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b59d3ae-47ba-4716-832f-44ccc39d3800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.56.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692c4937-fd3a-4f53-9df9-3889ed19c76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.192.5.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4523d809-a64e-43b1-a8fe-a38634d0569e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.193.201.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1fc5af-d043-46d9-bfab-bed9f774f77d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.228.19.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde790bb-e0c4-4892-9a36-c3be10a9a70b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.235.37.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7fc297-d308-42ea-8492-f2017358619c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.240.164.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d44eef-374a-4b99-8fd2-df4a04a4db4c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.54.154.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ea9ba9-2aaf-4c38-8dad-04fcba813fff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.69.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1846ea01-647f-4bcd-bda1-d2a710de7595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.154.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cc8122-df91-4104-abd3-a7c44f9a016a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.47.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2fed5e-6ea6-4864-ad4f-f323e3690142", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.53.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24ede41-2558-49c6-a2a3-78402989264c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.69.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383ecc23-55f3-4ab8-a1de-6a785bc700f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9a323d-ca46-49b6-938f-aed00f2ffbfb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.15.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383752a3-a3b7-4896-99c1-bdc158882f87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.235.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4504d63f-5316-4da6-b1bb-572bde0c6461", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.62.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0eef5e-43f9-4c00-aa71-10e35a5eafbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.91.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578010b6-cf40-462c-80be-6d2e65b32914", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.93.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c328a8-a59b-4e4e-91e3-873d2902add1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.139.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16778a8-fc8e-4847-aba5-3c83f6e88b45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.36.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f89b320-c462-44c0-88d8-432315c0d90c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.86.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3973b926-253a-4e6e-b9a0-4b33c0f23826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.107.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3f36d4-01c5-4f56-bded-7a5127c5bb88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.123.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3546e8d8-0bf5-4328-9875-89301ea59748", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.15.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac0f103-795f-470a-8f4f-fc5ced76d348", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.36.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22713829-a8ec-486d-bf41-bb417eabdd0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.48.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c3c57b-0c25-4735-b5e2-361051e12bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.49.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4111e530-e705-4373-a157-38ad95be136e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.96.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c6b11f-fbe2-4ed9-8b36-597224d97cdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.152.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05602503-0dac-42ce-afdd-112a5b161e7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.114.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdbe083-a913-4983-8f0e-5c47c37a714f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.232.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a77e3e-3112-4e5b-9174-73b2da5d4858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.41.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4ded76-5cbc-4d5b-8b82-de9f2e6d02fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.150.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f169fd-a6ae-4953-8e8c-872c94630517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.153.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264fdfef-68e6-4a44-b741-1808c838a81b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.140.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cee8c2-7d80-489f-97aa-20d56c810602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.143.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1805dbd8-82bb-47b2-bc92-fc49a76af4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d18a02-a285-4459-b6cf-67c2902c82cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.224.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2137cf7a-466a-460e-8a4e-153788c436fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f58840b-2ae6-42b9-b8bd-94f4c5c20333", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.206.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72abbf47-7f0a-4706-9896-6ec67bd3baf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921325dd-0108-4706-a780-8a1585b11793", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.128.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82429600-5b80-4eee-bf8c-352f92b0482d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.242.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36284412-ad5d-475c-b3d8-47a1779c89cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.244.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0af6787-d846-4f23-9209-4ee93864d936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.255.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9378f81-f5ea-4b23-8190-a2bec9dcc2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.166.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c38e616-9e0a-4bee-b6c9-ea44b2749746", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.236.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5285d6b0-020e-4a62-b939-0b77b9153cd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e925926b-561b-47b9-b1c2-65708b49465e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b21ba7-6664-4877-9b7e-e542f4101dba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea731591-31bd-4ee4-b4ae-d0941a3f49f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.92.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78128b4-0b1e-4fdc-ba27-0c6b9b14064f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.1.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c450148-728f-4351-962f-79fb3c6091c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97093ce3-eeb7-4ed7-b3e7-fea907622fcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea49aa82-2858-4c7a-a243-328594f51683", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea94156-dda6-4c91-833e-c5a70733c71a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b71fd3e-2f7e-4c6b-8627-dab140159f19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad15646-ce27-44ba-99cd-1208c525b57e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f912113-b4a2-4e4e-aacb-e1c16e3dedc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0dba249-5793-4ba6-a3f4-9e225410701c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e101900-c767-4abd-8c68-15079e13a249", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052d3ec5-9465-43f8-a984-b604a9f00d75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe29653-aabd-4813-a5ff-3c8d920cf79f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fca26da-9cc5-43c3-90b8-cf9909e6a327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8947bc7-db9f-4c6d-a0b6-b07a6f912afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29abe02f-ec1e-4b24-840d-5ad73f353822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d727342c-68b0-4eab-89fa-77192bd218db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.107.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b105eb7-a2d0-4fce-9971-15bf7c2e8cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.125.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daebd799-26dc-4a92-976f-bbcdf0fe2c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.143.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1437fe-510b-40fc-a4f5-bb09ea6092d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.212.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0af19e-8672-4fc0-8bdc-f89bb1bf2718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce23ec4d-2979-4d25-8940-ba73d96e34f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.128.199.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39d6191-d622-4894-b467-8e6103aa0ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.107.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1bc5f8-3efe-4a51-aff4-2488dbd1265a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cf0e2d-61d0-458a-8024-818d5afaacb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e6db15-f67d-4a79-9c22-1c7495dfcdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102e613a-3e79-451c-9bb1-71029a81d381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a028b3d0-0bd3-4a56-9e3e-ac50e9c2c4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.136.255.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5361e35b-7f45-45ea-89df-af3200097f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8918c96-6357-4dab-9ee8-9ced02972cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14303c04-4c15-431b-b78a-26d0befd3c44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6582ede5-c301-4378-93e2-f5ea311ce932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.215.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b31d32e-e4ef-4ef8-a018-7a5395606ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769fbd42-9554-4ef8-a3e4-bda988a2b106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073e9af0-5707-4b16-bc91-96f287a967c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8808e550-75ca-4e9d-bf7d-0ecedc9cbcc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eeb7499-223a-4271-badf-38b5de9735c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72969966-8f44-43e8-b508-9f1419557a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc9e301-2a50-4ed8-ba79-c14f3bbb7384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b5e6b8-f0a0-4103-b522-9c87f5a14bcc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc19db0-1039-4c5f-bd47-bcdc3c657904", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6eb0f0f-bf46-44c0-9a55-32a931065b48", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a8dd68-4e05-4c3f-b3ed-72f09cba5af5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce019b2b-bcdc-4111-9a99-79f0709203e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9ee5fa-7376-4c93-b32c-27e8c9265b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e96de5-d82b-4265-8698-331ac05738bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbccd3d8-9b22-4f93-b379-553130dbb9f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f71f28-c260-43ba-94b2-117a0c262523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.148.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577fc8e0-e1d1-4ae4-9c05-a58ecd6b259c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.243.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2404c90f-bd9f-44ac-b817-8cadd4b1746d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d87bd4-91a0-4656-909c-abca0b376fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d74d7a-ee6d-4495-b277-c8b7c9164478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5ee315-8feb-41a8-8e99-63e22746e11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b97a0ee-7362-4cb3-b259-536c81269cb4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a90eef3-24d5-4fb9-9487-888efda35cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.98.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5daa9f65-a2cd-4217-b6c2-ab17007eeb01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f30bce-717b-44d7-9240-d654e9f38ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b57ac5-a6db-47bb-9e8c-7731593cfdbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4f1fb8-5829-4382-8253-164faa18cdfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4264c9-596f-41bb-9909-51451710f70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48a5fd0-d8bb-4718-929d-7e67fd995e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7da826e-9ada-45d9-9808-7f4565a2290f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a462cb31-8b28-4e5c-81d8-4d7cc8cf74a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e260d46-8646-47fe-97dd-d2c4610be294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc46ddb5-c4d6-4dac-a7e1-102ee0e2a358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ed4be3-7cd3-435e-a28d-ff6f25f5598a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4db7b16-aa9d-4742-81c0-12d749e8c10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3cee5b-bfb6-4076-a518-7f0ff2dc9a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c224e62-d845-4f8c-a30b-1ebe5c905f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46028604-90b1-4a98-b4eb-faac5d112695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17c898b-f721-44b0-b7a2-100816421b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035080d0-13c7-4f92-b981-1710fd66e909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308bca3b-f32f-4d3c-9255-906e97a2f6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead5da76-9ebb-492c-b3a7-c025439c2a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83de02ad-56e1-470b-b28b-042ba935b81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc473a3c-c0bf-48f7-8fe4-ff4f3b2c183e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.174.23.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b915c794-6498-40ef-834d-7598355b60d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.143.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb188a6-efa3-4526-a4c1-682eefd12bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.148.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9468e17-d71b-4860-8428-262acedd9f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.242.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b026d616-f5ad-4cdf-86f9-5f84f9c7ed45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.184.22.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25478bf0-2a06-405b-889f-d0fc43eb0a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5516ce-65d7-4633-95d1-73e0b45d8289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c610fbc-e970-4bd6-b9b0-84be779b5ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31095e04-5d92-40ff-9cc1-1b0f146a1ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0f11f3-0c54-4fe4-aed9-51186146634d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e240f8-6808-4a91-8f73-faf1d25e8ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859811d9-4428-4629-854a-2bb71cfa252a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a2d1b7-3bbf-4396-b8f9-dbd9a3cb3517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef1b3de-6674-42cb-a6cf-dc973fc80aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ec8aee-dc68-4ebe-bd7e-6e9befbf8676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89565023-06b4-4296-ae85-1548b89929ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeceadab-fac5-4b95-bee0-d5913857e2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f237edf3-60d2-410a-bf29-cc317f962f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc32e94-d3e8-47a8-8af7-4ebd0f7028d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903203d6-7315-4767-b4ca-8557a2fd1d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e858721-50c3-4537-921c-3d62c92f91b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e737487-f0f6-4e1f-af30-db6adeeafdb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3e1fa4-6db2-4b3d-bfb4-c9348227e27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef38dbb0-ba20-4061-b34e-99c923fc78d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4baa743e-785c-44b7-9f43-352d6571335d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4ed53f-ec5d-45cf-a98d-e4b4928d4ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547f84d2-0576-4964-88a3-f96f4fcedce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab961c1b-adb9-4b29-b944-bafa0ac68fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26fb237-9bbd-437b-8d45-01007e2d97da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfe1e9d-9eb1-4832-8a00-4401021b3ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bfdc27-400e-4cfe-96fe-73e4e4db6ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8be8c22-027d-4819-9c4f-0dd6832497f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48a8b49-cf15-4e12-920a-2837a6972071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed72cfeb-6c11-415f-a3ba-437467291a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51497633-3c0c-4e88-860c-d0e6d66b500e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.59.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2259a1d3-1f5b-451f-a33f-dc5018a96975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ca3a90-d54d-4ffb-b8b8-0cc822849dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f14090f-a444-4054-88a6-cdc243a3f505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5373ebe-bc8e-44a8-ab6d-b5f9f8f59e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352a1ed4-6468-40b3-afd4-b3fb36e64e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0682be1-2b5f-4272-9ee2-d7b6253a565f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fc84ab-07f4-4448-ae71-ab2cadc6d2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560749db-4626-4717-814c-e5bf2c53dd98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01634f5-e249-4f29-abc6-78802517881b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3139a1-ea9e-4833-bcd9-b9b6c05d3e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25fc4e9-3812-4ef6-a57f-92129c5203f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ec870f-203c-469b-8631-da2393b2cdfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d3ddc7-dd4b-4214-8ce8-1b171c82c3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8818fd8-95a7-46c2-92af-6a553e10f6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.234.120.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f28b4b-0d48-483e-8a94-d08693d8e832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.239.62.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1cbc44-f682-44dc-b02c-7511a33a625f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6df302-1189-4fe1-acd5-71d4ad8567db", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.245.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb233ee7-e65f-4209-b8b6-a7468c71c571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01b190c-5ac2-4e8b-9e0d-54ac5288f8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a396fd40-ec14-4763-96d0-d60c3f67fb2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d67426a-bd16-470c-8cf1-f67bd16778ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1585825-361b-4a25-8cf6-69991789f132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c30bd4c-b9ee-421e-8d66-9bcd8771eeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.16.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb122476-68c9-4550-b4a9-d42c4ea25d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.33.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296a8046-d685-4049-8c60-6549dfcc98c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bb6218-74f6-4690-8c93-dc775d2a45a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a1d5b3-c8ea-4fbc-b438-435c815d51e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68967f92-4481-4f92-a22a-eb931d646dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69849db1-eda3-43fd-827b-6676ba29995c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.72.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3b2aca-d99e-4acf-b92b-b121580a2ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.72.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef8b0ae-d089-4b1d-a1b6-fb40c3cb19d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab50ee29-1451-4304-8691-dc18a979db40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb22b19-ad63-4b83-838f-3f027129c178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9300e71-1658-4a35-bed7-3f3f3647bac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a78ed87-9b07-43c0-b302-aec145e1195b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6f3304-75af-48c8-9ecd-791deba47efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8950781d-dc21-4f24-818e-2b8f3dade355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af818c02-87c2-41fc-84e2-b5017f18b0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1ac279-7ed7-4338-9fb2-2884ca998a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb983f0-865e-4667-8742-10cf35354e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbe940f-c642-466e-9305-beac16ea9b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391634ce-b280-4d8a-8bfc-a49ba1bc8b2b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.41.104.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113e2141-a087-4f95-92b6-c68a9b6c970b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c085ec-c212-4011-b773-1631c5a57ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936fb784-87af-4b06-bccb-dd3c7558d574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ea3fa3-9cf6-4ecf-bd50-b633d83963d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce96972b-3d00-4534-bfb3-34aa1e060b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bb9e68-6669-4e6c-a11f-536cd5b62bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.86.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c10cb61-6e59-4318-ae08-fe2a7cab375f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.236.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e3cd2b-9b8e-4851-ad20-bcb697f953e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8237bf70-9b23-4175-bb08-f8e8096e3a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4bc58a-0b4d-42d3-82ed-53d4f3be9b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e360adc-cf81-473a-8baf-d4672cdc5082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98873bdd-4af9-4467-bc2e-a2233440006d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d4cc1e-438d-4264-8eea-13bb0e716aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f190d60c-846d-4476-9323-bccf3929d888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc4ec1a-e4f3-4004-8ba3-aeb96a79dbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5d666a-4a5e-4a56-b74f-b1db02b6e825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f8eccf-7658-4dcd-8cf7-9d16e0919792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c12f6e-1b49-44b2-b51a-9e97f0996110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66027d1e-7513-440e-807d-562071cbcf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.82.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f262b17b-ff7b-4146-b863-bc6a16ae391f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d131cd3-8baf-447f-8ff4-bbbed6b34963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdcf408-25f6-4801-81eb-595f438d41db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80f6ccb-9adc-44cb-a8f9-23e47e9f59f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30962a68-6bd0-45d8-9059-8811f5c49b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04778bc-a767-4127-b89e-17f7e13a513b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.58.147.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125987bf-c2db-4fb2-9b55-f6969695bf28", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.56.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72a58d6-a258-4d12-b302-0e2e5b77c47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.103.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564e6692-bade-4c4b-930f-d5db399ba5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5483a9-a3bb-4d66-934d-71cebc8fd69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9f8104-0850-427b-84dc-6e6ac9905fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7828900d-2038-4d24-9042-8f3fdff2f7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4565bb1-0476-4b39-823e-e5d97a725c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d25f15-cd8d-434e-b46c-e76e5ff7d355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca69b7d-c8f6-44a6-97e9-278b1168222b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb4a220-5571-4e4f-b63a-e223fc8fa749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c287f5d5-f187-4033-9811-ccc8889db70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133cb744-a1d0-4a5f-b1b8-fae8565b55c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4815f3-eab1-4a0a-a896-3b2c056602a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8af0d8-6241-4b1a-9151-10d105a7836d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4145c50-0b84-45be-a632-7bfc443ac4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36d874c-7719-418a-a0dc-56863bcc0614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4eb345-ebea-486e-85ed-f19aa632cc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50131425-903b-4586-9bdc-98ef879d1949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef49030f-12e8-474d-9e1e-7013be47ee2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ec7034-307a-43f6-ae75-9be2c6f5286f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e7b722-614e-42e7-bbb8-9406a8353744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d1ddb4-f26e-4cfa-8194-2dba1c60eb9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e34c4ae-788b-496c-8efb-66541fed7d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af401456-c220-4793-b710-a49416c26984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff64f98b-7135-4777-848f-417eca728214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303db442-0c58-4910-bbc7-89059eca29c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919fc8e4-8629-4bdb-98ac-ac6c264f9f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d2ada0-79ef-424f-ba33-a7012d4d0d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f491358-1a21-4edd-9f45-6b3c970f7ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25759c84-c40e-479b-806a-fdb5e4c6da63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cfd334-d555-40cb-9d29-24a85737336b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce1310b-f50d-4185-a4f0-4b3dc9f88a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3115f79-e08a-444b-ba95-1181b42a2c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1a88a6-073b-4bc9-9b9c-2f5dfa55d816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f56c3bd-8b92-434f-89f9-dee4eacea072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0380930c-620b-4066-a38b-ce373b6d41a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83eb406-d8f8-439c-8b32-70fcf4816bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fba6ce-5c5b-47b4-a781-ba0839533700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571046e3-3a0c-48e2-8e63-eef906c6e694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572c10c0-96b6-4777-8046-30fedacd5099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0c6119-11f9-4109-8190-86843538f5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7aca7a6-336b-4799-acc7-7262f9b49c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01f6247-4f57-4b3c-91ac-90a7335450f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59189457-0fd8-44a1-8755-96e16dc67c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edae7896-aa7d-48c9-9b8d-261258b6d7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e4238f-51f9-4480-8df1-fa57a89bc5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70135e75-19ac-417e-9168-21d916a3aec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6539ea78-e67a-4007-b02b-aaea9ad9895e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57509119-d3be-415d-a423-6282b39bfe47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e480404c-4d7d-457e-bd3a-46257eef8589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.84.222.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e706b102-970a-453f-a169-322bb1dbf5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee297b3a-edfa-4fa4-9b43-2d432f46100c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.163.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a48b5b-2636-4392-8caf-775b060d17d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6b18b8-7982-4045-9a06-5cc8e1fe785f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4e6acd-c799-4a3f-a892-95af22fec056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.31.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1456f3-52c9-4e6f-a212-4022426de75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.95.172.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509ad39b-ecdc-4659-a37a-dc4b0f8fb0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.0.62.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea31f11-92a7-4b6a-bacd-2dfa02c99b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.108.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad11dee-a8a3-435f-9dbb-4993197c8ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cbf0d4-b919-437f-9ef8-fdac878f4ef4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.42.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99451b2e-3897-4f93-a3de-7b135fea5dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d510ddda-62dc-4780-a87b-05c7396902d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19360c09-0349-4de5-b7d6-3309276764d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9841d573-80d1-4b6b-b27a-02bdec1da9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ac34d0-916b-4c51-b290-90b9f0d6c560", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.174.127.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c01aa3-d419-4926-b0ec-b97205f995fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.174.54.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22955ca-13c1-4faa-bbb0-d2de5a16a37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.138.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f49f9d8-35ef-4443-8f63-df4d1191f9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.138.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7456803f-db79-41f8-98cc-8708bb88303f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b97c0ab-413a-4155-80f3-7ff14432e821", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.2.99.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446e94c7-46d7-4415-a3bf-6e5a22ac588d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.21.153.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e979b680-7226-4887-a2bd-99a83e46b746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.229.233.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b5b70d-f948-41ae-bc8f-bade5ceb8d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354c7582-b2a0-400a-81a7-e81061bad8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7738d68-197a-4977-b9aa-f33b7c7436c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a68444-7e91-4780-a98a-082be062e7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386cb756-a7de-4c37-87e9-a16ed56f5296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45f1712-e9f6-455d-836c-7d99259875fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa431d9-ec0b-4c01-b12c-80ebe5298186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4418624e-f0ea-4af1-bcb6-b910940ea245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2fad72-cb3c-4afd-a7cc-b62621275005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d8a9d8-8459-489e-82eb-9cc1b73aab95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caec749c-7082-41b5-99f5-e597597e0ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57aa1964-4184-4c70-83f4-c53fad0685f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a283cca0-1857-4093-91da-8916f4b9930b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda0853a-3b29-4da1-9902-c1d6204a5806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e4ea1f-f3e4-416f-b4f5-aceb46b6d1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8223e418-1056-4b22-9b54-a365ef95eb53", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.253.140.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fed68e-3fdb-42c8-9e2f-20dee408d85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.29.26.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfde3f47-ce51-49f4-9e4f-82271e16c41f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.6.120.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9419770e-4caa-45b1-81e4-07c03ad06c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.121.187.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b98597-9cdf-4a31-be6a-915fe1fb2fb7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cc0e70-038d-492e-abb6-c933c068147f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b317cf6b-fcee-4c4e-a027-fc033d588e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.170.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186ecf97-fca1-4705-9e20-c819f85ba6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.183.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88f9852-8962-45e5-86f7-38cb62b571a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.103.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c1e1a9-e98a-41e9-bf00-816ca5970820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.105.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc89afc5-d4ce-4c22-92ca-2e583b022451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.58.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f78de2-5e08-4986-a640-18e5e552dd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.1.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff73772-bb1e-41e9-af16-ec4e5f149631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86cb435-fee0-4240-be5a-7eae9066a156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6453c8-3c84-4319-a935-d566dc45b5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a1fe16-d5b9-48a6-9485-fd753c2b1468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0871095-3095-41ae-898b-172d54911695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57502214-d239-4d95-9718-615ad316817d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.116.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3722a126-39ba-481a-9b5d-512c8e9eae68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.118.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d42e0f7-12e7-46c4-8d4d-5b53bb31f0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abbd088-8b99-4f65-b362-2aaff5eb7eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1dc7cea-ea07-43c7-9df2-9d8a2c623cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.147.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a546cb8a-4bf0-4823-9509-28d07f19c5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbb0004-5ff2-40b0-ad4b-641b52b6d24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.156.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7029a25-755c-4699-8521-40e6f492ab4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9793f0b-41da-41bb-87a1-7449b652019c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629c7927-57b7-4229-b44e-e1e0b9f6b17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec90ccb-ed3e-4eb7-959c-a857f321a7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e649c74-ba94-4b57-ba6b-603d01e24aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fc1004-7284-41c1-8eee-b1260f4c00de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367fc31d-236c-440e-ba22-0d2415f3e60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.185.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9a232d-da44-4a39-8284-e0c187dae78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.188.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addf72d2-5014-4765-b394-9f61e8635e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.192.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbb60fd-1631-4da0-93c9-b249f2112889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.49.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac728d2-df42-4128-88fc-b2b65445f6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2830cc-3605-4aaf-9958-c70bb3ee1c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.100.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9910170d-66d9-40e4-aa51-cbb794c220da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.106.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db830af-57e8-4bca-8d37-ae9949ad5b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.107.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8425a127-e16c-4d14-83ee-e8910dcadc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.108.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4471203c-3d95-44fe-8e9e-67ae14e46f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d457b9-d315-425f-a136-ef4b6d6adf7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b712cc9-8f40-4baf-bd1c-771a75a3198c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59813ffc-03e9-432d-a3aa-ddefa7cd72a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7c3635-4f6b-4f02-9c41-307b1883008b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0845e1c3-d6c5-435f-95bf-42dabfdec6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a913bc92-6421-4c20-b30a-9e6e7bd9e7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363132e4-b8a7-41e6-b3e5-4e663717de32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.163.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d361f8f1-00f8-452d-9eef-26c2d4fda1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b518d686-3942-4cfd-b208-509759e70903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78f50c8-be79-4b43-9a10-f43a69d96fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.171.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bd1193-0cf0-4c03-8fb8-51382e9806aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.22.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f3cc54-974b-4a75-b300-30cf343d0aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfec3088-5ebb-4ea0-92d7-99f8c3c06bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4020b8-2c18-4367-b48e-46da0fc64254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.251.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e0746a-de91-4103-893c-283870cbe85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db161ab-02dc-4d0e-8ae2-1ba339a975a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fa6cb2-bc94-4317-9de8-d6dfb168bf80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f1334a-8bcb-44b3-b951-e17ea3a0637c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.43.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e4f9a9-07a2-4397-b12c-3989f1e476d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8fc695-cbe3-475c-acc4-c15c95d05a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.51.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2064fcbd-9673-412b-a033-b68e862d00b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e660427-e706-4917-9ff2-bb1bb8994439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd61530-ae03-451a-82c9-a13ee7a74240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.61.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0d4640-955e-46c3-a4e0-d22cce1b9c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.61.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffbe5f2-ab19-4e32-92bc-31fca303d9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.62.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf176a70-2f99-4294-b1ad-3dc652d8163d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.72.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f05ba90-e458-4424-8a82-eee4261804f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.73.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88eb485c-f231-4d91-9209-45d666f4677e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.76.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1999e2eb-28eb-4df3-9216-78aa59d84533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41a9401-a568-4002-a4e9-8d1869be371e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6843906-cf78-42e2-bc79-18432e5fe740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974b4624-f3af-4b1f-ba14-b84d5f5315fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f35a20-f0b3-46e5-bd32-9730225bdda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61c3f23-50e3-4837-8367-9d779aba935f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.156.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5925f7-3845-466e-beb9-536ed76afc0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e41d25-90b4-49a8-8272-55f03d4d5e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3305f184-7e53-4e3a-b669-5f6938b1fce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4782c0f3-2e9d-4a4c-a7ff-8aff29e85e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22a7a1d-d06a-42e2-b604-f5c6da416b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8288c5-8548-430a-a981-2c014729dae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628950d1-8efe-4e24-9735-c138108a6560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd9346a-a4ad-4e67-b149-345743347e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae73ca79-4f75-4fea-9129-b5ce90a0ffae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab73fe54-3c9e-4ac7-ab11-13ef337904ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.183.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c212a5d2-4132-4ca0-867b-6a82cadfdea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2cacad-da62-4591-86ba-e6a96aa99518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf24340-e3e6-4306-8542-8463ddd23bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.198.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e75a960-cb14-4391-8e81-63c7d8b2ade9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.198.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefca3f3-9537-41c9-a0fb-f2ebefc23abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0be440-8bc3-41ea-8113-67eb8132536b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f9d062-5e75-4e02-8866-0701b4028bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1808d2d-474e-4275-bee1-9944c12c55dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.207.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6358b1a7-0ba6-4cde-b799-3551091347f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.233.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31326eeb-d793-4cd7-956e-9801deb57bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d1fb21-7e67-4b2b-bcf1-01a63b4fa6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f3e474-da1a-4c5a-a1ff-6bbd83c822cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.249.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb5e9e5-ea5f-4595-b9aa-9021ac0310a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.249.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457fe9e7-fbb4-4492-8e8f-36a667593a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf0f34a-9068-42d5-a546-c49cf9b3b02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e509d17-85f3-417d-a4de-6474d718f832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bc6a37-9cae-4c5f-b621-294698a1ed9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe75bed-b9a2-49ab-a6ff-59e75ec85527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595bbc9c-da7c-47b1-aee5-0301288556ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.53.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8499a660-bc3d-4e4d-b6f6-88fda82fa2d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d7db47-d827-4dc9-8644-11575bf8c022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.90.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a671b5-5c8c-489a-bcaa-469ff6dbe171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.45.19.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05b546b-aa11-4ce0-9c5c-8b227a0cddb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d74eec-a8c8-4ad1-a509-48a2d425fb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.56.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1394266f-2846-4667-a61c-a040986ef4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.195.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7018edf2-f855-4490-9714-698dfc37b673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.211.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e8e5a6-2e8c-41ba-a488-edbb10757231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.213.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a294a7f3-7293-4e4a-8d0a-92a764f2f87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.220.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5dcaf7-92f7-4753-90c7-ec7e392d3600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dcdf48-8f45-4a95-8c7b-956641b05152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a946449c-3dbe-4cda-8e5f-0e9451bbe80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddfcb97-797c-4989-ad83-21968dfe5869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9bef60-4fda-40dd-a40d-0bb506fea7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331f4d2d-82b3-4808-81fa-d90c634fb8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.80.59.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd50a4c2-66b4-46be-8672-f34fb779915a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d5288b-0398-4be9-827a-e176ea9db873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f648e38-f9e3-4761-86f8-c992d2b809bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f12824-420c-4648-9aff-258322e2d25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bd1d1b-6a75-499b-8eeb-6924086e92cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e75f7c8-80bc-478c-8d05-ad537ca19715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72560bce-7b4d-4fb1-b51e-acf1e267fe83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5d85e6-a429-4497-968a-a7fd877a3211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9658e5cc-22cc-4d54-9494-95be92145969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b354c901-747f-410f-bebe-1111eae9b3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc5d2f4-3e52-43c3-8334-1b2ee7d7206a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.113.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12a84c5-fcbe-4247-aa96-87ca51c33add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c102bf-b3d3-487b-90ae-f3d3306bb280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.128.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b388dcd1-2ae6-4eee-8cf3-e5aa45c39596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fcfbad-4030-4f19-b13a-24b1da0a25b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86eff03b-01ba-4fc9-99f9-54fc9a07b94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d34615c-92f2-46e4-9873-601dc9f173f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bd37d9-4042-476d-986c-60aed4cafcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7ad86f-04e8-42d7-b8ef-4e463405ac7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2893d7a-d75c-4ccd-9012-3fb79d914d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30985c10-6692-4e1c-b57a-d40e2b95fd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c094c5-3a75-48a9-9564-5f98a6d97536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fb5ee5-6f63-4db5-a536-da78052c8ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfff528c-e807-41ab-b3fd-79e10bf5cbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1870d0c-b6d2-4eed-aed2-7e0c43290cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c51894a-5b1e-446e-92d0-7233bc2c23e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.190.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75b04de-0a03-4d2c-a097-666dcb7e4391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3907bd26-d5fd-4f77-9ea8-0c46a89727aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.110']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535d1285-6583-4fd2-8189-7a673854e1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8561767-728e-44bd-a0d7-4329d71d0e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb94f5b-f426-40cd-9af5-39d5bd98b881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.35.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba92748-1e12-40d1-86b2-503f5d593da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.57.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5585d2-c735-4687-8b7a-a70e18e5d7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.59.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64acf4d2-5ed3-48e3-b2e6-fa35360e1ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.192.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea29c058-b287-4f1d-8fde-974dec9792ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.241.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f830d24a-0376-4d23-8e8d-f159a1cfa2d5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.234.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb24dec-2ff9-426c-a50c-f538921eeb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6261417-15a7-4fa7-813c-e7d924e54799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.218.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7ff765-3498-4651-8e1c-1f76dd0f8628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.242.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bbdfc2-1a6f-44fd-b11d-bfc1d2fc770f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.0.237.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3622f22-8c29-44f9-8fcd-567b889fbd84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.0.237.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbb2dc0-27ab-4f16-81a5-fa1780802503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.12.34.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71f0a44-b614-42fa-8407-cdc8fe9b3d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.147.58.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc4fe64-36c2-4ad2-878f-1451ca4ba2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.184.16.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d15dc66-0d0a-4e95-9989-b82f56e82a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.213.160.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b09d9d3-2630-4b47-af88-4db42722860b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.235.175.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63fd68b-b98d-493a-95d3-fce85db6e9e4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.248.197.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3676ade6-9362-4376-bb25-0c6521e2d2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.183.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61780efe-3899-42ab-bbbc-fd2a7dbf11bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.33.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddb277d-5adf-4315-8216-49d07b9dba9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.64.169.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea3d6f2-4c21-4f45-bc8b-a5a53e69c09f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.7.204.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0783970d-5475-4c4b-8a5e-c71aac9fd5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.87.141.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0d3e4b-9802-40ff-8605-b4b26e746b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d4ab12-aa01-4a24-8350-524c6ace9cb6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.168.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcde111c-40ec-43c5-83ea-55f7571a69de", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.10.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c09b06b-e5e8-4f82-a7f5-d51df4877bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e892b8f1-04cd-436b-8b6f-de524f4a17d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4290085-d89a-41ec-b6ca-9956104fdb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51bd981-85b8-402e-aac7-c3ce8e1ae6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97106c82-1054-41df-ba40-af27e92bcaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec5470a-9c81-4df1-9505-7a65e18d8108", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.3.19.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405886ba-96d4-4caf-8f4f-ca9170fda540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.58.19.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2655287e-a156-4670-a3f9-1e49cd67ba6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54796870-5ed6-461d-958b-22fa1a11a375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7b9803-79fb-4eb2-9e99-11d11b775161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4bc7b7-1e13-42c2-ab49-bd6057a1c133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.138.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fb69b2-0e35-410a-b6cd-0d32d2fd4496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e9730f-084b-4c9f-9d34-9ebaa316f135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ff9802-fa21-47f7-82c2-d7ec2149cf69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33627c35-ae81-4199-bc6e-ade7bbc70e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1904eb-d236-486f-848d-377721cffa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcab393-6f63-4dfa-8c07-2db19b02fe78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f6c767-3522-4e61-bd3c-fd8f007e6e46", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c7dcf0-6c3d-44db-b910-06340854018a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e05321b-b5a4-4b34-be4a-932d40d3ed77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21619b2c-fefe-4b83-ad90-0a7298247590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.105.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d224b390-df6b-4a02-9674-13a40f74e49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4e9756-b3f0-4082-a9ec-b3df02659af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d6a167-ae65-4f86-9d4b-f3e5a02b33f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.3.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6874c73a-c92f-44b7-ab25-013c9277b043", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.27.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ff1930-c31a-4326-97f7-954765654d70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.244.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa5eb6f-a081-45d7-8e6a-81829186977e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.255.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c927bee8-3a20-49b0-9f84-359d50bb9f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.85.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77743dac-4042-472b-899e-a5960588cc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.130.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7349549-d3b2-455f-b2bc-9bf44ffb6ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.71.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf6bf3e-9f48-418d-867e-0d28ceac39d6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.72.0']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4ba238-8cba-4e71-abc7-bcc65788e75f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0660a9-f7bb-4ef2-bd29-b867119cba37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1ae57a-4b9a-4c63-be74-6bd964ca0b35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e3e868-8ecb-4649-aaea-f755267ee545", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.151.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e6eebf-b9a1-42e9-8eb8-a8e907e8686d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.214.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd975549-8523-48d0-bc68-57cd41a25b91", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.170.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc31d951-8c4d-432d-ad72-c5b956ff10fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.200.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33c54d4-c5ed-4e89-bbfc-ec53aa378a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.21.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2e1201-c031-42d6-a94a-9e86e1b1256f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.255.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab53a2f-443c-4e5e-86e4-64c257cd7924", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.221.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1639dd57-e381-4abe-84f4-c074bfd88f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.199.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249b9200-bdb7-4e46-9aef-1266a8df578d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a0b7cb-c976-4b16-9161-a836cb0c27b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f686c61-76ac-4478-b416-d213e6d55cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23b9742-d56c-4ca7-8c1c-ca411d98a5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df06a518-5511-480b-9acf-93edca54f424", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.86.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7eaeb4-c9cc-48a3-b086-69382ca5a09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.107.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123897d7-f5f5-404e-b91d-33837e445e82", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.29.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e206e83-1e11-480a-9698-e093960e8624", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.99.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d4a8f9-95e2-451b-a69d-ed54ab24c336", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.91.158.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1472942c-dcef-48f5-9b3e-a6b8d0198fbf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.139.47.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a670143e-72bc-4587-8018-11a2f187968f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.90.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531c93e8-ade4-465f-a0db-de2f454e5cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596498d2-a97b-4624-8384-ca6fc4d172b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cda1f47-97b8-47e5-a0ad-8925a323a814", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64c77aa-658c-4610-8b9b-fa60c9116fba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9ae02f-1d9a-4f3e-8a3d-68d2a670cc3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bf3a66-9163-4d96-b0fd-0f4999e4966d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.136.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd74e3db-338d-47fe-958e-da07b25998ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.156.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ab4814-cc9c-4860-8bd1-569e97f10304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61015335-1865-49c5-b954-7259c17a63ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.178.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b662fbe6-65ba-4bc9-9ad7-50ee694df360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b87e97-4504-4c5a-b6e6-fbd576eab85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53e2670-418f-4ee7-ac0b-45a2fc4cdb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.224.241.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd4c938-e270-4872-a3fd-094113317b8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.238.210.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcd3107-ebbc-41fc-8a3a-aedd7e25d517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccef116c-15f1-4847-976f-aa8748f5b0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.113.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dbd03e-6966-4c05-9d31-2172403fcd96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.27.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf20111-c564-4e4b-adde-ddaa646eec17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.153.41.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f07a58-92e3-4032-abc9-3162b7284e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.159.49.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c86776f-5dfe-467e-a202-7c958a2c4a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.161.176.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0bc465-7916-46bb-8760-493750a90d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.206.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f8a63f-1cdd-47e9-ba23-4c881bffcb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.40.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb28907-0267-4ac2-b30c-03eee7e9374e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.166.203.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbff42f-53ed-44ca-b157-40f6bed98499", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.174.209.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183dff89-fe89-4711-985f-d153e60d1c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.174.230.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688a2c4f-cf2d-4e94-89c0-422ca2d1a78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.76.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e26dfb-1c35-4087-8ec7-6a0bdf743997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.208.198.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0421ad7-d206-425c-aa91-04b1f8b79d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.210.172.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306c34ca-bebd-4747-8caa-3d0f46965e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.135.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204f9113-c84c-4e7b-91d9-821c9b353b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.237.223.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad41dd5e-4813-4a83-b2ee-11b22fd1eea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.243.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbca9d1-bd3d-4142-97a2-8b3445f4eff3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.147.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d537d325-9f70-45f8-8360-689c3f4e7ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.128.222.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fe9a7a-c6f0-47eb-a4fd-78014e516644", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.12.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e9a2d1-a764-43b8-afb0-8f798bc631ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.20.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb73a63-2b71-4af6-8e5b-978e493d5962", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.20.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c394e323-1e55-4a94-9609-bc879ac7934b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.34.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a565d3b7-35a6-4f21-a7f0-06d7f6d540ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.123.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0476c21c-d3d9-49c7-ada6-eb3af97fa968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.67.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc51f14d-5f5d-4971-8e31-f7913c454f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.50.201.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466392c2-de0a-47e5-9985-091d6b3cd5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.52.109.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf97ca77-cc03-49d1-94d4-b8ed3e342217", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.76.159.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af154f4-5a64-4954-b193-58bc2133f270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.97.171.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f140971b-9d13-4f69-8ce9-f4f558aef4a5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.104.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cd3070-b531-401a-add9-d068a1d3541c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.11.42.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33283beb-b07d-4437-a4ce-faa4abc1e2df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.12.116.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc67024-ff42-47ae-bb4b-39b064e6237b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.116.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83afb584-5f3a-4b59-ac32-8ed1ddd4e7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.163.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a26d0fe-fed7-426a-85c9-84462c6cfe11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.174.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff060fb-0e18-4a3c-b028-7f6e41ec39d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.69.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d326ed5-c6e2-4a2e-8b1f-6bfc820034b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.141.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea869de-48dc-46b2-96b1-5484ea7dd2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.173.121.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1055c95e-50e7-4eaa-ad45-2ce6f79d8447", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.180.159.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ebb20c-cb38-401d-b892-5d82c8f08f7b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.34.34.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7daf2d-f11c-4dd0-ae47-a8543451ca1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.101.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcdf897-3335-4112-9bd1-5e63a24410c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.63.105.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e037609-7422-46d5-b78b-2b3398f22b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.83.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcba403-7404-4478-8cd3-a7654474803a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.168.133.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f28347-80a7-4dad-8786-c9222fc82b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.210.38.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7849823f-2c64-4329-82c6-e6b4a6339fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.227.203.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5bd2327-3b28-4b27-b114-0c03307d908c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.25.205.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae36ee5-2a47-4fbc-8f35-b8d327d8c910", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.5.161.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3070430c-d749-44ad-a701-d2bacef3c1d7", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.146.163.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0127a0d3-ec79-4708-84da-e682212072ec", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.163.115.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e4a5fc-07fb-4c7b-9ed1-df9303057aaa", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.184.13.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2f2d91-3bb5-4210-b9b7-766f88a67a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.187.242.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10e7085-9509-4a12-9391-18d9a6f77809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.54.19.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec33ab6d-fad4-41f1-adb8-6d14c61b4d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c8bab3-b9cb-4ede-963d-d00a0ed3eac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbe4d81-926c-4db0-b75e-15ea27a2e7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.158.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ffb19b-44df-42ee-8573-2ace4a497269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.198.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0a7c5e-8980-49b2-888c-769c96b4604a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c00da1-f9bd-4b8a-8805-dafe10cdcb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5715d74b-dd10-487b-8d77-89f044150498", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414bf3f4-b4ac-4c1b-b7ad-8fa5e119cade", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac2eb3d-3164-4751-b88f-cce334caf330", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.135.161.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31134826-bdc5-44c7-b1a0-44871f0f62f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.250.44.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75287b89-a48e-4d13-8a6d-68c3b4406b2a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.8.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdb577d-5f02-45fa-b302-ce9a9923e969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.143.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423440f4-9112-499e-9f4b-df09da5d4ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.41.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7447a62a-6274-464a-affb-59682565a0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.6.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20eb45ec-4698-46c2-b137-bdb6b7986204", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.90.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895be419-bdc3-4be3-aedc-bde3ad2dbfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.153.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1465eff9-7f34-4a14-bbce-e5e90b03b17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.217.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ade87a-f704-4848-ad82-c79c50ea19de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.49.11.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca453ba-7bfb-4c5d-ac58-f299a6765eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa68867-3e6b-4a0c-8523-80eab5e68de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf28d6f7-89db-4e55-b67f-cbf5e7485a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16707e57-9022-4e9e-9526-7bd7ea585931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a452bb-4cbc-49d1-8c79-4119f0a23991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6c468a-651a-43b8-8707-480afb549a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38136bc-8119-43b0-8c23-16499f377035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d639a4-c342-48f2-9843-d2f581f74c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eac1b7-1c99-49e4-acfa-d37b3befd65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2339ec50-4c43-4cfc-9b97-409b641c7f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fadf0b-2072-40dc-8bcd-7ab91a10db1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0a25ff-3753-4d08-a1f3-a36bfca539db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ce05e2-31de-4317-9110-978d9adcb051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38389740-4c33-449a-b882-2a3d817ce478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddd14a1-cc13-4d25-b614-8c2a177ca61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a6f89e-65e3-42eb-8003-48ca11678589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb09b03-238b-476d-8c6e-de7780857a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7473cf4f-b4c9-49bc-8fdc-b623f52a2e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fa9e49-4f9a-426b-8388-94017cd1b81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b29b77-7b5c-41a0-9b0c-21257acff84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9b2260-fa58-4e8f-81e7-1b1a067a53cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2706b3ff-db00-4482-b567-7826c4726484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fb24f2-2cef-4355-8d62-5b964d080931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92f4046-5529-4cbc-aedd-e25f89dd8648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af04531-c7ea-400c-8b76-0c8cc9dd2cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d206402-0dc3-4671-8eb5-f8dd12ceaec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ba74ed-30d4-44af-bb3d-5d7abf3fb6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3856ea6d-de60-4292-a633-13d4ff452ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b0a08a-82b9-4fdd-9d35-82492f119e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383858c0-c3d7-4af1-bcf4-3cf29cba2636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d33f76c-c26f-468b-9e42-d1a7cac06115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35535644-854e-4f44-91ec-f475648dfd15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866a9d81-cde6-49a1-81f1-4584564d2c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1603fe00-56c1-4826-9387-6315043e94ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3e3616-e80f-489e-a3d8-51c21f3006d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c2b40a-9f1a-47ea-9bf7-59ee3ea493b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8948de-83da-4456-ad0a-c259974223fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c081c2d5-4cbe-4539-9eab-2c7881858440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189a4cf0-66b1-4eea-9a50-d14c9b17370e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452b4b7e-dfc8-47d3-b55b-3491d59dc384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3bf349-b621-4143-b191-165492e47813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9753ea-26f1-46b4-84b8-6d1c6b8307ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff7fbbe-da0c-45f9-a316-79e8aef6719d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee571d36-15ca-46f2-a377-cfba07c97e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd314a5f-29d1-495e-a71a-fef6c00c4c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887184aa-a27a-437f-b753-50b49d78d4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057cc3c0-fc32-405f-b7de-e793737f6f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fadcfa6-4765-4707-821b-f239b37d1315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7caa0931-8200-4008-935f-b8d84618419f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac559021-e515-45a3-8adb-97c9ed28417f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ef53a4-f193-4132-836f-ce8df714ab8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16445d9f-df16-4214-bbac-12cbaf1b5555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beff241f-e013-4ee3-a240-4ae5f53307ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84496cb8-6c7a-4cf5-a718-9f3ebe5b9c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe3f663-91bd-4576-87a6-7c369b6b8d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109633a1-48bb-4913-910f-73850416b61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab857f1-654e-48b3-a6d2-e0dab44762ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae4ba1b-640d-4a3b-a3c3-fff2148e8c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622b21b7-b231-4253-ba12-7e78ae678611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4345230b-042d-4cbc-903a-7e7a24cf11ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fd178a-1159-4b97-9c15-5f1a55405ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e0a211-69c7-4a7d-92e1-e4b7aaee0a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2556a987-9e08-446a-ba16-8a2c6dcb2f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43cb02a-1d05-40c8-9e05-81bdc2e44aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436f5456-b346-4ab3-bdfe-eccb41d67e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bd7e6a-1f53-488f-80e1-7fa096f536ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076983a3-3a60-462e-a3b0-d781df1feedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f04f2f-efd6-46e5-8d8c-9b2b8c70a098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe88231-0e64-45e1-a8ba-3ba3355415c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a187ecaf-3a55-4702-b4ba-b6ebae5e2eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678a6f04-bdc3-4a8f-b8b9-cff346a290d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318a396f-6158-4d2e-8378-15c8c74b5cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c5effe-de90-4803-b43d-47f49a6cef64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313d68e9-e086-47d4-8bda-10bb8d878f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9408ae0a-8f67-4bf6-ac07-786e89fd5938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a599dbf-8c72-422d-8432-fcb0bb03a5ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7384f396-1961-4e6e-8dcf-7459166305e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19afa94-73ea-459b-bdd4-08da8470cc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c769a6b-6019-4453-83e6-74860714a44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fd33e2-42e3-4b2c-a76e-acc8bf32e0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b65d3a0-8364-49ce-8bcc-58b7bc2f67b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a4f98a-251d-425d-8ce4-f794d637bb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c63d700-a1da-403a-ac78-3ea69613e68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec1d9a3-c23f-4c05-ad92-11bf1153b03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528ab024-a667-449a-9911-d90446fc0bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6fdc1f-c27c-454a-a87d-a98b7a2a15ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2c5a03-da33-432d-8b40-978a180940ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381025ec-49ae-4416-83b2-54f75723e6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f8c8d6-6fe8-4897-914d-c897a7e2b891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3091dd0-99a6-4f1f-978c-455292307ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20a890f-b788-4755-b837-be0e7959b94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4175d5d3-96c5-49ad-b243-ff7034ad3050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b130c1-24c6-498a-811e-c21c65e122f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd76a21c-4699-4869-a713-f8c6d7575883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4d6964-3a3c-4fc2-b5e2-08a4b3b3a3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5640392e-a9be-48c7-a4f2-9a9a6893e730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cac7670-eab7-40dc-97f7-53e6df163073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db48833-58b1-4904-9f4a-66d91e08d21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4e17bc-f429-42ec-8071-15bcb2a17927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f7adc7-171a-4207-b2bb-8ef433ba14b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054f1e36-33e9-44b4-b676-61ca47c57420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56df9145-618c-4825-aca3-9a1526321830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e6cfe7-ea02-4eab-aaf6-87634ae0fefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa7070a-fae4-4bfb-9b4d-0a9e737cdab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03451ce4-de47-49bd-94a3-37997f6d1c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61e088b-1328-4345-ab33-d4de90777c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6dbe10-62f1-4ee9-8ea7-0c005e19a73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f619f1b-ebcf-42b3-bc53-1955cb4f4a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe69180f-6edb-49d6-9e78-6e85ea097d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc3516a-c645-4a69-a7bd-7ac2b04a7e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42639bd-8e29-4dd1-9d5e-be74ff09209a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d43731-d64f-4ef7-a344-20feb9c4c5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af994438-cd98-4070-bd24-407d4868b866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a26da7-1a4f-49e0-b5a8-07d9e0378148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee1d41b-22a5-42ab-93d6-f15640ecf1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752c3ac7-e2c5-4c8a-b8c1-a3d1b0ef4db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5c656c-9c75-40c1-9065-7b69fc41c8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565e2665-9c9a-4219-afc8-e90902a9182d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3b39d7-6328-493a-a157-b6f975f2c700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca51b3ec-fc53-4a3b-bf0b-3e6d241b2341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615ec988-8aa4-4362-979a-fc5d5ce0535c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc73bfc-30ef-4af3-8875-6ea0b2a0acd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa689dcf-4a41-4478-b037-1a285d505f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73808f43-f716-4a0e-98e6-0be2d6ed9868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.76.8.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883459a0-8beb-4b36-ab04-3e1aae2c0f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f51c304-852e-4b81-82d5-9d722226001f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf1a53c-ef44-4ef7-994c-b1fc09a40c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1eca15-fc05-47f4-805a-b2b650763a26", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4935f149-e90c-4884-afcf-2a0dc772982a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef38b52-eb64-4fbb-965b-fce482a63d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80a44c7-b86b-424b-ade5-8f8d124c4e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3c5c0b-6860-45c8-bec0-3a0f4565fe0b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780b8cc7-f6b5-4f0b-820b-b7371dcea1f5", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c03b06f-c74e-4ba0-a38e-0a8e2844572a", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53b24ce-3b7e-4bc9-82d7-5c96fe41fe1b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee22f7d4-f1ab-4472-882b-8cfef606cc4c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69c8d95-c325-40d2-99a7-4b85f9f982de", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0601123d-d8e8-4cfd-9a92-8c4d0ea2e7d4", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad5d29c-bfc0-446c-8362-241c9b79cadd", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c634fb4-b8fe-4bb0-a26f-935a3441c189", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917b8087-0b87-4451-8d55-f6d1e3696f5f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff11510-b5b2-4347-a73a-b747e940d36c", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5bdc1c-3889-4821-bd78-c42042b3417c", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d45bfbb-5967-401a-838c-d11f94da4c3b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4ffcad-d02b-4222-b9f7-d7d5d380e86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bc792a-7bcf-46f7-80fb-bf306c45e73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462e7779-0941-4657-b3c6-880048504d18", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565cc4c1-2b9b-4284-9a5c-a547b87e0d34", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bad079f-217a-44b1-9d2b-2e1d2869e865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91124f9-da6f-4abe-9795-1445a237b3ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57092fda-9384-4eda-a07c-942d1e2cdc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74635671-02be-4bf2-a409-8c09d1aa8b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bfc620-f3ae-4b1b-aaca-6631317fb3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1051f379-3d4e-41ef-aa68-be0a5460f900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a95be8-5877-474f-8147-224eeba24a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e85744b-1dc0-4bc0-aba9-ce93493d09d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80796fb6-be00-42a7-86fb-a2c01b198185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9367dd09-552a-4749-97b6-0a5f4c935c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582c624e-0d1c-492e-b8f3-86af41786b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd50c612-16ef-453e-869a-5fb953bbab2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c577e55a-fd82-4fca-befe-ca10c7656c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac7db31-8542-4bda-9a76-c2ae388f4b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642323a6-96c1-4fa0-a432-67e88d07a3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6641d4b9-7c05-4b5c-bbb7-4a55bc797c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d887cc-a9d0-469b-89a8-7cebda60cfc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b49117-b204-4e6b-9fb6-e2e8d256f03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0502ad43-8e48-451e-ab59-4ecdafdcb605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38afa6ac-a1ed-444d-909a-0121638020f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c8adf8-3d89-4bfe-b371-6b712ce3d93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9505f552-d43c-4248-af02-417732e6431c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b970954-6049-438a-bb87-213d49c7c8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab49368e-9ad4-4711-8152-f7249a5d11c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd1843e-1597-48e0-af9c-5bf583d02954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08030c18-9b7a-4aad-8219-49e07888f1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17408084-5cd6-43a3-96d5-4d0b4962866e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2f498a-9cdf-4f94-bf27-00ea981e5698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756db61c-5856-4a5d-9cc9-28a85a8efc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187912d3-d800-41c0-a5ab-f9e194bddf01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d5cd5f-487a-4ef1-96a9-904ded92fe9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5c2690-088d-4092-8792-93c25545a08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a97b24-01ad-4708-bcda-42d9ac3346fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697f9017-1281-4fd0-a09d-d939146ee478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7ceb37-9792-49c5-822f-d779b09bb039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f208db0-0016-46dd-8b48-0b12dfed7bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1033db-e449-4c31-ad78-5a3733c7def0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6757c3bb-6858-4208-81d0-1dec8f8e930f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a181a7-1818-4084-a3ec-9ee544eff5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f432b7d-afd2-400a-8127-9e8c19d878f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db862a44-9191-42e4-bb8f-0648a3340101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471667fb-b9a6-4df7-b45e-a98635083ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1285f7-b85c-44da-9702-0d5f2855daf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0052ba29-9742-4e96-9033-ad82d684d1a7", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86c83ca-6293-401d-9952-9d19a997f2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2915f3-f360-4b6d-a83e-f4a1c1385ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc4696c-fd27-4fe3-805d-531dba477878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c242098-506a-413b-a8e8-63c1a5902d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf47af2-18c6-400d-97c9-017b364ce727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32666f74-f899-46f1-a1c5-c3b9c4f09fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a460a3-3d5c-45b0-8075-63fdde4dc7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895fa160-dbaf-4072-bbea-67508290ed7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f7625e-1acd-466c-8c71-2a3af9bdcee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26462cac-3018-47f8-8704-6c8802989812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2313fa-dd71-425d-9901-0090e1b17866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1dff613-6ab6-48a6-9c2e-ce35ae5c1e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bf6526-45bf-45c9-ae7e-c6efd886689b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b470f8-6ab5-45f2-b1b0-dd6671f848a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5b27e7-eecb-4d5b-a1ec-38078b32d71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f76536f-ced8-43a2-99b8-8c119ca639c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c53ba9d-609d-42b8-b0db-4cc34d0fa258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a9fc14-2a2d-4439-a302-018a7420f823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544fca42-9ffa-43bb-a16b-8efc812bf756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a8a6bb-1b35-45ff-8153-ccfc390f1048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434d540c-fa61-48f0-80b2-a4d4fa953fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5109ca79-c4af-4247-a70c-fdada45313e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0267d950-67ec-4d2a-b5f2-b05e39426a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdc4298-3c93-4927-a26d-8e0c5950382a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0db99e-7675-4c79-886d-27af4c94e210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d00cf9-1a0a-4e08-95af-64231a11ba48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a828cc4-200f-49a2-b4fb-3e72c3074171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5418728c-c459-4c94-8bcb-2c4a2f58f731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c474c7-f29e-4029-8c9a-86458241d5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd44109c-937e-40b5-89f9-ccc5c825b83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d4fbbd-584f-4c86-96b2-48f2bcd3d106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daabd826-c989-4df4-926b-d3fcdc151531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac3331b-5492-4580-875e-d351faa7fd10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aead7bce-a793-4d91-b960-e67656f892f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67629fde-04cf-4a3c-aaf7-899022314a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d39b0b-1846-4977-902f-7e329e8fb20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c41b5a-0216-4c18-8464-03c598481f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7711402-8da2-416b-a938-cd66b15f715f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402f36ac-0587-4b4c-bcaf-62490ee2a76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06658086-c3cc-4d9f-b9e2-c6528973ddd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a81166-dbc9-470d-ac33-41ebabc7d835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c8696b-ab17-4703-bf98-734f5948c814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d06e86-f6d3-47d5-8cc7-175907e54020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971b8af0-be2e-43cd-af17-ba6c50f01e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab89a4a-9b3b-40e9-b2c0-9001d1653b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baeb6b85-a45b-48b6-ac7d-e86a7cd12578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90771e5f-79b6-48b1-850a-d5f46410b728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b347b629-139a-45ae-b6af-2c606c802386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.116.243.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7331a4-78f4-4764-8c7a-0bb75499f358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b4c1f8-922d-4601-a4db-f7146eba6d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213b56cb-e3f3-4b65-826b-215cfed0d94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c6476a-b806-4699-a371-5448f2916cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5758f4a5-d8d1-46da-897d-8bd5460b4ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330d9ad6-afaa-480c-a687-6c54eba608f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f2d882-0c46-4adb-be8d-5a644c5466f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe34480-31df-4127-afd1-701c61d550a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973e01d7-1104-4cbb-95a2-63ca9d66a5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314c5fe6-d034-4276-a37f-d7979905d047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ba32aa-82fe-4e1d-b8bf-b1e723247aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85f97aa-448a-4313-9224-2e9c3378346f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e65a589-ea45-4d9d-af2f-6205c8c5551e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e9c0a2-35b1-4a6b-be59-5db918992637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430d6fff-7f86-4880-a2f1-8b2a9fef2071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf07f85-5510-453a-bcc6-d83d6045219f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a34745-cc28-4d53-888b-d5a6e46c151b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6fb3b3-68ea-4597-abd3-15a58472120c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bc26ba-39ae-463a-8511-9aabc2e0f48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca4b286-9480-4506-9d1b-c89ec38a4cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8248a46b-6590-4c27-a68b-9d0bf953de66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c01ef60-747e-42ac-ac5d-9367e46ea00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23b6edf-6e7a-4fbc-93f3-7b5e36c996f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57a8f0d-bc10-4e6e-823f-30e211996e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee1d0de-f2b8-4364-96c1-c340e8ff607a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56743ec-e8ea-41d7-b3f1-c1a106505b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49184c95-43a7-4af6-90ff-04e0172306e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c29c41-5e07-4109-b3c6-a1620cab0d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf69f3c-b0a1-4d7f-9c19-a2fe0aac2f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b428530-6955-48ee-aafb-7686a1aa68d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53601d7-6880-42d0-9e60-6c1fbedeca64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281c38c1-f811-42be-9126-f7689a679e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e1800f-caeb-4e89-9dbc-d93d2b21bac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27167dac-fed9-4716-875e-3bb3027c0e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1eac1d-2f45-4cfe-aea9-d14185e0e1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42239be-21fa-400a-940c-4017e2865c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dc54bc-91f1-46c7-b26e-d724f266d556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f083277-586e-4c40-8041-070a17cf8277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673b6478-e7e2-4ca3-b297-f9c0183adccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47beb06-dc2e-425b-a06c-818d309f9c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fc598e-3745-4c67-b6e2-387464064547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6ed3a2-8e88-4226-a67f-0e702cfdda88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a725b3-e223-4cbd-8473-03c72daa42b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0216d41-0698-4529-9bdc-71e900453941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cc74d3-d65a-442a-97de-b8f79216f632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acfa7f8-7d0c-40e9-ac56-01a5f9311ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64c4645-3071-4c71-9b98-2badc2624e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b192223b-ce33-45b0-bea3-13df192136b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe60725-ca95-450b-8d3d-cd83c5ee26d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d9a206-a39f-41a3-b47d-27dedd4c7810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c371722-ac6c-422c-b3c8-0aa6a5c278fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d38b54-ac48-408e-b103-5d4fc5387280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52467857-a892-4112-8d98-6c082017b220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7b05fa-8496-4fb5-82f4-dcfbe9898705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaef1359-4a05-4a34-8746-6bcfb6136537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7363cdf9-67d6-4447-a2e2-a32b560ebe5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3d764f-5e74-4444-8519-177a63efb747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fc6070-f727-46a6-93c9-b5ba611117d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123dd7b7-1e86-4a2a-8414-f487921b7531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0eff4a-6663-4202-9621-d8c946b8d58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2911fd45-777c-4b1e-864f-b8505263e6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce785155-3b46-4d90-aa0d-31988d19b827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a67a213-65a6-4c00-bdce-58e786e3c244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3296228d-6951-48a9-bc08-bae61ef78feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc787810-b631-4a09-b678-f2a5994eeb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497f29f8-fc69-4333-a409-e04370e100d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f34dfbf-3c21-48e7-bded-8ab9ef0960e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2753f71-ccd0-4527-b30e-a853deb94418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd12f3ab-9e64-4bdf-895b-6d9536b05733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddea8494-9498-46f4-ac7d-fb6e2e6572ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6e9492-bd28-41e2-b4b9-28104bb97677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dab4e42-7fac-448d-b6ac-a412f8121142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a33e7f-57f7-46e4-bc98-ad0d59470557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.160']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9defb1ab-632b-4a45-b966-f69b52f3f6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef52e4b4-1a67-4c07-9244-49918257e0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d43e24-eb54-4cfb-b374-2aa72c5b9cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18254991-f794-470f-90ae-cfefe691f109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b80f12c-e7cc-4b06-9d57-5ab0cfe9b335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d8a28e-c894-4372-b987-22205b3be29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.183']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4efa04-37ac-4bb4-9697-959713ed9a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774b82a5-55be-46bc-9f46-346756b2bfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aed9372-dd4b-4f68-a6be-49f2970734df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a22e91e-7e3a-4510-8913-602f75532f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.192']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f234fc2e-bed4-4c22-886f-73c44a8addd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122caff6-d050-4068-a420-d235c1f7e8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8066f339-d194-4d9c-8504-91e9965d7a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6682212a-034e-4857-9124-e0adb16aa02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff370d2-a34d-4ba8-a04b-4580205b55b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb62f45-31cb-4aa3-bf73-20be568a5431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6052693-b415-4a31-b9cf-2c3da286c597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f5bf5b-1604-4d3c-b8f7-1f328205a1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8e5774-753a-4002-845a-07702d62840b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0ea3e3-7dcb-45a6-8b3c-c1aae9f7c2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a467a22-b5fb-4ff8-9438-d606b61d81b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21dcf23-c1a0-4b23-8cf6-872bd7dcaa9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e796f4a-1ba7-4936-ae09-4cdfd56c41ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2a803a-54ff-4fff-bd22-74344cfaf573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527e1e0f-2710-4b93-9ad3-db883eadf281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a2a02a-f163-4463-9d9d-c5f16f2e15e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cea952-a1db-41a1-8a22-b840d09aac5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cd639d-d8c5-46fb-8d50-2671332ebea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1890038-710d-4450-b962-7fee4f1b720d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132931ca-2995-444a-819e-a733f1e6e70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04109fa2-62b9-4112-aa15-854363cbf6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770f94cf-2b49-48ee-8217-a6b01b39d0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae36a58-2310-434c-9d3d-42af9ebeedf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6efba6b-5ddd-4ce1-95d8-1578a91a4a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce44d19-fe0f-4964-8ce2-a6ab292a3734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05beb43-9509-4b3b-9ef1-eb35fa71ec0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f420aa8-a400-4c97-a911-8d75919c0a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa528f12-1074-4fa8-ac9a-18100069531e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50265bc3-38a7-4d1b-892c-bdd07a65917c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d5401f-8746-43ad-9dea-ba616c61fd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626c205d-96c6-43de-988f-253d4a2bb532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f07835-20d0-4672-9402-dfebdc30dc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f483cbd-783d-4c1c-a4f9-7a9b9cf5392d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6239855-4508-4fca-97d4-f464b0aadac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ba3ca1-99a2-4a83-ba59-770d56957e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15dfd85-a87c-4b86-87a9-edf0286be71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aac389f-69bf-48e6-b87e-a1eab94699d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dde3c1b-aa89-43ee-888c-de6d95bf9990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96247877-ae3f-472c-b714-b8888cb1498e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68207997-135e-40e5-bd94-b88514bbfdf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8859355-1a1d-47e2-a6e2-1f37d5683401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd78d04-02e0-4b68-8c50-d10a8f214ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34f8cef-f563-45f0-af50-e35446025538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebec42d-891e-45c9-ae4b-c72093b11fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0d241d-b5fc-424a-af31-2f8cbc1602ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2234e54-ae9b-47bf-a4fc-54f1cad90300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd19c7f-6d72-4ebe-9cdb-473c7247e1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e379809-cf73-4aaf-b11f-abe94ebeeacc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7415e3b-2a86-4867-9667-d5f0d3e28e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865216fa-3b84-42a5-972a-33479b731510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de3a909-65fd-4e73-b3b7-15fe30b34e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90f1293-ca38-4743-8213-3d12de3cbcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f5216a-bf51-4f9b-a46d-861082a8c59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011bed32-377d-4b60-8614-d27406a1ba4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1036ec64-739f-4807-9dc0-0576b81b5afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.112']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb55143-9e8b-470c-83ff-e7e9b1f6555f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9daaaa99-590d-41b1-90e2-011c8e22e825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c334489f-4f87-4d08-aec7-86eff3bddf81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac39df6-e55f-4539-8661-66c99dff1926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2c2218-a2e4-4ab8-aad9-b171afd76b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5ccaee-6d00-4295-85e9-7c8382443011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a22a747-c4ff-4c08-b353-e24ea3d5e3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1532a4-fad3-4b7f-ae03-0c1e91d6813a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85819934-92f8-4af3-8d55-7907fce8427e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1435a0c2-dfe3-4af0-a0e1-3efe8f7eaa1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e421d71f-a2e0-4b4d-9426-01f2638cb4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111ede45-02e0-4db7-9426-fdbd5590be4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f861fdb3-fcd6-44c6-be91-158164f2a0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23d32d1-f75b-44a9-80c5-b6dad1830b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fbcfbc-8592-4b29-9f75-100859e060ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31adb63-b927-4fe5-ab07-0edaa809a79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c853976d-46ad-4b9d-918e-65e1d9c64d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707f977d-ef9f-448c-b77d-a08065379991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8811c1d3-4aae-4c8b-b482-d78d4c183a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dccf4c6-c49a-4f8f-b2d0-82f1bbf0a342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cee3f1-1cf0-4585-827c-20aadb3b63cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc4080d-bdcc-4f4f-80c2-7d5e53980c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc83c7ff-9ba7-4176-b941-56363b988d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86caf7c2-2da3-41a2-b8fd-c7e38376b415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef4a2d2-15ae-4fb8-993c-9f5316511233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5baa9dc4-349f-4b22-8f8a-596144f49b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a09398-be74-4cac-aee2-850034db5551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0800f2-b6b9-4b94-bf24-e1e881156f42", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c67c924-14c1-4724-9194-52bc23ed66fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2bfb65-d9a6-4412-bb9b-10e287500d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621b6a3d-e417-4cd6-92d9-58178fcb98f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f06d20a-5203-4070-85cb-f4bd73fb913e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3b1fdd-7a86-4859-97f6-82a0d3769f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16fc9a3-6289-4b99-9bb5-f14259743a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.97']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93885b6-b436-45a7-b20d-811f05426e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a502fb-ca11-4c36-9732-03826edb27fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5324b29-1e37-46a3-9702-b4622a891690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4542b182-2039-4042-a1db-d3d2ad67fe97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3515237b-55ac-478a-aaf9-c295a23a06a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fc48a1-e62f-45a4-b0aa-d1aa16ad81c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea81aec-edc4-4eb0-b1e3-e1c2017d76f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7318512b-a2c7-40bb-a83f-6fe3fa460caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd627c5-deb1-4ab5-bcf4-a47b2f486baa", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342764d7-3ae9-4513-abc0-82191fa7289c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dea126e-507e-4945-b59a-ec1450d45c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a6eb55-5fbc-4667-81be-34c4c6165b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b582fb07-7b75-468e-b686-efae2e3599e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9749c6d6-23e1-4f68-9ac6-379ab9212b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119a0bb2-d487-4fa7-940a-157f9f1bcbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2c7a51-4a86-49fb-ab9e-04fadd739f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513efd18-5bfa-473d-88d3-e987d67f8f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fc73fc-29d4-485b-baf1-59403fc0cc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5321fa2c-e5e1-4ef4-9ff3-2cdf7b169166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6866970d-818e-4bc4-8e49-df4628c06a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8397a59-4269-480c-8404-c9e0390804c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.215.165']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01f0972-9e1c-42fe-a762-252ffd14cdd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2ebb60-b1ca-4337-be07-630795cb0da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf04891-9071-4eb8-9b4e-c5e8cbbc9ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31645939-d578-4b26-9ca4-239f51514555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c817cac-d23c-40fd-a380-59955745a706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e599d6a8-8489-472d-87ed-56b480c62f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c3b19c-715d-4375-a44b-737a4010f495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c623ab17-ba38-4b35-97d2-2acc00c32350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1040bb-2c09-4f76-a218-f66ee7a1a46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.240']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7204bd8-031b-4055-95df-bf66ffd67329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a53d3c-6d73-4c40-aab4-0bfc9613de53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.65.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c24079c-44ed-487c-b7d7-7eb1da56f8be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.74.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688dea5d-f410-449d-9818-60bfaea4eb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.42.53.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d62edb2-0b2f-4a74-8396-bfce97703507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.42.53.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3539078f-8b25-4721-ac68-e2ec7c4bafc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.42.53.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cce0be5-d27d-4bfb-87d9-25f2c3555d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.42.53.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e193cb-576c-4f57-ac65-cacd4f405657", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.9.91.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0b93f7-9360-4413-934c-4c678d9ae845", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.93.210.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ace36e4-84c6-40d3-ba50-c07ab3f3b369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.164.120.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef4800a-3392-47db-b453-f3c01e3b964e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.185.124']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9694877b-dcd9-4f5e-b56d-3b6f86b8c8cd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.215.227.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82746f0-66bc-4711-91e3-8aa8be3cd153", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.219.176.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfc68bb-6c5a-4a8e-ab79-09cd1864dbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.14.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a75f4c1-8c34-46e1-982a-dd7d3572ebf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.204.0']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253a6d36-9e40-451a-b4d8-33d7ec058fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4e1a36-4a80-4cd2-a96c-48a915e20880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.58.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4258b74c-16a0-4a37-9b86-f00f579971ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.195.44.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e5d428-ce06-45c1-b8d1-db1c24315d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.12.71.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9eb39cf-221d-4aa8-a95d-a9a2ce3f0219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdebffe7-2837-4f7a-b987-13b0ff8e2c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad6c6be-6c9b-4901-a2ca-a22c243ce58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981b52bb-b09b-4217-aed6-c54c1ba755db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0693fd-7569-460c-8b80-64be70030a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.33.210.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e5d0f5-9eea-4230-88b0-b54f984c12fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed961296-fd9d-4cb9-b7f6-3a9d594c0fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52e9447-06bc-46b1-8d84-900f859d9c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56d62e7-b7cb-4dec-860e-a1eeb34ac201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc5cb79-4671-4d6c-a7b6-dacb9e532bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9597d605-fe7d-4756-b489-1d4c82772af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f1b7c2-0530-4f79-b217-eddbdb43f1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa709a0-8866-4843-a611-56efb1f1e6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.186']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13139d69-c79d-4ae4-ab9c-3d645e3572c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22bcc5b9-7e6b-4607-a80a-c2b67a6672bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fd0b46-d70b-4ccf-b4c2-daf8ba9edd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f163af-fd0f-4aae-b479-29ab4c8ec7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9287fbc-d56d-41e7-af61-a122495d3329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdffdbd-3fda-4235-92f1-8d532cede3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f475d417-bec7-4930-a96d-823c3319ff2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e71bdd-27e0-495a-89a0-e27e5001d4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca22c054-1ff9-4e79-b014-93c3bbc93f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c3bf2a-326c-4df6-8edd-1235d77ce1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd48d70-7215-4225-96e2-212e1e43828e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e83c1ee-ba29-4f56-96b2-854bf4ea84fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.62.97.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a278d4-c391-4eba-b7d3-2668e3d4f2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.39.181']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a69d54d-f5ec-402f-a61c-6427a037bc70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.216.165.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7224681e-7dc7-4871-a8c2-d352c65301f2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.19.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae239c11-5798-48ca-a9f6-7fc21202a894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.33.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86fa7b4-c941-46e4-b32d-f3de112609e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7c2648-d729-4e67-bcee-3aa88501546c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.208.225.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd0e6e1-9116-48b9-a1ac-40c465f44def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.208.26.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f30eef5-c631-4d1b-b3f8-b0231e99d81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a0097e-ed94-44d4-a4b5-dc3a0d3e0721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5db14e0-0e85-4d1e-9049-8d8647555675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8affe076-a2f1-4b0f-a5d5-4624a93b2048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.244.193.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1082fa-674e-45b5-8b32-d3e6fd3f6638", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.248.130.103']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37eb89f6-201d-472f-885d-6f494cea8a55", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.206.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2116ade-6e45-4e4f-90ba-01acf556780e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.50.98.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e6d0e3-f975-47d9-a5a2-05ba7da82f20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.180']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98912067-b5f8-4532-a93b-69c140c45581", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597084ff-2d64-48cb-b9cb-abc29c5cddfc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c529926-dcf6-4565-933a-636add0a87f3", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d1964f-6863-4c32-9748-5513bede9529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e3097f-dc4d-45e2-ae02-12bf8ea3ca4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca43be9-b0fd-454c-a61f-c2b12e51140e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99693921-e689-4328-b976-52549e60d7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe1760e-d19b-426d-8b12-a0ff4ead6e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b65e1f7-e607-4dce-8d8b-b834ee9e3a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effd2f53-f5ed-4184-9c8c-dfb842c4a50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b358534f-f6d8-45e6-8a50-2617a8088b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be897556-80ad-4ddd-848d-630b47f764e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a536aa-02cc-4a13-8a30-cf8d03e8cfba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bad864-8183-48a5-806c-4fe3c32c2796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e404d37-d095-4ece-b9c5-483823983523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cee975-b823-4dab-b194-3ba725f12f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3208987-beeb-4153-a648-3d7fe4aff676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a8595f-290f-4716-8b70-c14ea935e290", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.91.136.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34dec529-534e-4551-89c7-105ba81e6d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.113.181.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d2722b-7215-452c-b456-9af45e2fb537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.127.6.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9ef414-7a8b-4bb3-bf85-9567bb1c3bea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6af481d-cb16-4266-9e1e-c41d8eede6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0712730b-2671-4984-99a3-65b772ecb058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9daef34-7548-4186-b226-f63f4add2175", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cac47c-5368-42f1-be66-9d3e98ea2dac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd92e47-5bc5-4730-abdd-df063468f218", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.240.44.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ce2ebf-9886-43e9-a72b-c5a4b8bc10ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.246.68.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b926ea9-429e-4ae1-be03-94ad16c697c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.37.98.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb6911a-0763-4d17-8dba-17c119e518e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.51.54.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f64f50e-2c52-4655-8704-8f0cdbdf453c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691d810b-66da-46d6-b50e-2aad92fc4d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24b4c5d-36d9-408a-aa40-90313edde325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504c30b5-284e-4541-b4af-197ff63109c2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2f5ee9-d509-4693-a0b6-eb02d3709b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d59a3b-f248-4da5-b3c1-4dba80b34d30", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.230']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd08c5e-5898-476f-8cd8-9c4124131793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29f8ab7-74ab-473e-a11d-a20f06a01f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b968844-2f08-411a-a9b1-c383780c88e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7a527c-9f7c-47e0-aa50-1142bfe45940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.51.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67dc5946-c431-4ab9-9f24-b78dabb096a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5d65a3-bff1-4bfb-bb26-7cf82970ae40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d1caf3-6a58-466e-a935-19f4703864bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d23731-25a7-405f-9f32-ebae0ebeb340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03b6171-97e2-4154-b0e5-4f2fd0eac9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.89.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8726a8a-91b2-413c-8f6e-30cc2e2f3871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.120.134.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6156ad-0fb5-4450-ac75-8d7601ad8b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4fd848-8b84-414e-bc14-2c6111d00932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6427bc5-31bd-4059-badc-3fa5431d80bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68893275-2958-49dd-9c63-38645e1f9c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761ca289-b41e-44f8-8a7b-f255182cf9db", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '78.138.24.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5afce2-cbde-4429-ac07-cf6b5ab5d7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.148.27.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95130a70-c277-4ade-af0f-ebec76945b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c929c071-f31d-4c7a-bff3-c1098c2a2aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009ebcdd-63b3-4213-b208-0af491e5654a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb53751f-d9f1-4a6b-898e-1b33a7c3b7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.159.131.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1957e3-7dcf-4cb3-a564-c097b3b36f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.173.50.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681c40cb-fd72-4a8c-a05f-15654725a46a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.2.213.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10259aae-274c-4910-adce-8256dae84394", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.31.67.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fceaa8fb-8494-4d4a-b5d1-6bb5b1d454ad", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.31.67.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37141220-a0eb-4747-bd58-87c8ae02fdfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.162']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d362277-17e5-4421-8b75-99795c5fecf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413ddf74-f39f-425f-b388-a9e037bafa18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44630f0-5186-4129-b41d-38b33bcfafc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0739b1dd-d337-4d79-873c-fce6aad1003a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4456eac7-37e9-4768-8167-684af1329938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.90']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13497340-9d71-4efa-a24b-ac99e67331b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ebcdc1-3751-48bc-a805-8adb580b0609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.13.233.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a7745f-d95e-4311-8fcb-3b0737b6526c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.137.76.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552518eb-8a74-4d1b-852f-222c918cf3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.169.194.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c5bd06-167e-474b-b179-47e3fa518574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.26.81.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8b040d-557e-4f91-bc6f-b06d9e10bf99", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.3.96.178']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d736d1f-2f63-4132-ad2c-d733f6ce0347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.142.93.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a352152f-9c45-4047-bc75-03159ff437cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.166.135.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3d0373-4fe3-496a-8452-75aae4b80a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.106.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ec5421-c865-4d78-91a4-424d74d7ce0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.107.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4e6a1d-c370-41d4-8831-188ae97611d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0876ccde-5a04-4fa3-95c7-b9779285b5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.209.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d590cd8-c2b5-465f-a651-b8b5136f6227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5560d54-9e0b-416f-b00e-0450175a441c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.216.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8fe93b-1bcc-414d-814b-04736307ff50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.64.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841d42a4-e13c-4385-a771-838bfe56a46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7babaf3b-839a-47e5-8761-1fadd963f2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40697dd5-a517-4c44-9c72-8d9479026f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.150.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f0ed09-adf7-4da1-8348-bdcc526ef752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.157.244']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f850d646-5e05-48de-83a8-819eb8b24625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.168.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913d0e8d-3c6f-4696-b006-035d5fd9320e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.20.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6087f96a-4ee4-4ab0-a4d8-7a934c616094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.128']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1851e937-c3ea-4d44-9ca9-ac9ff5204c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.36.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2354ec-6460-4073-9c02-4d6f8f479e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc1d180-df44-4724-ac02-396acaee7874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19ac267-3b54-4e6f-9fc8-c01dd08feabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a8a86b-022d-407e-b3d4-86b2dd0e9c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10fc506-fdc2-41c9-af86-8284f4105f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4a9247-09bc-41ab-b306-c8d1a04e7a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f84e00-fae3-4597-bac4-4b9aa2008ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a41d329-e48a-4a8e-9dee-f24d0785d34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b30a8a-ac29-4d49-bce1-abc0b9749a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0753320-98a2-4b2d-b038-fad6170eb3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02560472-7b0b-40ad-859f-adbadca0b852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf529d7-0ca8-4c69-ac53-1a7c84a6e97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c34b28-e2ed-49fc-ab87-c9288a7b5b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c127bd03-689b-4414-9c97-3d19f592c182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192de801-8f18-4ead-b563-10f91561b3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389e7a33-0e99-42f4-be93-5ef920efd913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.184']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3429e279-fa6d-4191-8483-d609a4557c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324a0970-be33-421e-9829-2740cac09f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b324ebe-5e71-44d5-b268-586f30f8e085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9710da89-0d13-41ec-b652-53617d66f4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98784a0c-c3dc-40e1-8db2-6dae81993444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e827a95f-ff08-458a-b92c-c91e627f521a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7e88fb-79c1-4bea-8d0f-8c45158ade91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8076f8c0-c154-41f6-be1a-9ff0762c0f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff909bcf-b00a-44c7-a2de-92c753d6fff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044b766c-74da-4b66-8b62-2ff5b041d142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b5a2a5-4c5c-4c47-8801-6fc5d37b24e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b700d48-7b2c-46de-98d0-5bbad5d34035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.246']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d0e83f-31bb-4e2b-b98a-1c5dc64da264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09106522-1c8b-4319-ac86-dbb90692a392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87aa843a-f81c-4df6-948c-cae0017d8233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da52a30a-0e9b-4e8f-b0b3-39d5c65fc9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.132.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5315de-db55-4a52-bd62-1429a43c80e3", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.136.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150b8d73-f2e9-486e-bfb0-f0033cffa9ad", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '8.229.204.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93081ae-2236-490c-bd50-3f9c46d06268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.120.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82084668-4597-4cf0-b229-7f52497ef6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.66.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbff078-ed87-4a45-8b5a-c15bbbf4276c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d094bc10-7449-452b-b572-6e2a09369840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d32582-8439-4344-b183-b9115908540a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274e9b33-5320-465b-809d-daea1bca54b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631f655d-4479-421f-af2b-bf91466fc620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3356ba-2bde-4ca5-9f11-56f5078a02e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d508bbe-7e88-4fc8-a0e2-7c59b9694742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e73c8d-c47c-488a-901c-5fff39abad17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.96.113.130']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb9c77b-59b4-4a22-b0e2-f40b66f5c64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.17.28.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18ed11d-3934-447a-b3be-e535213d893a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.181.129.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd936cb3-92c7-42be-88fb-6a025364f486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cec7359-4377-405e-b5f4-8c4c6ca12886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c75fbf-a0f1-40f1-bd10-e48490d4a7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10425753-0666-47cd-9a1d-e80b16d37f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782a33ae-14df-4235-bdd3-551b1c702c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a722295-75f3-4a31-90b6-c41b3d5b1a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.222']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afabe39-1250-4822-98e0-98c7bcf067d9", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1aaadbf-11be-461f-9bc8-1edc9a608919", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.46.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212650a7-8759-4c7d-8444-57f9591b8241", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.56.76.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00858cfb-fd11-4fa6-bd9d-dcb69ffcded8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.68.179.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa5dd59-1239-4142-b043-1f4d027aff7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.146.11.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bbc7e9-02aa-4018-b3a8-c460557a7924", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.98.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467cfed8-6b6a-44db-85b8-e84cb8166a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.180.146.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0f5040-fe90-4cd7-af61-2feef4197189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.130.30.188']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb8d0b2-40dd-4274-9480-f7ee4b6c9b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.224.142.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc9ee87-5ec4-4960-90f1-4db4f6829b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.22.213.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e35827-a1e3-4ad6-99ea-5e842791e4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.184.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4951715-f055-4c1b-b885-f04c0f4d67f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200c75f0-effe-443a-bacb-71249b83a61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2603ce50-9db5-448f-a71b-80bf348aef2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38111e03-e272-4827-82e6-955ba20c6bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0193bf75-c6d1-44fb-ab13-4ded874ab2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1a2bc0-8509-48a0-a890-86236341eccd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.165.104.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa2de41-117a-483e-a57d-7279b07802b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.190.97.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8407f356-2ce2-48ee-9761-886ec3e37190", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '85.204.70.102']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131a30d6-b911-478f-a51f-529320beca25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23638201-606e-44e8-85c3-381beb4bb6ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc91ef97-15a5-4a05-b1e0-7a0322ec8645", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4615a8-392b-43e2-82e3-b3cf64b2dbcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6113e278-4211-4f43-aacc-0b2728971f08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150da064-4214-4bd8-8c8b-7fa435bfd053", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f8bc26-b02c-4349-a7e4-ec04d71afb68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2ade36-2741-4069-8b17-f2350e34815c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c766e1f7-b7e9-4c1e-800c-fb1f9b95f43d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d4f8aa-b8d8-41e9-915c-f41d99a4f9d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe445c1-6626-408b-8365-23243481cce7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b88769-5aab-46c5-8b11-558e3a5207b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd568d5d-6d10-4ea6-a0c3-aca631e437c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3c0326-a4b1-422f-a87b-2fe2309a0396", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad659e3-d6c2-43c0-ad12-1071f810b18c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fb4ced-9471-489f-a285-072456be2240", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edf40dd-0945-47e9-a4c4-3a910da72a55", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d562a21-810a-4392-a0b9-371e09bc5f44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601626f5-b6bb-40df-a040-f189aeb033a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e630243e-ae6d-437d-84db-d46682297933", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb6d967-e5d5-4672-807b-b746128922c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53d8a6e-4f13-4dab-9918-8de99cca20bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26c4acf-ed32-4845-af1f-a363b45830d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7be8864-2703-4007-a534-03de94124ff6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bec5b0-12cd-4c63-8383-580a1c6bd16a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcac084-4ceb-4d3e-b9de-df8ec966fbb6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a573e26-987f-453d-a7eb-c19f2478a3d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b07f2a-a969-4933-8959-d302c3a098e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fda2f00-2565-48f8-96b3-145f2978556e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfe8695-39d0-4178-bae1-4db2f715f034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b51c22-c75b-49d6-83df-1cbac52f12ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32460718-3d9c-493b-b1bb-b01f932da261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89784c3-0e25-4470-a087-313596f8ad38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa593d36-886f-4147-b927-d4de601943e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9fffcb-bcdb-47df-a2da-a2f3fa662b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1063d16e-88a6-4bbf-bcf7-fa1c3998ab77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ee5d50-e37a-4cbf-946c-bc2a9f2fbb92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e0c5a5-1a66-45ff-ab3c-17062bf2b261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceee30c8-336d-43a8-ab67-199ab712e278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7702ee-7a68-43f8-8260-3487a8ae760f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebf3abe-546c-46f1-a9dd-6ea068209f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab855bfe-16b8-4f49-b2a7-b3455ce28a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c319956-2191-498b-a974-8be4ff0ad4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c040a05a-dd35-4f7a-a86d-451ac17f356a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1b61e0-885b-4302-95c7-5dce850d0aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ac34aa-05b0-40eb-92b7-bed064e09c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca35f01-36ff-4345-8d0e-ef11c796a51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d1a4ff-ab3a-4bc3-952f-70a1e0799267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6315dc0c-5b7f-4c1c-9f11-6468dc11094e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9def86cd-deca-46b5-bce9-6212b866f0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30ba6fe-a3b5-46a5-8678-a09f17e51890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8674c3a-aa06-499c-b076-7b6db5f292f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd6a150-826d-4a60-9f7e-78cbbd74ae83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d675a6-d838-48e6-871f-8db1d74a869f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f858a9a-2314-4ff0-b778-2cd49b8d5bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d79e59c-cfda-4fbc-b5cd-383abeb3febe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db2a043-dd2b-43da-bc3b-cde02eef04df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517786a0-2270-4175-9e5a-26494ee7a8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1c9ad6-97d8-4b04-92c5-bb4035af8007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd9b8c7-e619-476e-8262-7a5ed92bb83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9931cca-dfec-454a-966e-bad1f37774d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5da0ff-e704-4159-b60f-845838f28291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496d2134-6b1c-4323-8876-5e5681e8faf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed37de6-51f8-415f-ae43-7e01a6a052ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6abc040-c4fa-491d-9415-980fdd40d5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d45d00-57ee-4eaa-9de3-9e304c2801b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75793585-87c2-45e5-86d5-6130f06b9ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3a45f5-916e-4946-9fff-afa8c3b07cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf178648-71ed-4c3a-b4b7-673381e001c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ce93a1-131c-4f15-8b83-a9c2f6fc2c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4fd7c5-d6ec-49a5-ac8d-6122286d8807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfa02d2-a382-478a-8833-9666664d0f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6add278b-09ba-4313-bc87-1c0d5c26e514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c344ac25-f96a-4143-9f0f-71078cc9b6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c293b4a-fe44-4744-aa37-f2b83c9fce88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c31bbc-5ee6-49a1-a493-3468eed90215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452ad389-4902-4a59-bded-14b78b668de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f40e323-86af-46fe-96da-8efec1b35867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee50f970-cf7e-4658-95c6-db84e3507956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6264afe7-ddd0-4198-bf0c-4315b2e2bd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932ca94e-4197-4440-a7ba-c8325628e98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d4b071-aebd-441b-a315-8aa7d6042668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7adb125-2191-46d2-bb4c-caeace2c093e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6966e2eb-9bcd-459f-9ae1-5d56cb5c82ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db98a86-97dd-4906-93c3-3b945e283161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b48be1-33bf-455a-acbc-e478edd60529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa3538f-b666-4ba2-ac4a-37d570c3b934", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885de93f-046b-462e-9a07-2c4c3c511862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0799b446-ee5b-43f6-a642-2caab1344487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1ae87e-5794-433e-998a-9f8d7cef2c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf91ea0-27c0-4fd0-8990-4683b2060fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865f7651-be88-4abe-9e0c-e6b4bafc0c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a94e7e2-c2d0-41c5-b1a2-fed469a1de88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0f5fcb-f211-4e79-9316-4c6ce2461790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc7bcff-4a8c-4ac7-a0d4-58cd258582a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95b0808-50c7-4998-b482-5a59dca7cad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365bfdaf-4a87-437e-a798-5f28ec7c695b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94b838a-4c60-4af4-8c3c-b460c1cf06cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663a7ab9-ce03-4c2a-97ae-55c8015e239b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667b3a26-cf9c-4b1e-bb7b-718a3984eace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02883391-5df9-486f-8f66-8ef1bf54edbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdd83e2-9b30-4a7c-9b5e-ba13e65c21e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6b72fa-aa38-4d15-8b86-e1d437d6fd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6aa528f-dbf4-4466-93bf-d8804e05439c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca1c160-b6ba-4691-91d2-0c14c2d34662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92d3d43-9850-42ab-8f8e-c652116114ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a34f90-34ff-4cc6-928d-fad1ef69e85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7413d3-af7e-4330-a8da-2c279457d06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56595549-9187-4a1b-9205-f580f0bf03b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfe29e6-345d-4b1d-8246-6830ee899e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f497889-6858-4beb-a54a-0709595f68a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061348c5-9fd3-42ae-ac9a-2266de80ecf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab30b1b-97df-4b02-ab20-d0474772d01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342341fb-e464-44ca-ac59-75ac72811195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214282dd-1ed3-49c9-bf99-6703203423b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2566865f-04ed-4f49-8583-085fb35b7c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a15bc4-d3f2-4ccd-97f4-b46083643a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb582a4-dbfe-4b37-befb-900fb59334ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a422015-7f28-4be3-b03e-136519bf00c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32f6471-ba83-4e43-9014-563d056db858", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98444bad-7773-47ea-9a7a-f17c4dc1c143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dee0a2a-3cd1-4bf2-b5e9-bad9d6f4e107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdae28da-2986-4e9d-b759-d387cae76398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61dbc78b-a565-4b85-8c87-1c9813cebd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bec3b41-7d0e-44d0-9bf8-1d0e77638093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edc3f3f-c7c1-4f0d-b3cb-fb883d7b8076", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421cae7d-6fd0-497d-a6bf-0f9048f899af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.149.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0821505c-cbdf-4d04-bae2-56d11fcf203b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.149.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bc8243-9622-4eef-bc48-154594b106de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008fdc35-9b1c-4657-b462-1889342c3870", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.252.200.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56458648-b7e5-4b2b-9cd4-9d7ffcc97b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.50.194.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8afd74a-f7ca-4d8d-bbea-1a744715a6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cb58c3-0212-448c-a568-66a1e10c4762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.38.98.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f019d49-55fb-4b6a-8a53-e016f87b3ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cad5382-b609-477d-bd08-b8fbf58d02ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0d8a69-a880-4557-9b40-83dd8c62e3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576ef262-0296-4e74-ad80-1aa782d64951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0801d1d6-4f2e-440f-8d75-47320c67a6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.117.56.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef55477-bd95-46d7-bf12-b96732f1eac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9afcbe-7517-4538-8d4c-9088cf6552bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.66.118']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59837de-e85b-4caf-959d-03c4067a29bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d641e5ba-bb89-4861-9de1-8c08fc04edfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4083861a-65af-4298-ad1f-792df669c58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d56e5d4-3fd5-4ef1-b056-df9b35c0dbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.101']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb201d1f-d22a-42bd-8ea7-74c8d6208eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b8fe94-b979-4edc-a6f6-0e0d4bfa6503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ad950d-bb8c-4cd0-b57c-13d5b6f32089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5883f8c0-a36e-4a1d-9759-c27c9f104af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.108']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10abfedb-268e-4212-b03b-ef8ed8bdfddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42afc082-fed1-44e0-a9dd-021a3366e742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9d318f-9a17-4565-9f03-0ac52e2f74a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330e7fd6-91d2-4818-b6bf-de41266d4093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.114']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c485059-0d48-43cb-a2aa-45535995d098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d51a19b-c153-494f-884f-b31603e49fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5e8426-d760-4763-b832-181d6c36b0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6098ddf-2c81-4c60-b133-bd4924f98cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f9b5c1-4757-4220-9387-4908dab5b496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7552b125-63be-49c8-b403-e470810c8448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f84a10-775f-41fd-bc01-43bb955a0754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b3e17c-4614-4914-92fb-f01ca65e3aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a08924-1d9f-4dbc-9ca0-b1e8ff634706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956f388d-0f65-48bb-96f5-5bfa2322589c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a677b6a2-5586-42a3-ae8a-4db90b206f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.142']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49032395-ab02-4a00-96bc-a28f8771bb68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe2d78a-e644-4495-8b5e-e5401a8a85e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0073b697-3ee7-43ab-9438-b70bd30d6205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.148']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4e77c2-3983-46c0-ab16-d47b9556675e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c2ff0b-81e8-462b-81a8-2b6cc51352dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b128a59b-7e3b-4d1a-b2e9-5ed80604a2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ffc2b0-86db-4fc0-8034-b25dea2908fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011f3fcc-0ee9-4fb6-b7b0-baa9663d3e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34883a77-f0f4-48d8-9335-f6dbaade746e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db35bb1-ce79-4bde-b028-e1974cccf9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.166']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74c8a4b-3ea4-4887-885e-1fa495487884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7c7ce7-d380-4239-b568-1fca0adaf218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.172']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cf0076-467f-45b1-8048-b41e3fa265a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24aecffb-2d9b-416e-8b5d-9c67c993af34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.177']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66424b5-f8e2-464d-8227-ed7d53115748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.18']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38727149-f2c8-41af-b98e-ddc68a7160f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.182']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713b4daf-80d5-4883-a33a-8ab4cfda9c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dd405b-7432-4dcc-a62d-5344f052efc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2d2b3b-801c-477c-a821-83e140e4234f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a957b84-c865-458c-8f45-2e14f899ada3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.196']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b92135-426b-4ac2-8a91-15423fb2cb39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1253cc-ad20-4265-b755-9dc45fd49f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1123ea49-60ba-418c-8176-72c0326b91e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565920f9-e39c-4f16-bad4-f022886c5225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f482d596-bd08-4b30-9565-211c95b98c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3c928e-ed84-489d-8fc4-f8b16a09dad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b058aeef-37b4-4444-bb11-8b74d1e87399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b867d018-1053-46e3-936c-2a85ec600e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da51100f-98d9-4456-8457-7d917c364474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.218']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237ff243-2f18-42fa-8b25-a4d4a7ec5df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.224']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801d4a22-f932-4f5e-8a88-556f2af89548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.232']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66abf691-4982-4da6-9665-0fd1eb391a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feecd9a8-5460-4176-936d-49b996c49a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c5b59d-a60a-403d-9ad1-1486b564c606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af86d434-4ffd-42be-b63a-cf8311dd2658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.238']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b97d88-239f-4974-98e3-9aec86a5a7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7576a2-d1a4-4b09-9670-ebc079780885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c197a68-63ff-41da-b190-e68d192ddfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.248']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870939a4-8c92-467e-8205-d663a7ecad0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354d51be-aed9-4f04-9559-bb6721cfd4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86adad8b-2867-496f-8efb-947ee25a0406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7639f4-3038-4da7-a9d0-e761c50edb52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88deb54d-f3a0-46bd-aad6-a9aabe36019b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a261f3ea-7400-48a0-8b8f-64d1be685366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.32']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ee92bb-268b-426c-b0b9-e5c82d0e9c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63192784-7abf-445c-ba52-0aee73cc7c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.40']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c86818-8524-4b80-8e1d-3e5b0e94b017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.41']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3283aa3-fc6f-428e-a6d0-85bc55412957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.42']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f5a474-f026-4de1-a36e-d4b494c63f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.44']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055d5c66-1ddc-49f2-a455-06dfc0f61309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.48']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6f886b-548b-4c4d-b8c7-3d1eb26ced07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53fde2d-23fa-4838-bf7b-cae4be228a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fef25db-3dbd-4329-9dbf-6a344f957cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86312078-8510-4c37-970b-afb3081cf39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d27cf0-69e8-49dc-bb23-92cc4a2dadef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.6']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4e5909-d12e-49ee-aa2e-f2319bb51d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51d706e-d8aa-4e4a-9d34-17a075498bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212d0c10-888e-47fe-812f-b4c7e3a2077f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.72']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b640d621-7aa2-463d-bba7-e237954896fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.76']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d603f76-78ec-4dc6-ae20-fc3aa91ce1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.78']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f39e9d-d2c0-4d30-936c-374449f9bf25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f2d060-dc38-4756-a369-63abafa21b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eebe466-9c6a-4025-a5b0-dc42eb8ba983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.82']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756cabf7-b24c-437b-bdb1-75045c648721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46874872-6258-4acd-8061-7d52146058c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.86']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6168ae40-dea9-40ba-8c08-c6a3c8dcb0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.88']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525e6339-a359-40b7-9b32-d1bc57a1e0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238a9542-941c-4505-9cd0-5dff23eb2eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b07ab0-3c01-4087-affe-3966d5d210d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d87e38c-436c-4ada-9b4d-0e8099eb948c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.147.30.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a405c07a-3e49-4414-9c3c-e81cabfb2b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.198.2.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cb2b54-cc7d-41d0-a56e-016bce0b6e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c0b8f0-a380-4acc-b828-b761204ebe99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f490b6e-d565-4ca5-8b26-e46bbd1ab7e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.106.22.57']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bd2a67-076a-4151-b21f-da09d7237473", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.144.61']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c4a6cf-d209-4b66-81c3-d0df726fdc14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.146.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd272a6-0d91-4537-8911-9552c9e43e0e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.168.43.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149b5804-169d-44bd-8d61-f9605146a6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.222.108.206']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e0e11d-86f4-4ca8-a11c-219ea3cb56ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5562cda0-a2b3-4e5d-8579-65751844b532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.165.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec6721a-84dc-4cbe-80c3-16afdf23e27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37a206c-b740-411c-a630-d58f9cf67a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c3b0b0-6925-4504-b39f-0c765160276f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8db73e2-2fdc-4b52-a8e7-b54ea285a785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7566baed-8d9e-46e5-a7a9-2d3bca0b7208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a3e17a-556e-4068-8bff-8359145ee02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04f2b31-1413-42d6-a6a8-e542af28f923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.36.162.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e57b67e-0e6d-409c-92c4-d51087deaa84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdb8f90-22fa-4b0d-af7d-48251225f28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7ff422-6e74-479c-ad31-df5951fe7e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edefcb3c-0342-4695-a8bb-87656ce66953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.138']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63b0af5-5d22-454b-8a49-1ff6ba1661db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.63.136']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c167629d-6eea-402e-ab3f-abbedced981f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.43.28.134']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255cf4ba-199b-4cd1-81d9-b13c91953c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.26.139.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c58f0b-5965-4c96-b491-df3a0ccf7ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.10']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2893299d-d5c5-4cc2-821a-bae53718e3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4688cbf8-35f5-4aa5-b612-192ed1876705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2011be92-f1ea-4761-bbee-53733475b717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.16']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707b5d87-eb21-490f-a40a-f1c64cd894d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f81aa7-7d08-4ece-a120-33a9467e8dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd0180b-b03c-4a91-a121-186c616e9540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbd1737-460c-4777-beaa-ea3f658481ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22538bbd-20e1-43d7-a6cf-f040486b1cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd78dc8-685b-46e7-830a-e7509e0feb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81c8eec-2829-4da8-890b-b3dafe8e7c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad640b0d-deda-4840-81ae-ceca325bbf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bd4b0e-159a-42ae-bc4e-11d08ad7b4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735dc7d3-64e1-4aea-8127-1ada61b3d1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2173b22-29e8-43d6-8400-2d1efbc5b79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eff44fd-236f-4e43-9697-63df29d6bbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0baf725-3b69-406a-9c44-57359591a1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cc018d-e229-442c-8473-c442a3cafcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e3446b-0d6e-49b1-a842-10307a21b124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.195']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1fd080-605a-4449-85d4-82360091d08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd230783-be53-4d8d-9448-dc8da39993ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.199']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074a777e-d24d-4e59-ab26-6afdcd72b0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc85ba96-996f-4b1a-b02e-bd13a381088c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9629f76c-29f0-4b6e-9bea-1ba6fd0be4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206c6dd7-0797-49a8-b963-91ebe5617453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a12bbc-15dd-43c2-8920-3b4a4990de0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8548735f-b43c-42e4-9e4c-91f952756b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01be3d32-a2ea-4a82-b74e-d7bf1b71c185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa6c2e2-6584-4d8a-941c-0e505109ffec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83997756-a66e-4ad1-a1ca-31737802ee9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b407d5f9-88cc-4c58-b270-5ac937af5993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907982e2-4765-4a35-b5e9-f70bf81bfb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2108d37-6a0a-4907-a433-0913f27378d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3be3c5d-1494-4adc-b1f2-8fdc30fafa7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5c396f-bec5-48dd-bf21-ca138a72a8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4623ca5-03d4-451c-b316-cb83020cda4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb92956-4001-4867-b063-158e8f914b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.247']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2f2ce2-59d5-495c-aef3-43cac7efd15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faac6572-53fc-4bfa-a803-a88ed439118f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aac4f66-de95-41a9-8483-18b9c6d54040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569e074a-a5c4-49da-9b38-3876bf00882f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d1c08c-c9fe-49cc-b245-c7b30a766e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cc1e1f-d101-42e2-beea-64dadfc03685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68091760-1ebb-414d-9c7e-2a34989c5c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19afaac5-48f8-4a9d-917b-345e50751507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.62']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f021ac3c-c5cb-4992-abda-c65fbbe38bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fce6a40-4087-44d1-8126-0ea7b103bc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb5f41c-22a9-40a7-86d0-857a61ff12d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.92']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cf0633-e34e-4a7c-9711-4ee84b0b8131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7689bce1-a4f9-4458-9baf-955c4fb2b1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ed9a52-a34e-477b-bad5-0d81f837d349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4340aaf8-f9f9-4d11-a3e7-98722ee058eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.122']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be540da7-f0a5-47c1-87cc-d296a6a77f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dc47fb-58ea-4703-96ff-0e8f17ea5a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.126']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54ed2b5-04b6-4864-a5c2-81971b7b4e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.14']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3dc71d-7f58-4758-a92d-65e666e59e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.154']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7618c0f2-2fdb-459f-a29d-9695d8269cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.156']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebc645b-428a-487b-8593-64b006f6e04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.167']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb4d59e-7e6f-40a9-965a-d83ad173bd84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108de48d-7bd4-49a2-85ba-f5dfb02d7be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.174']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f413d24-e53f-455c-881d-6c1a1aae4636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5400c92c-c34e-4baa-a85c-13dcfeb6d9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9729cd-b59a-4db4-a022-10e206f4f960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.190']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cab9121-56b9-49a3-83bb-21c2ef6ceed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89be5ad5-7ced-4113-823f-b155a204a135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.243']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7591db17-ace1-4d45-98f3-6d8ecd58207c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01470ab7-eaff-4a03-9fda-2419c60359b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.33']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2482ab71-3387-4dc7-b35d-f41e31563f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e103cacd-076e-499a-a221-ffc45b256c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.58']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f280a908-0f0b-4ec6-896e-8bbe8464cecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.64']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee7af58-5bad-45bb-8542-6387790575c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77977c1e-26a4-43c1-a7ae-1baca07ce77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3028a79e-2f87-42e9-9260-513df7c8fe06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebb6a70-3f33-4368-8c5c-9dc93824a6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.80']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461d8f6a-3f76-4441-ad27-3a1dbe71cc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f917da4b-5327-4b0f-991b-9f85394209bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43299c1-df7c-4c92-baf3-a916869b20fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.64.98']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23d1ad5-9714-4bde-8584-c181a31018c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4b92cd-9e97-41d5-bfe7-1141aa098bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fed765-385a-4b22-bd77-213e21ab6cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09e5fa6-738f-4dc9-a865-24df39dfd4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2492355f-9e9d-4953-9a90-e3b0b3c9e833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f87695-f704-4e54-b63f-72a38dd9874b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cfe7d1-b85a-4983-88a4-3cee9eaf9cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fb52e0-4d9c-4060-a9c8-37e39d02881e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce81541d-2edb-473b-87a2-dfe660975ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a103e60c-6e0d-47b1-aea1-8a5244785683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ab049c-8ef1-4148-abcd-fe5315da6224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94829347-8ac9-4d44-95c9-43011df88702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d3aea0-237b-4e45-b218-86687915ef3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30b2739-f136-488d-9c7b-088809ec5596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be3a238-bca7-4449-99e4-5334a5a0e52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9ad5e7-28a0-45b5-a2da-92dfbfe3a2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f62a10-2ef4-45b1-897b-ed9c0c1e954f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113fa90e-6927-4d83-bc23-b3b7448bfe5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c290273-784a-4190-96cf-054245f68455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2abe8c7-e39d-4770-ba12-eaa6258ce3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b44e251-1a97-4ee7-8f17-ea7d8b6e9f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301ea9c2-b95c-4379-85bc-cfa865d51fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f576d503-b279-4ef5-9352-29c043117ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f41e5a-32bd-4e9a-86a4-356f4d15c030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5f3caa-d9d2-4c4d-bc9d-35727d4b731a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d928ddb-823a-45fd-90ef-ee5286f138ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148ec25c-3e07-4cab-aa35-65ec14a7f165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2399e830-af4c-46c1-88f5-0d32ad527ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a45e546-74c6-4535-8684-e556fe8708cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aadcfa9-b7cb-49c9-8fb2-0908149b5496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b147cb-a17c-4465-9325-bc369af7cb6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39499bb8-a30e-4571-9dea-ddc17e6bf5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582a6ad5-06d7-44af-aa25-f8e60b2e27b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bceceb-7219-4b24-99b0-515904791d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a34c8f-5a3b-4fa6-9567-4769dcabf406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7538fcd2-c67d-4536-9222-1b0c63ca59f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7a8b15-a7bc-4d4f-b715-823c7f79cd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c32fdb0-cb8d-4787-8693-3c4703d8a4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ca05c2-b6e4-4e1c-ae97-cf9b2d164f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788bb80d-4193-4b9a-80a9-80f65ebf0440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e46fec-3def-4679-aaa9-7c227af6872e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57008ca9-2165-4d66-ad9c-2e39db9f3a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0afa875-f74a-4d1e-a30a-d5dee2fc1053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92997b5-8433-4318-8063-c110a62b9c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3f7aeb-c3ea-4267-a98c-1772055567d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e49d57-b2f1-439c-8f5b-f04dcfe6bee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a23e0f-0410-493b-ab66-efb56923a1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf8c861-bd26-4a7a-8d29-f0e570bb805f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd6dedd-8bf8-401c-bebd-c545d677d01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db280aaf-f3b7-4acd-bfb0-afa3ab0f37fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9757174b-abec-4ceb-b08a-4edbb301ecb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4458f8c-dc68-44e6-bdad-2fe013c7d9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b72019-ce79-4087-a563-8a9e2a859780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082ff954-4394-477b-852f-4066b3cfa259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd4a2c2-48d0-4eae-bade-abada54629d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32824ce-91c0-48fa-9ac2-7a1189e3296a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ee54e2-f989-4369-90ee-902336dd029d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14850ce2-53b9-4241-8171-7daf6d06e8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4031df-f0ae-4924-a8b5-f78c09030816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad963fa-4466-4914-b580-7f7463a0ce5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2298be06-a9ed-4bd5-ad8e-74aa752ba72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8a37b4-20fc-4bc1-97ec-daa4b790ba4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb206624-383d-4742-9917-31251b06c13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598ef574-eece-445f-b357-b33fb8a48176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87fab32-66f3-48d4-b764-a1ce546313c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff417671-1034-4881-a4ad-f0ec3832e797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567101e9-f6eb-45fd-ba4b-8e840d969626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5226948c-f1c8-4c44-8fd3-dc7f112197a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fddf3f9-df11-4bd9-985b-fbf35249b778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019f99a2-592a-48f1-8c4b-60ec9fd0d97a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2087dfe-7aec-4cdd-95fc-f31860e0631e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005f6d98-7249-438d-ade2-824ebaceb812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007cd391-0073-4e73-a563-cb988fe05c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b337aa-1b25-4654-a25c-130c23d010f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43ced57-f265-4ba0-9017-004df79c9d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f910fd1-0cce-4a11-9f36-3ad7f9b4d1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c72d14-83a5-425d-85d7-7ec5c9843a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd32e5ab-098b-414c-9646-c45074bf63fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72d87a2-ec44-45c2-bce7-ca18b1e31ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbfb17f-107b-4955-829f-798bedda4fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67367e34-03eb-4d36-851c-d752d27416dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb71ffb-7e02-4c91-8624-55970363e576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e491392f-c8a9-4538-b822-a3a3270efb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5120ed3e-5544-4098-a011-c01fb470d17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b27b62-1796-4a13-93b5-dbcd310f68a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949af46f-5718-4b3a-af74-8a53e7b8cfe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74220ff5-50d8-45f8-98b5-1e15f76fa938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188559d2-53f7-43a9-97ff-987b3c01e2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5652f9-9c8f-4458-9731-3bb1b622d01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074904dd-aa41-424c-9ff9-f4f23c85e886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c45b99-af5c-4204-9971-e7c75e6e4e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41ee733-1f74-47b5-b462-0ac6b70f3466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edef0ff2-4cba-4703-9585-32ea51e967ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be69df1d-1aa1-4a61-ad3a-200028c543f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1d06eb-44da-469c-97c7-94d819998cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb60ea6-ab85-45bc-9bfd-735b9fb4c6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f694dbb1-100a-4702-a7e4-7c626366fd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c261195e-70a4-431c-9166-6eaf1ab60497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018383a1-9173-4841-815d-12432a45d1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48f7387-66c0-4574-ba72-274293490310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd7218d-2e48-43df-82f5-b56560d0b125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9d87ae-33f5-41ef-a5d5-fbd60db0a1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37792c8d-3d18-48b6-a2a1-0f797d6029fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7132e1f6-8415-4de5-a98a-d201e99c250c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d645022-bcd8-42f0-bbe7-c0556a56dfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4803be-5764-49c6-915d-04d2d9d937ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad97db1-9d2b-4031-824c-b5dcbdc6d5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a62840-dae2-4bc9-8648-807af1b7f44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031fc9c2-568c-4047-b999-91f6865b24a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5effe2-5dab-4d3a-914a-fd10a875cfdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d9751b-8ceb-4c12-bd78-3bc4e9de6785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1bc2da-9e56-4d5c-bfd6-c9d5b3e0a8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce8c9d0-8a75-4f31-a05f-f607616adb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4929b296-c3ba-4028-b515-21db1e19ee4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3119312f-bc4b-4114-b943-01181203fd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e72f37-ea73-49ec-8967-0fd2f45b2f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb69e85-3b8f-45c6-9e6c-45cbd1c1ce99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babfbda7-26df-4207-a5ae-ea2ce29cd057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3858b3f-5654-4a5b-8b76-ceef92707ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b615da7c-755b-49dd-a4f2-f140f9a64dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedfaad4-6472-45ca-b3d0-c260e85d7a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d431f3-ac8f-4b0d-8f22-2c605acc7555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62360212-55c5-43a5-93d0-59183c1989bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68f15ef-3353-440d-9c9b-fee607b1c461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.241.135.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff63370-9ef9-48ea-8344-702aa0af1e98", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.245.121.46']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1d19f5-6fdb-4746-b87f-92030bf214e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f07ad9-d7d7-47df-bbf6-d92f404580f1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.19']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af532505-6a6d-4c4b-b3b4-e17e27626282", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.27']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1353e6d0-eafe-4b4a-9827-b065a4e482c0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.31']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4408fed-fcd1-4497-b98f-3006853c4598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.8']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f4a914-69cc-40a2-86fa-ca8c18701524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2831d44-a510-492b-88b4-d4f96e704299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.43.121']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268df80e-0680-4643-a5cb-695ba22e5605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.152']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8b87fb-e117-4e87-ba2f-59ac29827479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.252']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f88725-161f-40ad-8f77-fdefc5083748", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.53']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edc604f-094a-4b35-9880-0b13d2383703", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.49']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd754df-bcd1-43f4-8fe6-f8819fcdc0a1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.50']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a93bb1c-cdd4-4561-a5e2-759da7fa6080", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.71']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02803155-8729-4ee4-9a9d-4ec7be906c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c84328a-19ce-4b9b-b8e1-9f967f8eed45", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55d1dd3-c9f3-44ff-b7d1-7e7a77773ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f64851-3acb-4dae-9d6b-161054d79d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.119.165.96']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f1929a-36df-4b68-b0fd-afac09680267", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.128.28']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34e7ff4-7e5b-4de7-8d57-24ddf4877005", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.218.122.20']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd61302-26f8-4806-94b8-9ee94037839f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.240.218.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddae222-f413-468d-b69f-5ba1058a4451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.248.174.179']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59a5726-677a-4230-a5f4-47f904a0ef80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cd0969-e910-4514-a540-a44a66ed7506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2002-1149. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.228']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcbbaa99-fc7a-4ca3-aa33-23336d7a876e", "relationship_type": "indicates", "source_ref": "indicator--91cd0969-e910-4514-a540-a44a66ed7506", "target_ref": "vulnerability--8c2d939e-e4ae-4ad7-8b59-9e6939f117d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a855330-5e21-40e2-87e3-1d6844a3e0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b786ce4-62b3-43b2-baea-130a5c367379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.224.9']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a6c8c3-88fc-4635-9809-ad05c451d464", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.159.230.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70e6063-ba49-4111-9632-8f514e5676ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.170.189.132']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70a7b98-bb60-431b-bd38-381b67c7a07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2badff1b-c7ae-4c26-b298-d434187428c5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e815767-8b0f-4538-b1ca-5ba3d2156488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.90.41.12']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9df90fa-5664-40aa-b5ee-e7576512dfca", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.155']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f556c4d-fbd9-472c-8552-54bd82a4bf3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bf442e-6b53-4ee7-b5be-35917fb10b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb37972b-af9e-438d-ae8f-69c675cf6669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.104']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8083fb3b-895c-4efd-8176-106ae25f1c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37497a0-c0aa-432d-a106-19bfb59efb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.197']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd4e440-4be1-44a5-bc3b-b971d497cb44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca884e8-d7e8-4bb3-a362-7d6f3395697c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.214']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4890051-2fd5-4eb2-96fc-ca6c41353920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.249']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0640796-0490-4289-ae8c-a9579381dd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179c8ef9-7a49-40b8-8447-eefbb3447efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.254']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bc9d5f-68e2-4ddb-b24e-de7b83b638c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.34']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76342270-b900-42c4-b73d-2a6ac9b2a960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270927ab-26cb-43f1-bb61-6aabff3f9f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2e85c3-99cf-49ba-9c8a-a077961b3338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd76f27-53f8-4c87-aff8-8c5d391a43f7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.56']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b3034a-11bd-4665-b08f-aa7255d8fd98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.68']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568c79de-f3a4-401f-b730-6f4023e987d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.70']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75372360-a4c2-458f-86f3-c981d519e225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.87']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb30cdf-aa2b-4024-9e00-93d81fa38ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.166.84']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a786c30c-929e-49bf-bd06-8d21931b3c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.105.176']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf59df05-c44e-45f7-9147-32944061874c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53611c0-4e78-4d59-aca8-d80d7d2a49ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.230.135.5']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93783ec-7107-422c-9aff-8c30b231c9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be52e3c9-2916-43f5-ab55-0e78bbad2d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d271af-26ea-43b4-ab20-7c7f7bfefacf", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.240.163.204']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc72941-9cfe-4913-9d89-f7acababcfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.43.162.100']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ecd907-f812-4dc4-836f-5d05fc844c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.98.47.85']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87eda92-1a61-4779-a36f-0cb76a939a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.105.67.216']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be557038-6942-4c09-81ea-955cb0bb7ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.142.115.140']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1331297a-95f8-4a5d-98b8-1ea36d4a07a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.151.133']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e960e0-2096-4d1c-b699-0fe9c8f45ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.151.24']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a28196a-42d1-44e3-9d86-3776e9258b42", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.173.161.147']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5955750-62e9-41eb-8304-cb5a17342081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.173.207.168']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380f1397-2797-4b72-a1b7-fac05b35e45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.173.207.170']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ba445b-2576-4052-941d-d3b538d580d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.181.232.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddde2d9-d8d1-4dfc-9540-a23abe334983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0bb7f2-302f-47a9-aef2-3ef4a4cb8ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.55.77']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0616493c-cb8b-4044-8c44-51b197575fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0479f047-74b2-485d-9db9-ab7059d2c3df", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.25.151.198']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2085040-a32f-4742-a301-f4ebc5ee845f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.46.8.193']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe96f30-ae41-4078-9eea-d783f4be2204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.66']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5163d6f-5a91-459e-990f-a49c4fcf63a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.144']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30def6f-e237-4adf-b356-6d7cfdb4fd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.51']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e06e37-4c05-48b3-bf2a-44158586007a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.84.78.242']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38983f5-59bc-45d4-8e36-6eb3433a189b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.115']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d23713-ff0d-4d85-8cb9-ae8b4e0a0ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e83913-99ad-486b-9ba0-0dea091b9dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.250']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab84598-ebc0-4699-be37-020786521301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5aafd4b-1e98-4d0e-a70a-e6ca4a92db99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.230.245']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0679d1-b89a-4156-adce-270a776d8322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.94.253.235']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90f6359-0595-4d7a-9077-6ac1de9d3699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.249.112.236']", "pattern_type": "stix", "valid_from": "2026-08-19T00:00:00.000Z", "valid_until": "2026-09-18T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-19-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c779ce2-91da-45b7-af81-d289a8b5acf0", "sighting_of_ref": "indicator--2f1259d7-1a05-4142-b89f-4bfef815d10f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e9046a-d828-492f-bca9-088d7720293f", "sighting_of_ref": "indicator--08a158f8-0085-4d8a-966d-74d3e58a0ec9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cea6f7-f506-4668-8bb9-5547d56225d3", "sighting_of_ref": "indicator--c22489b5-2f68-4883-998f-c572be158c22", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c51d0a8-f232-4aa1-a7f1-bd2a841c2c18", "sighting_of_ref": "indicator--df9621e4-00ee-4855-bb51-7ef7d8f6301c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2771321b-bf69-4e24-8aea-14536f1b6e26", "sighting_of_ref": "indicator--046c0794-ae59-43fd-88e9-0ba4b365819f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e21ea54-7f9b-4c6c-b0ee-6a868c058db1", "sighting_of_ref": "indicator--3fa58be2-7731-4c1c-92e6-a2954a386d47", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e65edd-a817-4501-84c9-c7f76f7158d9", "sighting_of_ref": "indicator--56864b3c-9cec-4b1b-8629-7b9608601bfb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa42484-22e1-4fb1-983d-8e8907fff671", "sighting_of_ref": "indicator--7ebc2b4b-581c-4c21-9d74-fa6c6e87b67b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678ccd52-f798-44ec-9bdb-632792221f53", "sighting_of_ref": "indicator--95458625-99c1-4ef3-8bc8-0259b45cb77e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07df62cf-92d2-43a5-8ee7-c90a91f37c1d", "sighting_of_ref": "indicator--46576548-5a4c-40ae-8e98-8ff910a26057", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aad31dd-9582-4e57-911b-61bd1b770f62", "sighting_of_ref": "indicator--bb562c24-bd5c-4f62-88c7-db4cd186be0a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4927e91-1912-4c66-8b76-3ef57f88b43a", "sighting_of_ref": "indicator--e8607422-a037-419c-b476-3c63495ea241", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940cf50f-b88f-4a35-ba78-06fa5ccdeefe", "sighting_of_ref": "indicator--3991b05c-c216-4b42-98a3-b9630fbc17a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489ed39c-2a4c-4df8-a5fd-77b89a1d4218", "sighting_of_ref": "indicator--3274e6f7-50fc-4cf7-a9a2-61b3ed742d0f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d7d44c-2491-40e7-8dc0-3354db55624d", "sighting_of_ref": "indicator--c2fe90d5-c047-4ef4-82b8-b3d47caab9b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b07880b-8e4e-4502-bbdd-781975a08523", "sighting_of_ref": "indicator--e821c81e-a753-447a-8e6c-2599f402233a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0346d998-d1da-4b12-b957-72648baa9e5e", "sighting_of_ref": "indicator--884ca849-2a5f-4116-88be-abe9955a3a18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dedb238-2c3c-40e7-aa5d-e39e48d0c276", "sighting_of_ref": "indicator--6dc5a008-dac9-40e7-a7a3-493e8b6a5bd8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18a17f7-90ad-4f03-9c2c-32edb30f8fc4", "sighting_of_ref": "indicator--a4a8f209-e0a3-4b5c-8931-a980107dd695", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4f22eb-b2a9-4a58-9b7e-10923509159c", "sighting_of_ref": "indicator--2d4b4559-17fb-4102-a7fe-e8123c40f681", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb91a62-bd2f-436c-8063-3ce5e1193346", "sighting_of_ref": "indicator--59d1af7f-4e68-4e76-a72e-b131fc188535", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba760b7-a221-437d-b2f5-92d1306bbcdc", "sighting_of_ref": "indicator--995924a8-a8a3-4f12-8161-ebdfc6f44cf5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142d2f34-e0cb-4c65-a6eb-f4f9fde21968", "sighting_of_ref": "indicator--90fd6fea-2591-41fa-aa85-0ece203a309f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039f70f6-245b-47a1-a657-dba12908e20f", "sighting_of_ref": "indicator--4b85869e-a26f-4034-9ccc-c0155a38db9c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ab5103-f823-46d5-830f-2ebca023b9b7", "sighting_of_ref": "indicator--53f305f3-e0d2-4583-87ba-16ec24f01ce7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efee288f-da77-43f9-ae40-eaea64be2699", "sighting_of_ref": "indicator--e26f79ed-c04f-4e62-b849-968c3ec4e015", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e854dc-89ce-479d-bdef-60460bf89d0b", "sighting_of_ref": "indicator--6185364f-cadb-40b1-b109-1bb8717ac2a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d19ec4f-b3c9-4baf-a513-a5758f538adf", "sighting_of_ref": "indicator--2f3d74e4-1a51-4256-839c-035e72e98494", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3938ce-4a80-4f72-b03d-c86ee442c377", "sighting_of_ref": "indicator--b06a8888-d0e7-453b-9f9b-3a944755ab73", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15fa5dd-9724-4d86-9103-743efd0ab8b0", "sighting_of_ref": "indicator--6918e289-b991-43bd-9659-8602fab32355", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5823245f-e2cf-4745-af54-37946d75ae03", "sighting_of_ref": "indicator--83cfb5f8-44b8-45ff-b2b0-3d78c492514e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fb3385-8f55-4182-a2ae-8d4a6dbdb869", "sighting_of_ref": "indicator--04bfd4ee-a15a-421a-a3d3-21bde3bf73db", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d0ef20-81f3-4562-aee0-9e428996f071", "sighting_of_ref": "indicator--113c62ed-8510-431b-bacf-b1379acf77af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3491169f-b643-4fc0-a963-ac8696a74c69", "sighting_of_ref": "indicator--8d17d113-a175-477b-a9dc-c0a19231e5af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031a3a18-5cd0-4c4b-92e6-82c3aef1553d", "sighting_of_ref": "indicator--422ed32b-d43b-4247-9730-0e549a5c31d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701c3a63-9d8c-4713-bd43-f7a419bef72e", "sighting_of_ref": "indicator--9f719712-8091-480a-a46e-878be9e1db7d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67aaf309-9988-436f-bb7f-6b7f7c2d241f", "sighting_of_ref": "indicator--4aa55f27-3b80-4bef-9042-9d7bad645e49", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421b3825-12ad-4064-8b3f-39d420c65242", "sighting_of_ref": "indicator--73fe32db-4d90-4e10-a7bf-6f35db83a2a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cf3120-1efe-4042-9526-02576475ebde", "sighting_of_ref": "indicator--4eac0fac-a836-45e8-87c8-5ed1efe3b194", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9395de-61f4-4f14-8464-a0a50ea43f9b", "sighting_of_ref": "indicator--a57fee29-f5e1-4995-952f-a8ddd8141268", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7def0c52-8a0a-4212-9e88-505eff63c23a", "sighting_of_ref": "indicator--5133f952-0f4f-4c07-9909-380a41521d03", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46fc967-18a2-47ad-b900-d0df9bc6e565", "sighting_of_ref": "indicator--eba8a06c-7227-43d8-a720-fc32c75f0fcd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4424c3f-1a64-4015-9f53-7d58e6cfcf45", "sighting_of_ref": "indicator--f8a98d2c-cada-4089-8317-8e3fcf3e7b00", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03cd8c6-06b2-49b4-ab13-eaaf8d1681a5", "sighting_of_ref": "indicator--bd0dac5f-e600-413b-92f1-a59d82669e09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf2ddf1-f707-46a7-80b3-4b2a907e3871", "sighting_of_ref": "indicator--8d819562-94e2-49b1-aef4-a71c6c3734ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b8f937-0e8b-49b7-99f4-b32be2900a2e", "sighting_of_ref": "indicator--2b342059-1c15-4879-97da-7a6c8e9b8106", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0f0a89-bba8-4f70-a707-51eac62fef4b", "sighting_of_ref": "indicator--9af87cae-bdeb-489e-ac40-f6f5c8fef9c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f79febb-9946-4343-9384-189a8000bab6", "sighting_of_ref": "indicator--a9cae339-9295-47f7-a938-41fff87b9aea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8633dc55-6054-4211-b2cd-1d4c12fe6094", "sighting_of_ref": "indicator--20dd0d35-4513-4af1-a7ea-b268d69c09c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8853a9d3-68cd-4a4f-9563-74f5f9b9d403", "sighting_of_ref": "indicator--77354c84-39ca-4ef0-9364-c17636674d9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4c0195-d0d7-402f-98c6-adb00bd1a5c4", "sighting_of_ref": "indicator--bf74edbf-8e6b-4063-a88e-3367a7b485d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dd848e-e9bf-40e9-ada2-9a73d54f64a6", "sighting_of_ref": "indicator--5d7cd92b-a414-4c09-af16-2bc7a8ed8f45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056670c0-0c42-4546-a034-3256780851f5", "sighting_of_ref": "indicator--b9941a39-67a7-43e2-9ec2-fc4f1bd1cd13", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e54319-8d52-48ed-ac73-0ce225cadfd1", "sighting_of_ref": "indicator--762befbb-ae3a-4496-9ee7-2e3d32fd00e4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891b4b22-72dc-485f-803c-da5b1cc283f8", "sighting_of_ref": "indicator--3f37f5a3-f861-4234-a86e-ad4412fe4566", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78589234-3002-4c3e-b1ae-281f12fdfbb9", "sighting_of_ref": "indicator--3dddac59-ab39-4b65-9e73-e6708eb7eabd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e84adda-a81d-4843-9c20-4eb176fd4146", "sighting_of_ref": "indicator--54f3ed77-b5e4-4e3c-9ad7-ba57593e6fd8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebab528-5e1b-484d-87a7-72bcd6c27cca", "sighting_of_ref": "indicator--21aed8c0-e838-4e37-b232-2cd27e0b5a18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedbee0c-720f-4d64-bf68-3058de814aff", "sighting_of_ref": "indicator--c724fb31-8947-4a24-9d93-886e54ace812", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381e32a8-47aa-480f-acc4-b83eb9ea0548", "sighting_of_ref": "indicator--147727a6-13f1-46f6-a445-90214e3560fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab4bbe3-5ba5-4979-a020-c8517170cb15", "sighting_of_ref": "indicator--705dd12f-993e-444c-a524-8e208dad5037", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf441de-d3e7-4931-822d-96940891bdc2", "sighting_of_ref": "indicator--5c4ebd9b-b4d6-4362-829c-c921f80daf4e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c037936b-dc66-4185-97ab-ff1c34054176", "sighting_of_ref": "indicator--3eef4767-f418-4e44-b654-5aa2ffdb2d7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fa24aa-29e1-4b79-a163-abe5275ead2b", "sighting_of_ref": "indicator--962d0840-234a-4830-9956-6a6b8cd9201f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5c1ee2-49fc-4729-ad4e-1573cafdaf5c", "sighting_of_ref": "indicator--bc32f053-3338-4fd3-afe5-a6f68cf9100a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f86a3a-e950-41de-987a-0b8f7bdfea85", "sighting_of_ref": "indicator--efd423df-2501-46c5-bcde-5718612b3370", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de297947-2924-4db8-ae0f-38e70b0fba8e", "sighting_of_ref": "indicator--a67e8698-b3ee-421a-a4a7-b06680f11d8e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479ba20e-3f63-4ba9-a30e-7e25c23fb8f1", "sighting_of_ref": "indicator--2c1291f6-4dac-4e9a-9e79-e238eab13f14", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fcbe9b-69bb-4687-b246-24687eed3ba5", "sighting_of_ref": "indicator--80a610f1-0845-4a18-ac25-6bed5e14367e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c0fadf-9a68-4124-ba35-d0f0818b589a", "sighting_of_ref": "indicator--dbae2f36-a33f-49e1-9471-ffe7ed10bfef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5334f94-0506-4f07-8531-347f7d255c9f", "sighting_of_ref": "indicator--8e8a1ceb-c503-41cb-9a13-2bc97e173c10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9671022e-2a84-415e-bc5f-a863e6673d12", "sighting_of_ref": "indicator--3e45fe1c-2edf-46b8-bf1e-b32eae8a447d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c44811-22b7-4448-a737-c9ae9b6e2f81", "sighting_of_ref": "indicator--14bc7477-fc17-437a-9bae-32ab9cf5c8ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95a7641-7c27-4575-a39f-df8d9af51d54", "sighting_of_ref": "indicator--3f163b5a-b253-4758-93c6-7a7a84a87a3d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461b2c14-e040-4c5b-881c-41bfa6e49c25", "sighting_of_ref": "indicator--e396d53d-9119-4005-96f9-6fbc7b41bc46", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0439babf-070e-4421-b60b-b5058ed318ce", "sighting_of_ref": "indicator--7f9e3f79-4506-491c-965d-171f0d1cf47d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fa1f4b-87c6-48f0-b287-22d6067ff49c", "sighting_of_ref": "indicator--7f9e3f79-4506-491c-965d-171f0d1cf47d", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435ba039-efb5-49e0-8dfd-55ab84dbb436", "sighting_of_ref": "indicator--7f9e3f79-4506-491c-965d-171f0d1cf47d", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2079ba-acda-4eb5-b218-4c4f5ace6cbb", "sighting_of_ref": "indicator--4a1fe69a-045d-49fa-b18a-8e59c85bbda0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b970f84-59ca-40b5-b373-8d23219830ed", "sighting_of_ref": "indicator--72575f8a-f69a-4f95-b3bd-5162e07f4784", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60e8b6b-995f-4e41-a98c-afd85cb91cb9", "sighting_of_ref": "indicator--2b98be49-0bb9-49a7-ba76-97f05b4071ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240ec875-176a-42a0-b7ef-61e3c1c3d01a", "sighting_of_ref": "indicator--3015990f-090d-4899-add5-514c958aa34a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4011efbf-6659-40a5-9490-bdf8c71c982d", "sighting_of_ref": "indicator--aa7ff968-0a9d-424a-bdd5-ee7135487fb4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542793b4-75de-4c53-ad82-7d517524f867", "sighting_of_ref": "indicator--17af217d-f113-4656-afa8-d41548e7aed8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c5eefc-7d54-434f-af48-6009bd501096", "sighting_of_ref": "indicator--b48ce318-f3dc-4eb2-b03f-4b4f836567b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c1c6ef-0b7f-4136-af44-cae852858b0b", "sighting_of_ref": "indicator--9cffa435-8f1b-4e22-8a5f-e89e2e479a14", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4375f85d-60a0-456c-8d14-672437ddac4e", "sighting_of_ref": "indicator--77e8c10a-a274-4134-89aa-a86e0dd0f825", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f036c34-c5aa-4cc1-b1d0-d86f45488670", "sighting_of_ref": "indicator--43c2bb83-ee25-4b97-ba1d-07126f7efd0d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d8ce7a-96fb-4631-9b3c-26efe356bd3e", "sighting_of_ref": "indicator--254c66fb-c493-452c-83cb-81da5e22d0ed", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107b178b-83a9-475e-a0c5-eadf0bac185f", "sighting_of_ref": "indicator--2c9844a3-45dc-4ea6-b92f-ff556551d57f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7677beb2-d038-4270-a00e-dff8ebb3ace4", "sighting_of_ref": "indicator--31bc600e-bc52-4342-abfb-62deab9f7531", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1981eaed-2079-4c44-9ba1-611bb7cd9ab6", "sighting_of_ref": "indicator--31bc600e-bc52-4342-abfb-62deab9f7531", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1782dba7-8877-4b9e-b282-af5426e9d38e", "sighting_of_ref": "indicator--31bc600e-bc52-4342-abfb-62deab9f7531", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0be6fc-69a8-4a30-82aa-d3c3da1bcfd1", "sighting_of_ref": "indicator--3887c11b-f9c4-43cd-8669-5adbd1a4fd51", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d055a4-6aaa-4085-827e-f3e0b09f7aab", "sighting_of_ref": "indicator--a18c3736-18a6-4c69-9f96-c40f62ec0452", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdf6d2f-f5e8-4b9e-943d-0d47bf635a06", "sighting_of_ref": "indicator--51197019-e762-40ae-9dca-d4a5dd486725", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888f7920-6b5b-4fb4-867e-2f2514391991", "sighting_of_ref": "indicator--f5516521-dffb-4cd7-ab20-27c354f3444e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78178ce5-432b-4ace-9a00-d990be5cfaba", "sighting_of_ref": "indicator--1a6f6852-851b-4f0c-8e79-e4611d42fc8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fb8653-e801-46a3-9716-61736b7666cb", "sighting_of_ref": "indicator--4240ad55-874f-430e-84ea-0e0fcff05a33", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8259656-f68f-4358-9627-79862f1415d8", "sighting_of_ref": "indicator--6058154e-3a99-4706-b970-5ca2fdae5103", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3846287a-4862-467d-ae8a-10262c2533bb", "sighting_of_ref": "indicator--6058154e-3a99-4706-b970-5ca2fdae5103", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df882acd-7c06-4431-850f-bd8e88b7f45f", "sighting_of_ref": "indicator--6058154e-3a99-4706-b970-5ca2fdae5103", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4339e0-175d-463d-b452-70d545177064", "sighting_of_ref": "indicator--ada97d82-2f77-4080-aee3-ee7693df7960", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731f1b79-562f-4644-ba6e-d2cd7d77b109", "sighting_of_ref": "indicator--84695f5c-b425-4e43-a91b-40df3928381d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5903f141-db72-43de-8a3f-6075d3c6811d", "sighting_of_ref": "indicator--c0217057-0898-45f7-a438-b3842000f2bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cff3bed-e9b5-4dcb-89e5-6e650ade1367", "sighting_of_ref": "indicator--da546ec3-cda3-444f-acd0-1a6e8d92bed2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d09aee1-9935-454c-95b9-7a710eddf730", "sighting_of_ref": "indicator--da546ec3-cda3-444f-acd0-1a6e8d92bed2", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d6ecd8-d5ea-4b8a-bb4a-f077322029ae", "sighting_of_ref": "indicator--30e7ec6d-d4d6-40f7-bb8f-0501ae0f01ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba9e640-a437-4697-90e5-40f7ef341ef3", "sighting_of_ref": "indicator--22448901-1c64-4e21-8539-01365a239727", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430719ae-7f2d-46e3-b8b9-cab45d564f8c", "sighting_of_ref": "indicator--5a287d28-6d90-462c-9f00-c964ad9f37a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2346ef-b524-45e8-83c2-4db20ae94f3b", "sighting_of_ref": "indicator--beaf69aa-2f57-4288-a81e-320a0518643b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698c9120-96c1-4bda-ac48-3d5161c07ee7", "sighting_of_ref": "indicator--f141e533-68fc-47aa-bf9e-b3030428afce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0a251b-8061-4068-9c45-5a2a7b17c467", "sighting_of_ref": "indicator--e9825d7e-973c-48b1-a6f0-35a45f98a1ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23a0352-85a6-43f4-aece-269965480298", "sighting_of_ref": "indicator--10687f5e-fcd4-44bc-ad27-8e53ab32d6c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f50a01-c32f-4020-94a2-2ca3ca6e6d3c", "sighting_of_ref": "indicator--283fded1-7804-4d89-a017-40602b03d9b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16103399-f622-43e4-b83b-6d785ed43590", "sighting_of_ref": "indicator--201da164-9d0f-4069-a30f-19df7ee275b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c017f939-d2d9-46bc-8efe-68cfba3b440c", "sighting_of_ref": "indicator--aecb89d2-94b8-4953-ab29-e273a87517f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c39572-82a4-4a9c-9ed0-6730cdd78085", "sighting_of_ref": "indicator--21396f7d-ef09-49dd-acb4-9ffa3feb4412", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8348c7a-30f5-4d27-a9ed-ab7a4160e5f2", "sighting_of_ref": "indicator--be2bf043-1e22-4cef-8da0-15b41a820091", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae70edf-0d30-460d-876d-167a2dcf1355", "sighting_of_ref": "indicator--64f68de9-ef41-4b83-80ed-b72a4907d34d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4193acd9-619e-48a3-a315-9fde171370db", "sighting_of_ref": "indicator--69263597-611e-479c-81bd-365333ed045f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efd0a29-3e73-488c-ae87-3e5659973d57", "sighting_of_ref": "indicator--41b709c9-4598-4b4a-85d9-1207244f9c49", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ed2ec4-0864-413a-a696-1c3408790d11", "sighting_of_ref": "indicator--59432d2f-9a31-4f98-b113-0120d8ddcaa5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bff145e-b1b8-4ada-8f33-8c905463367d", "sighting_of_ref": "indicator--a3ce4888-6266-4bf5-a5a3-e2760629c136", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9a2a0b-9a61-4614-8057-edfe94de4dea", "sighting_of_ref": "indicator--cb5fa590-7bd5-4fcd-a189-060daef9da18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9111f4-ff87-4090-aedf-c7416a42c8f8", "sighting_of_ref": "indicator--7e53f378-36e7-4e6a-8e48-a90fed1e3f06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad19dd82-63fe-498e-b5ef-24643b1b7fe1", "sighting_of_ref": "indicator--21e3119c-3fe9-4c8d-8df4-bb95290d006f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b32c1a8-1847-4a5d-950f-803c0014d811", "sighting_of_ref": "indicator--db4aa473-d1cf-4f12-ab35-cccd19ae69ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4666dbe1-9000-49b0-bd92-0f0d8593b609", "sighting_of_ref": "indicator--fb880761-7777-4d55-978b-d30e67dbcdd2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c1291c-a0a1-4f94-a117-fb8dfb182276", "sighting_of_ref": "indicator--8f5f0d5e-3c82-4fcf-b93e-c6607328128b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab00415-92be-4e65-9734-2941232f5f6d", "sighting_of_ref": "indicator--44fddf0d-f7cb-406f-b3b8-65ab03cedcc7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425bcd77-8358-427d-8352-cc2c188e1b4a", "sighting_of_ref": "indicator--e069b92c-e6db-49bd-a3b2-6854a235ccd8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a497760a-f0bd-45a0-8e61-491ba4aa3c51", "sighting_of_ref": "indicator--6c5a0ad0-561d-4630-9b1d-ce81b61691f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7822dd35-05e2-40de-a2c2-9e757c3d4ac1", "sighting_of_ref": "indicator--991e6786-12d5-45ec-9292-96e0bb267032", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e94d0a-fb74-46a8-a710-4511efe2018b", "sighting_of_ref": "indicator--20864bff-6e11-4b0f-bd06-3d11d51816da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4fedfb-d4fd-4d6c-a843-31ac8de4ebfb", "sighting_of_ref": "indicator--edbde90a-e92f-4104-8914-8801acd75061", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53630aba-fa94-477e-8092-e6ec01a2a6c1", "sighting_of_ref": "indicator--8a397a1c-2698-42fe-9be9-7145a2120648", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b017a66-3d52-45be-9e41-62d18f5faaa0", "sighting_of_ref": "indicator--24b317aa-8128-4df8-a99f-d5350e7552ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f169288-12cb-4348-aa67-f81294a75291", "sighting_of_ref": "indicator--8ac8d89c-6be3-4852-a603-27e5c2df23d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbf740a-15e6-43fe-bf7c-3a90f53c6f46", "sighting_of_ref": "indicator--52a3859b-a377-4e8f-8e62-18e58e3aa564", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9ca3c5-754e-4074-bb7f-ca8f383f95bf", "sighting_of_ref": "indicator--8a821cbd-b776-4757-94bb-a371fc467ff3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c15b447-c5c0-4565-9c8e-28798148642f", "sighting_of_ref": "indicator--5dd0bce4-c265-4fb0-ab4a-c576ddcf2a24", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732c44ba-e20f-431e-b833-1c3319317373", "sighting_of_ref": "indicator--e7519d6a-9792-4d12-89b7-ffeb959855b1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db1066d-67af-4069-a496-fa8f054174f8", "sighting_of_ref": "indicator--62200ae5-2157-44d7-a308-46c61ff1f26e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d8fbd7-d410-40bb-bd5c-0c19639b61e0", "sighting_of_ref": "indicator--8606444e-efb8-419c-8d97-ec8f00e35111", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c33b2f-1af1-4caa-a1c7-5085b43467c8", "sighting_of_ref": "indicator--8019eb52-a81a-4fb3-bbba-10f8ef2d2007", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c97a7d-ab09-44e3-92e3-de928a7e99f7", "sighting_of_ref": "indicator--76d0b9a4-6319-4be2-a827-2b6ad4c916e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccc4d42-e2c2-4b4c-be6d-7414705c673a", "sighting_of_ref": "indicator--f80b1676-3d0b-407d-86ed-428e813aea06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28221b89-0ed2-4cc6-a7d4-17176b30a913", "sighting_of_ref": "indicator--7cbe4e95-6b23-4ae4-88c9-88bc155bac6e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118e5f71-27d9-4f2e-b4c4-529e75c03657", "sighting_of_ref": "indicator--d9b771eb-abfb-4b0c-aff5-cd48243051b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c433839-6dc9-42c8-ac07-30eed500d462", "sighting_of_ref": "indicator--3c61b57b-0e86-4e51-8789-48afb065d7e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d734df-4535-4866-b72f-1e1452771354", "sighting_of_ref": "indicator--9828d870-8732-40ed-874b-5831ed276b2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b552fef-90e1-44ff-8de0-1b08a5a2e509", "sighting_of_ref": "indicator--b6369050-71c7-42c9-bfe9-2ea242fa6400", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2466f3cb-04d9-4eca-8312-51c83d4f4898", "sighting_of_ref": "indicator--8d0ae921-dccc-48ff-a970-9ab048cb1438", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914c1e76-289a-4231-8c7e-53102b8db1c6", "sighting_of_ref": "indicator--3009d6b9-2ac9-4cb3-8274-22e276cec960", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561be183-f06b-4e7a-a520-c42a79773aee", "sighting_of_ref": "indicator--a96f089e-e080-4ef7-a60f-7329aca1c554", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1c4f73-cce3-4ac8-96b3-ca9f095bc919", "sighting_of_ref": "indicator--22f61e18-3798-4143-bf94-2d8bf8eb917b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a9a562-64a1-4594-aa28-96a82cbb5ea4", "sighting_of_ref": "indicator--90a61fab-3d87-43b6-a809-50d539e6b439", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8463b1df-2702-4d77-b6e9-59959a562c3e", "sighting_of_ref": "indicator--bab7989f-9768-4e02-8067-8c3de5442e4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a88d45-5246-479a-af55-55dd5373b7f4", "sighting_of_ref": "indicator--a62d2242-38d4-482c-bf96-afe7dbb41887", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0f22ee-ef48-460f-99ca-ef6bcf808640", "sighting_of_ref": "indicator--5ac2eba4-51ed-435f-b4a4-1c2539d375b2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aeabb85-58d7-47ec-9c75-48d73e3bcf80", "sighting_of_ref": "indicator--1f9313e3-fe41-499e-b8f0-be6f80d54ee8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368cd4ac-9315-4683-8c0c-1e806aac14a9", "sighting_of_ref": "indicator--0c7a9edf-34f1-486c-b44d-cc1f89ba9286", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d7563c-aaf9-4845-acad-7ac4d42e6bb8", "sighting_of_ref": "indicator--f7a488ca-4209-466f-8207-d9148cde2f87", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c206d2-9851-456e-8aaf-644c3a00b067", "sighting_of_ref": "indicator--d0bfd431-2815-4c11-8103-485d3598d59c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e42495-a362-4924-8a47-e772883d6a4b", "sighting_of_ref": "indicator--3bce2465-39c0-4955-86cb-927e0639e608", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac5ed09-ad3a-418a-8677-98ed0b587a23", "sighting_of_ref": "indicator--09dcaa1b-c6c4-4a25-ad00-65c639a8b732", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9803c9f6-0596-4c2e-a10b-907017b9e101", "sighting_of_ref": "indicator--712de9ae-e291-4f88-9098-05938130b53f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd6dd7d-d9d2-4bb6-aeb9-1b3eceeed357", "sighting_of_ref": "indicator--776ee932-fc57-49bc-83d6-a64d50a85ed8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182d0198-4cde-4df3-b551-1dd0d92b427d", "sighting_of_ref": "indicator--3edd1a94-f88b-41ab-a39c-9224f68448fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d87ffc-0316-474a-8f33-466455ee1af7", "sighting_of_ref": "indicator--b5e5ccd1-5a9d-4867-ab74-cc2f8cb927f6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa30b38-d44b-40ac-882a-b1f373e8691a", "sighting_of_ref": "indicator--7c07f10b-dbce-4a4b-accf-8dff0cfb9a59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc660a43-c965-4df8-bebd-a24d134c33c7", "sighting_of_ref": "indicator--301b27ea-b005-42e8-84c2-78266aad1925", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb68f8dc-3e88-4ecd-8348-9bbc8fe74f4e", "sighting_of_ref": "indicator--8b89f61e-d935-40f2-90c4-7a282c92c62b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfd9bff-bc2d-4714-8f65-24b5ce222fe2", "sighting_of_ref": "indicator--3fd221a8-91d9-4615-aa60-78c24b720437", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37083993-e15a-4832-b57a-1f44761a3132", "sighting_of_ref": "indicator--a311d5e3-b4fa-4f0a-b13e-9dee51e93ee0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ee4854-bf90-452f-8c62-d8e644b85d5e", "sighting_of_ref": "indicator--c694ae89-80db-4529-9f5d-dc1b201275f4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8756a5e4-f32b-4b6e-8250-01543acf7064", "sighting_of_ref": "indicator--6aefee57-c7e0-4cbd-9a51-2e8af19e3a7f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bf5961-624b-4bf6-bcd9-7162338ddedc", "sighting_of_ref": "indicator--b7772e4b-ba50-4b79-b797-41f10dc5de9e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee92e0dd-401b-4a45-a7e8-e2e3f5d29102", "sighting_of_ref": "indicator--787137a7-669f-4d36-ae47-8d0a383c3565", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2550e258-7a2c-4caf-9684-2e7fd6149ac8", "sighting_of_ref": "indicator--7373c49a-35c6-4be8-8a34-17ea2108cbbb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2fb977-2d42-48a8-9ff1-8555c76e13fb", "sighting_of_ref": "indicator--74970137-6f43-4315-ba7e-d1fe99446340", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037545a2-f540-4d07-9844-05e06441bc5b", "sighting_of_ref": "indicator--a4743c82-3685-4131-924f-d7ad730e6e01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b3017f-e93d-44b0-aa3a-e482f99d23dc", "sighting_of_ref": "indicator--d8211704-c1af-47f9-8b83-53ca5a6a804c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ab9587-544d-4bfa-a1d3-ea06e3087aa3", "sighting_of_ref": "indicator--548c9a7f-84cb-4e04-81df-56ddfb583785", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918021fd-676f-40d0-ab73-04a774476072", "sighting_of_ref": "indicator--e0d7db96-4efe-4bce-bbdd-b7f46baa5468", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c23f82e-ba49-40b3-b741-9f1a70610031", "sighting_of_ref": "indicator--0cffb452-0006-4425-b34b-676069d54035", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbee6ea-a53d-4a25-bdcf-6e4958e9d332", "sighting_of_ref": "indicator--985f7ac3-dabd-45c5-adcd-a7763e1196fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6152a4c-0b93-4634-9d24-3adfa7c13b4c", "sighting_of_ref": "indicator--3dc8b7b3-0ed7-44fb-955c-9d64f4663cb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c23a9f-ded4-4f87-a4e1-f02991cde344", "sighting_of_ref": "indicator--e8abb65b-47f9-4248-a2f1-155c090525af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03001e0e-0d47-48ee-a2af-3884bf9ea53d", "sighting_of_ref": "indicator--bb5a0109-f9d2-49c4-a1b3-e537b67bc49e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b568a7f5-c114-4230-9a93-b2816fca9512", "sighting_of_ref": "indicator--c6a849e9-2370-4c8d-8bba-45ccf54e49a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e686c0-da41-4ad2-b440-d9854a0b0928", "sighting_of_ref": "indicator--e860c926-1b68-4ba9-a1bc-d15b5fd120c5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dffb2a-b49e-4d37-a676-862648648793", "sighting_of_ref": "indicator--4d4ca92a-9cd2-40eb-91e0-e9daae063307", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509a042a-baae-40ca-8511-e1058d2ee2d9", "sighting_of_ref": "indicator--5ee72b78-d142-4d3f-81dd-1300f543fdb1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39492a09-8f44-423b-802a-d48aad04b9fe", "sighting_of_ref": "indicator--7e5eb444-ab7a-407f-8546-b0ca2c110109", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eed94a1-7ec3-4fbc-8625-b7c54bdbee94", "sighting_of_ref": "indicator--a1cf4799-0e5c-408c-a8d7-a82440e35e56", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcb64d5-a295-4321-b280-20c4ee5aa1d9", "sighting_of_ref": "indicator--27897efe-3e12-4040-a9d9-65c2e2d8aa96", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3130b2-6b1e-4210-9d9b-902d4215177b", "sighting_of_ref": "indicator--cb2bc590-60a7-46d3-b563-d42862ed99fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642377e3-22f0-4b46-ad09-acb2ebe48549", "sighting_of_ref": "indicator--7a59bfca-2be4-4e0f-80a5-e3989ef22e96", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646215e2-cf93-4d40-a02a-a6604c382ecc", "sighting_of_ref": "indicator--727c329f-8d84-4415-af5a-3cc77a85ce2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c4e5c3-61e0-4e45-87b3-456509f02a80", "sighting_of_ref": "indicator--23de335d-d11a-48ca-b69d-b6ab8936e2c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8222ddb5-a920-41f9-9fb2-a33d22d90a2d", "sighting_of_ref": "indicator--fcb68dea-b01b-44b5-a978-e5e7c3fe6612", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee06717d-e794-4037-b623-7abc5f0631ae", "sighting_of_ref": "indicator--d9f715fa-3ded-4c97-a614-0cf6c11750df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b9f149-15d8-4643-b481-318d1917b1f5", "sighting_of_ref": "indicator--57e38106-557b-4535-aa65-99719385c03b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838678d6-133b-4cdd-a34b-9765705076d4", "sighting_of_ref": "indicator--92554c34-8f52-407b-9b83-2f3a8fc0d14e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1472c5d-d975-44f4-870f-36ec5d75afac", "sighting_of_ref": "indicator--cb1b2e00-b731-4554-a573-4f91323ca375", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8349381-14c3-43ee-b588-289009e3b438", "sighting_of_ref": "indicator--62c28f5f-5360-4f9d-9553-bd6fce750baf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec56f28d-c70d-49c4-aa0c-9f95775c44e4", "sighting_of_ref": "indicator--48aad1c9-bae7-4c0e-a1b0-69bd61f252d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a567ba9-aaf6-41e0-822d-b4b35deb1502", "sighting_of_ref": "indicator--c6b75492-9c17-45a9-a306-fe736d2917fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb731c00-b7fe-4bce-a946-a2b42b1b517b", "sighting_of_ref": "indicator--4e0a80c7-b5aa-447d-bba0-41488e17aa59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c358c684-ec82-43c1-90d2-958131d60747", "sighting_of_ref": "indicator--4eee9e0a-e6aa-4ca5-b65c-a27df7bb21d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5999f94b-96ba-40a5-8acf-9b567965e413", "sighting_of_ref": "indicator--d5a61eca-2886-4e35-b187-b1473c7687e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c615b21-fae7-4cc9-8209-575bc2292b1d", "sighting_of_ref": "indicator--60168870-680c-4efe-bda1-e3a80f3f1f2e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addaa307-8ce7-472a-8c34-eb8fc1331484", "sighting_of_ref": "indicator--131d8afb-6d33-4305-b526-675edf471b7e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef4181e-3ab0-4ae6-8815-33ed4bad07c3", "sighting_of_ref": "indicator--5d29add4-0553-4c90-b886-40fe1361245c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad0264a-d9a3-494a-af6a-b4bfe6581011", "sighting_of_ref": "indicator--c4ffa5b9-255f-4af3-8342-b781533a7b46", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad1beab-af4c-4528-8d82-e8338df62bf1", "sighting_of_ref": "indicator--882c5b1d-a7ee-4806-bd99-b07f307afa86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee35966-58e7-49f4-bedc-045dc77e04d9", "sighting_of_ref": "indicator--3472a5a9-db37-4f70-bf68-214b1279c9d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb6b846-cfb3-4abe-8034-c2516f01481c", "sighting_of_ref": "indicator--8f82b894-8dd1-46f8-a490-9524d5c0d674", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fc01b8-3d7c-4cf2-9345-058b9bd1cabe", "sighting_of_ref": "indicator--5acae3ee-4e8a-4a3c-801d-044684480965", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc886366-ee5e-41f9-9bf9-7bc4a019b88d", "sighting_of_ref": "indicator--1eb49e77-8c36-4390-988a-a31cdad2a976", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17b9f90-0d47-417e-90ce-0e09ae0d3ce0", "sighting_of_ref": "indicator--0a45c05b-d0e7-4f16-91a4-914a3787cf0e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5df077-6986-43d5-bb0e-a4604f3f93da", "sighting_of_ref": "indicator--2891ada3-65ed-4f42-873f-75d76263390f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b50187-e202-45da-ad5d-07516b9674d0", "sighting_of_ref": "indicator--2d40d05f-9420-4f5b-8b33-38626ff76c2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac4a0cb-b75f-4c11-bd5c-0b732f6a8afa", "sighting_of_ref": "indicator--965ea2b1-5981-410e-9e30-97cbfab97ed0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2bd01f-83fe-4da3-af5a-60c7c60a7370", "sighting_of_ref": "indicator--5eafec2e-a301-4378-aa73-de1fffad5977", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea18ca3-2190-43f7-9071-7597f31aebb1", "sighting_of_ref": "indicator--fd514569-1887-4e5a-ae39-6d045142f749", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ada93a3-7ee0-4119-88a7-45bf5195094f", "sighting_of_ref": "indicator--31101928-0c33-4e63-84a1-8e324e6d83be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeb1d57-0b5c-405f-99ea-82e4c6a0abe1", "sighting_of_ref": "indicator--cf28def1-de3f-4a51-bf7d-bd1b372339aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41ce247-72aa-4da7-9480-ce8ca2775ff9", "sighting_of_ref": "indicator--a0433e04-1e85-40f9-a9d2-07dc4a80c9e7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713d117d-097b-4587-8644-fe3d7394710c", "sighting_of_ref": "indicator--e9599f49-a99d-4d36-aa30-b0aa01587b1f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8f8a1b-f5fc-4ebb-8486-9059f12f0ea6", "sighting_of_ref": "indicator--7f4fdb1e-059d-49a2-9ddc-f504f3a55697", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7680e055-57a0-4e8f-99d3-1b36a2b2cdcd", "sighting_of_ref": "indicator--11596f0e-e6b9-4f51-8f19-ae85e89d8e1d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2171fd-8ef8-44ff-8272-3e825f730517", "sighting_of_ref": "indicator--184e9cc2-5099-42fa-b663-fadd256f0568", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644987e7-cc12-40d3-b862-3085db5f4823", "sighting_of_ref": "indicator--ce782466-a00f-4b00-a2de-0a1d00f5a133", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ff3b0a-6714-40d4-8768-5b2275cd7c79", "sighting_of_ref": "indicator--f4f40638-42c5-4f5e-a060-58c633f1899f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07159b4-e134-4353-a34f-cd0b6aa243b0", "sighting_of_ref": "indicator--a9734a44-ae3f-489d-b817-5f3c1829b01a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74091f89-6a15-4896-b293-4dfe2af37e3c", "sighting_of_ref": "indicator--892f896b-185b-4d7d-b575-88d355ba8a55", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ae2cb2-08a0-431d-8f4e-140cd6fa72b7", "sighting_of_ref": "indicator--6690e775-b672-4ca4-969c-d51cba947d9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89034f7-c343-4ecb-bf1c-8a533e70fb08", "sighting_of_ref": "indicator--7e8f346b-c08d-4aeb-8148-756b61ac97ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923b79c1-1cad-4ee8-ba7c-22e76847a5f6", "sighting_of_ref": "indicator--882db528-8ac7-47ed-9b21-1887b52daba1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ad62f5-a763-4e4a-a08e-285ab419db3f", "sighting_of_ref": "indicator--ef31b955-54db-41a7-ba38-acf80197b180", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d0537a-5142-485c-9ce8-8a5bd3790b79", "sighting_of_ref": "indicator--ea63dca6-85d2-4557-841d-cda78a2dbfda", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377f2381-9238-4897-a91d-fbef71da1207", "sighting_of_ref": "indicator--3bbc8078-2a71-4f1b-9e9f-debf2926714c", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4227ad2a-db06-4eb6-951c-ac35835e63dc", "sighting_of_ref": "indicator--141aa766-9aeb-49a5-8f7f-b427b48fc339", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b492ba3d-a80c-4ebc-88f8-92a3aa8077d2", "sighting_of_ref": "indicator--647234d2-bab1-4031-af6f-7a460afb6fc1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171d850a-b6b2-4894-84be-d79d6b596de3", "sighting_of_ref": "indicator--a1a4ebd7-d390-41b4-89aa-9fca8b67fad8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8ac755-3c7c-4195-b00b-6d194c638f30", "sighting_of_ref": "indicator--08434f64-78be-4ffa-a986-d727b6c0da5d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b102de56-afd4-42a3-8916-844f90798a9e", "sighting_of_ref": "indicator--ca1ff4fa-2c33-4e4b-9270-cae271a9f27d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506f76a8-96c0-4aed-b1a8-7861a6617fbd", "sighting_of_ref": "indicator--9d4311c4-0009-48a8-999d-29d0885e41d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6fdc9c-89bd-4bdc-a3b9-20bd853037da", "sighting_of_ref": "indicator--b03f78d0-6d9c-4b98-9954-eb57d675b03b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2e64d2-db19-4946-8e24-79ce6314a809", "sighting_of_ref": "indicator--f9b73d95-b0ca-4aae-860b-acce4bc1bb96", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec60f44-d392-481c-95e9-a2f38ed51754", "sighting_of_ref": "indicator--2409399f-ee1c-460b-8e72-c58b91f869bc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79610305-16d9-4816-b2cf-3bc42c47093f", "sighting_of_ref": "indicator--1a51d913-34f1-466c-ae28-8295f548bd60", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc8f8e3-7f8e-428c-a0c1-75ce0aa8766c", "sighting_of_ref": "indicator--0105a363-bc6b-4716-89f8-7b6715dad102", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699a64ba-b131-47f1-b4d3-9e4cec9218bc", "sighting_of_ref": "indicator--41152907-e83e-41b7-8f3f-9f41715aed0a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f846dc0e-6631-4c67-a4c5-b37e12c4c139", "sighting_of_ref": "indicator--14fd390c-4ac3-4beb-9a91-c70056c6be2e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934cd60a-b8f2-4078-bae7-81b7d3472e82", "sighting_of_ref": "indicator--0b53de52-9ddf-44ec-978a-41f1e1606b7a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c309929e-0f5f-40ee-8d1a-cfe50aedb372", "sighting_of_ref": "indicator--06a82279-88c5-4b11-8af6-c0f7c3b2d350", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935b67e3-7ca8-4fa4-a6e2-acf1bc0844bc", "sighting_of_ref": "indicator--86000682-d49c-40c8-b341-f95d49af0b87", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20711efd-f1ee-4629-9719-1d8e7cdfec03", "sighting_of_ref": "indicator--361fefa4-97a8-41fe-bf72-560c2f3cb0a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8400f30e-26df-455b-b3a0-b59d8a7a1381", "sighting_of_ref": "indicator--53cf3f6b-ba29-4f71-b522-6a8e70c95fb0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7530a677-0216-4d11-9baf-5ca0d3824872", "sighting_of_ref": "indicator--490ae09b-b919-46dd-9c70-886ea07c10e7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd9bd77-004a-434c-9f91-133571897216", "sighting_of_ref": "indicator--de090bd7-562a-453d-85c3-b1eabe166f98", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d2aed0-4bbc-4a4e-97bc-d01c6fa160a9", "sighting_of_ref": "indicator--25195fe7-bd74-4cd1-903c-5808a56ded85", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fad89e-9615-49d4-98eb-9efc818b539f", "sighting_of_ref": "indicator--97cbd8fd-963f-460f-893b-d05eaba2491f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a77b44-06de-45be-a1c9-de8cb274ad79", "sighting_of_ref": "indicator--3da14c3a-0540-48ae-8d2c-60727649daf2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1664fe23-e2bf-4e34-a5c1-8421990d2ae0", "sighting_of_ref": "indicator--2cedc498-ad01-44e4-9595-27e5d21ee7c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f8d510-23f4-4285-bc1d-4a353549dee8", "sighting_of_ref": "indicator--d3b82ad0-e6aa-4455-b4eb-ce9d13732d53", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01b8623-4127-4d2e-be96-3462fcf27428", "sighting_of_ref": "indicator--a85b6bf4-d223-41b3-90a5-701dbdea52d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee94253b-665e-4a18-a869-4c9fc57c128e", "sighting_of_ref": "indicator--20476a72-4b6c-4b69-bbf9-c359350199bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4464c4c1-bbcd-4f3f-8bca-6a266187d867", "sighting_of_ref": "indicator--c6355e63-5301-49a2-bb40-40945bf0133b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f5ecf1-62d7-4c60-8595-57e4cecae350", "sighting_of_ref": "indicator--5c15ea98-3be8-4b85-b08f-785d446e923c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994e1c6b-0cfc-4f38-8021-6fe52a497ac8", "sighting_of_ref": "indicator--fb56133c-a215-4a26-aa9a-325545bef91b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a3d80a-ea60-4961-b899-480a100fed0a", "sighting_of_ref": "indicator--c359a549-ac08-47bb-a95d-f74f882ce87f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3f7a8a-65f8-43d0-ba25-442b3d626ac0", "sighting_of_ref": "indicator--3239c005-67ca-4a10-b6af-1eba994211c5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad1d341-2fc5-40e2-9fab-39224d610add", "sighting_of_ref": "indicator--859585d3-a885-4f1a-a715-8cf9b899b3a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5403730a-e217-49d7-b283-21510ef016f1", "sighting_of_ref": "indicator--8ca9beaf-036b-447a-bb25-de35c7780b34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2066dfd4-a2f9-468c-b786-4100419040aa", "sighting_of_ref": "indicator--ac8f47ec-d88c-42a9-8c34-20e7e0de5e50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bea9328-7391-41e9-9d9c-8c1f6bc8f264", "sighting_of_ref": "indicator--715189cb-1c45-48eb-9fe0-8024dd99a65c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511b0ea7-6310-461e-8dfa-97e612fb89ba", "sighting_of_ref": "indicator--fb1fdf1d-42e3-457f-9b5e-bfb84fee707e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb4d533-0bb4-41d2-be09-c952e85d725d", "sighting_of_ref": "indicator--b9459a83-5496-422c-bfa4-46011a26c3a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae3ec33-01bb-4c2d-9f8c-bef56aa6facd", "sighting_of_ref": "indicator--7a699043-2c3b-4c8e-993a-2ba3d48a0907", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95e9a07-5a6a-4216-96a8-583452174199", "sighting_of_ref": "indicator--c6960c01-2792-4f5c-8191-8dea2765a1cc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b753e1-cfe4-48a3-9ac8-f42d922067f3", "sighting_of_ref": "indicator--21ce0554-8e09-414e-9c45-3b947adcc863", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e241c1d7-4a44-433b-9dbe-1345a2d3cca6", "sighting_of_ref": "indicator--4397c1a6-2362-4746-ac55-3e11e6065206", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca29f2cb-93c3-44b8-81c6-e0a377b20fe2", "sighting_of_ref": "indicator--a46a849f-725a-47a5-aa65-14416cde2d7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff00f6c-dab7-45e2-be81-33e7e362d8e3", "sighting_of_ref": "indicator--b6e8c389-449f-4996-9d05-4241c2d1b852", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0077000b-f108-4811-a166-90b9c1d5667c", "sighting_of_ref": "indicator--3d767ace-d554-4b41-bda1-fd29b635bcbd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d92776e-f821-4d59-8908-fdcbb92ccba7", "sighting_of_ref": "indicator--00f70c68-2580-4947-8a7e-da26e763dee3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b081b2a9-03f6-4abf-bd55-ea0033e9df72", "sighting_of_ref": "indicator--716fabaa-a0e6-42c1-8cc2-2429abd041e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c603a36-d910-452d-bb6d-1f14a9a0420f", "sighting_of_ref": "indicator--857a01ee-88d6-4f0f-91e7-d29d0afcddef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9036042a-f6f9-4994-8402-41c02d000ed6", "sighting_of_ref": "indicator--ca441025-6c00-4055-821c-7510dcd6296b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f28531-b311-42c9-bb66-6cc720c4f360", "sighting_of_ref": "indicator--522698f3-ff8a-4356-a8aa-f6545f97cfcd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43be4ec-568d-4138-b37c-0dde22f3c504", "sighting_of_ref": "indicator--9074c4ec-bdf4-45f1-a9f8-a3a8c6e913e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380a5d08-43c4-4daf-981b-47899dbc1ac2", "sighting_of_ref": "indicator--897f8e26-cfc7-49ed-bba5-f11c9408ee37", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e17ab3-c5f2-464e-a75e-e1d7d54e5c08", "sighting_of_ref": "indicator--6d4487a5-129b-4d6f-98ec-db8261656c48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b6d90a-e993-43d2-9972-ce7e7c160140", "sighting_of_ref": "indicator--60b7cd32-0652-4665-a99d-03662a5e78fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7928f4-5397-4197-9853-734208a01f57", "sighting_of_ref": "indicator--05c68823-e025-43ac-bcb5-018f4b09fa67", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fbe847-8a60-4999-90d2-67e71b5cca5e", "sighting_of_ref": "indicator--56093b03-5187-4ef6-a085-0a8649a04421", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a75c80-ea74-4c44-8746-e6525feee2ac", "sighting_of_ref": "indicator--cb7812f0-c9aa-4510-b1d6-bc48421ce382", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06eeff6b-c045-431b-8b7e-e201b12a53ae", "sighting_of_ref": "indicator--0a2e32c3-6cb2-4616-8764-39c932784903", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0b8c69-1ec6-4929-a673-1b4f063ae95e", "sighting_of_ref": "indicator--4bf8ca21-8efc-4781-a810-cdf674d927de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fa1141-55ec-4b22-b235-648a1992f02b", "sighting_of_ref": "indicator--3c04314b-3df6-4578-8f9f-cd22b53da9a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0baa8493-aea5-4b22-abf0-8b2f70ecf179", "sighting_of_ref": "indicator--fa04dd4f-48dd-4b61-aa43-d7fdab5c922f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b87585-7f8f-4ba4-b4f4-4aec8d5de753", "sighting_of_ref": "indicator--3a48c961-4428-4670-b84e-d16d69e3d036", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ffe2eb-aa2c-4ef9-9a2e-19efaf4cf7fe", "sighting_of_ref": "indicator--0df467ac-a327-48ae-a1f2-7b90ea384128", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b0cd3b-931d-488c-9628-25c3f7a7ce74", "sighting_of_ref": "indicator--421e0c22-a408-40fe-875b-f8a0fe515f36", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37bafc1-70b2-49ac-9427-747d07fb2778", "sighting_of_ref": "indicator--a14249c8-13ee-4cdf-af05-c6f6655d9b34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516861bd-dadd-4dda-9bcb-ba434b98ae22", "sighting_of_ref": "indicator--e07e136d-d288-4269-9d94-f5d229ea92fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836b7e04-afcd-4cbc-8d52-b50c5cf6ed68", "sighting_of_ref": "indicator--9129c6ae-609a-4fac-91f3-287739c455c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e259386-9ff7-4bc0-92d1-141d016042e4", "sighting_of_ref": "indicator--c282f421-1c0d-4c02-ad19-701ca8b94b71", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4190d130-b921-4722-9097-a1a172360e53", "sighting_of_ref": "indicator--6da4cbb0-34b2-4cb8-87a5-6ad0441988a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb45861d-1b17-410e-98df-8998fa35ab4e", "sighting_of_ref": "indicator--1c29d0c9-e34e-434d-a90b-0414cbe553d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e0b6a7-ea09-4f9c-abe4-1902ade1a302", "sighting_of_ref": "indicator--5bb401eb-f8a5-45f7-bf70-d14e49246790", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f319637e-77d5-466b-8faa-5ba089a34855", "sighting_of_ref": "indicator--6dfbe077-9adc-457e-9c57-e00ff35e7d11", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5853df11-7bb9-464e-b217-1e2e7e449741", "sighting_of_ref": "indicator--69f0eb84-563a-4f7a-aebf-9c744fdc7a69", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2a733f-fd35-4457-9e55-9e37feb478e7", "sighting_of_ref": "indicator--3432fee0-eb27-4efe-8844-57768dd985d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5ea957-4fda-4894-8dc6-9bd08a9a63af", "sighting_of_ref": "indicator--3be2ae12-172a-495d-8325-41450ab9c4f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6399f02e-6e8e-4908-88c8-b118656dbc75", "sighting_of_ref": "indicator--94d9f4bb-3961-4d8a-99ec-03475e7544e7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14adc89-268b-4954-ab61-cdd2104d8bc9", "sighting_of_ref": "indicator--bf2f9b1c-dc2a-4772-88d8-8c5a7afd4eb2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc81b12-8ed9-4537-a7f7-3673797477f4", "sighting_of_ref": "indicator--e63ce4e2-a7cc-4b4a-99f6-9f1cc12bd8f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b78cda-0fb0-4372-9b36-19c378c9c7a7", "sighting_of_ref": "indicator--804fdb2f-e206-4576-b2ea-04047ff7526b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ace6330-7b7d-45d8-8b60-3b9faf9864e5", "sighting_of_ref": "indicator--0666c288-73f2-4574-b233-d29f7e088b0d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4729a006-6541-4622-bcf1-f6515780ff92", "sighting_of_ref": "indicator--4861a0f3-aa72-4198-b5de-063c7e19209c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae98a0e8-29fe-4160-a86b-90a1973e839d", "sighting_of_ref": "indicator--a2ee8744-2168-4e02-b217-20ff25ff11d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f693ae3-7987-4d00-821b-c710e3dd606a", "sighting_of_ref": "indicator--d7353eb1-6575-4921-b9b9-e9721fe9ab38", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbabbf55-5264-486d-aa08-566c2b5f3839", "sighting_of_ref": "indicator--26f37439-af5e-471b-b935-eb5fa8a5be39", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b07696-c8a1-46ff-8f4c-30bbe5f1b901", "sighting_of_ref": "indicator--0fba92e6-8fec-4af5-87c6-a3003e2044e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6276cd53-2745-45e3-9663-032ce20bacc7", "sighting_of_ref": "indicator--54206bde-92bc-4bc0-b792-a7ab50391d86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883dd52c-219c-4605-968f-86dce798ad4a", "sighting_of_ref": "indicator--411d5575-a41b-4884-a9f8-fb16bfa99b21", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf81528-14d2-474a-9c01-e6ba247cc681", "sighting_of_ref": "indicator--dee0d701-3134-4794-b536-5ee490304640", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3d0971-2561-4569-9618-84ccf0a29413", "sighting_of_ref": "indicator--f3e82206-3d3a-4f94-9241-2a150dfcd6af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1dc87e-548e-4e08-b168-27585915086d", "sighting_of_ref": "indicator--89d45349-b4c9-4e89-b09e-06f500199720", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e019903-440d-4304-89bf-ffa100318397", "sighting_of_ref": "indicator--7bfa6c5c-3573-451f-82b8-d85badfcd681", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ae44af-1305-4a6c-a034-b4202bbd9525", "sighting_of_ref": "indicator--44fef540-6a66-491a-a865-584da31541ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86acb384-775b-4efd-8801-d9c3cd92d4a7", "sighting_of_ref": "indicator--1fd7fb45-5ded-4204-9230-3d5bd13f6a24", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203b6bce-55d9-4049-9150-30d82d6c2c42", "sighting_of_ref": "indicator--90147a2b-a896-4206-9b5c-65d249f2a051", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc510c3-06c3-45f0-8589-155551b08e31", "sighting_of_ref": "indicator--ab37a51a-48f6-4d80-a978-5d31200b0550", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d520e33-f62f-4238-9544-c9245f651f11", "sighting_of_ref": "indicator--a0866832-e0f7-4c4c-bf22-ab86a7f61559", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8320a4c-346d-4151-b158-2fe2ec25bdb9", "sighting_of_ref": "indicator--c813ed9f-1c7c-47ed-b4ce-35c1a4ce2c0b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d210bc-d4da-4298-9576-10cadabe8eb9", "sighting_of_ref": "indicator--2d4ca8ab-6627-4080-ba00-73b60f9d2037", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f6c958-4b95-443a-a635-b67b289c5bd2", "sighting_of_ref": "indicator--b3ab4dd6-9c86-4834-b23a-07d65509ac34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4e3579-38ad-4f95-908c-cf2a106831bc", "sighting_of_ref": "indicator--e5825883-dc45-47db-b3c0-b05a2a2dcc17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae9051e-60e0-4d0a-a014-e04d5ed651af", "sighting_of_ref": "indicator--148514e6-37a3-472f-9b0e-362afebafde9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0748d3ea-d62f-4f59-b4db-132c841cc13c", "sighting_of_ref": "indicator--e3682f4d-200e-4ae9-acbb-fcea9bb431dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed05b361-2ef2-4daf-b5a3-14b5e52952cb", "sighting_of_ref": "indicator--75a9ec27-e7bc-4425-a174-51a0d1897632", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929dacd5-6a05-4ba1-9740-7a89e602e7d9", "sighting_of_ref": "indicator--3a1887ad-b4c8-4c20-b641-89ea4d40da44", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c9f480-a910-4f73-b60f-7a22f718a853", "sighting_of_ref": "indicator--136ac42d-3d0b-4fbd-bfca-12532121acb9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340f11bf-f898-4f3e-9c80-fd835ad8492f", "sighting_of_ref": "indicator--2cfcf717-b32f-44da-b8bf-938ef8d5bd40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0280c735-3c4a-418e-95fe-c4d39c91db16", "sighting_of_ref": "indicator--cfe4c31f-e6aa-48e3-8ccd-f51d83a6968d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d37a4a-ab0c-465d-9ee7-b98b13f3ad15", "sighting_of_ref": "indicator--28c4de00-f457-41d4-b6f7-5780fe1da6a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84622dc4-2967-40fd-8f9f-58f49e8a1807", "sighting_of_ref": "indicator--03ab93bc-d1c5-4597-ac79-7643c05953cc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a69ac1-2812-46f8-a18e-5910df036de9", "sighting_of_ref": "indicator--84ec956b-70bf-4df9-8fd9-9e91aaeccd75", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a2a398-8d6b-4b2d-b95e-ceb3ee785af5", "sighting_of_ref": "indicator--97135c9d-a5bd-4db2-9946-70c55725a94f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb016f73-e055-4ec5-a0a9-a1a3d8fe916b", "sighting_of_ref": "indicator--dc7754c1-9c69-4e88-84ed-6aafcc5c350a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61630958-75fb-40fb-839c-a84c8b180a2a", "sighting_of_ref": "indicator--f5113d22-f810-476b-a264-5bfee1733dc1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a29c79-653f-4eb4-b067-e414181af7b2", "sighting_of_ref": "indicator--7d4f4215-5f61-480a-8065-d48908548b01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bf4b22-78af-4c6f-8ca2-827fd2e3a1d2", "sighting_of_ref": "indicator--cc58105f-a328-45ad-bd93-3599b7582a01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379051ea-5d17-48fe-a48d-c06459210d41", "sighting_of_ref": "indicator--cebaae80-943b-4fe3-92c2-71b35c027025", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03b13bd-dd05-4d3c-b123-25f8a908e729", "sighting_of_ref": "indicator--7f52281f-58f8-4c64-af0f-1195926504b2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30419169-2c0f-4a33-bfdc-30bdb60bdc66", "sighting_of_ref": "indicator--212c377d-6ab3-4347-aa30-bb3cf45056d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476367ed-d21c-4a5e-89ed-f71fa11e8fdf", "sighting_of_ref": "indicator--ce5162fa-0c26-4227-a4a5-93a569ce32e4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b101483-4480-456b-b7e2-9d42f3662014", "sighting_of_ref": "indicator--d2bc3997-825d-4f91-b33d-e2f84533f2b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e2a7f7-9ece-4368-9561-ba1084654cf0", "sighting_of_ref": "indicator--24700cca-8724-49e3-852e-a98ca0069fc1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9b8582-c014-4c93-a2d9-cc467a5581bd", "sighting_of_ref": "indicator--cbd35f95-371b-4b7e-8ae7-bc902c802c76", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490bb3e5-4a86-4416-b61c-2fd6c90aeff1", "sighting_of_ref": "indicator--86703e3e-17ef-4d16-9d7e-ece4ccfe5725", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd3cf2f-49c4-4adc-83f9-8b0536d01878", "sighting_of_ref": "indicator--d30462f7-2184-46c9-a0b9-e5da91fa2ec6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06d2e84-888e-46c1-8565-b8b84cb09d1e", "sighting_of_ref": "indicator--6bae4214-37d6-4d6a-b04a-3a7efdffc4b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37405e51-2a3d-4535-8685-a60be9c0944d", "sighting_of_ref": "indicator--c24c52e5-7954-4f7f-b6c7-9ec2e35704b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e532fc45-8042-4a14-bdd6-71cf8525ef00", "sighting_of_ref": "indicator--d6d32d2f-6f4d-4af8-b011-b303be871fc9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dd2044-070d-49f1-bb50-ad5e404c794b", "sighting_of_ref": "indicator--a7aa7285-fbea-4c5a-aab3-e9e70c7da0da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3963e7a1-edb8-465e-9ca5-23acebb4c087", "sighting_of_ref": "indicator--0ee0011a-84e5-43fd-adf9-844c7bb54569", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b70d4d5-501a-4ac6-bd5d-861bf5fd78e7", "sighting_of_ref": "indicator--45166133-f838-48b7-ac23-5d039462f449", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2484433f-6285-4f62-9e5c-f2c44a449b1e", "sighting_of_ref": "indicator--abc499f0-2aad-442f-a881-4123359ca30b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b994b8-68c1-46c3-8b65-c60a86a398ba", "sighting_of_ref": "indicator--0ea3f8a8-561b-4564-8a22-04d06835049b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169f114d-2f38-4ac5-a938-c10cf4e9da90", "sighting_of_ref": "indicator--117af6cb-7286-41eb-b990-46267e846378", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8ccafc-08df-4506-94ae-79ce39b4f4ee", "sighting_of_ref": "indicator--488eab48-1e60-45ac-a2f4-141a9140534f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01218ab-51db-4878-9fd4-65e01149560a", "sighting_of_ref": "indicator--7174b4ad-3bf2-42ca-9efe-139e18b5c294", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8984d319-f3fc-4874-ae18-b8589c6601ea", "sighting_of_ref": "indicator--4ff2494b-97e9-482a-bee2-1a9e259ca1de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca315d6c-5f23-4029-bfc7-70bbc7d1a19e", "sighting_of_ref": "indicator--cf2556d8-23e4-4bb7-bf09-83589be6e185", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0a27a2-8690-4fba-b652-cb4c8c556560", "sighting_of_ref": "indicator--b43f9736-fa90-4cc3-aee9-9ba2f0a6cf31", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7056b6eb-fd87-48da-92d1-88d6e108b51a", "sighting_of_ref": "indicator--ebf3d8fe-125f-4046-b493-4273f627c7ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5bf0ba-cdba-43b1-839a-219886b7f1a3", "sighting_of_ref": "indicator--89e0a212-a478-4719-b541-a02a422d05be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f6b415-91cd-4ef6-9d92-14fa958cb253", "sighting_of_ref": "indicator--6cf63577-454e-489a-acf2-f468764fc239", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0979047-e9bb-4958-853d-57ef60ec302e", "sighting_of_ref": "indicator--647d18ea-1269-4e59-b279-27b7337f450f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c71e6c-f4cc-45fc-8325-3f13fb155f11", "sighting_of_ref": "indicator--25fd1677-8e74-4361-825d-355a3d621b25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9225fecf-3928-45e8-beb2-a648ec930afa", "sighting_of_ref": "indicator--0f941c72-7bb4-4faf-a5e9-5d3eca8d9682", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c630f0e-fbcb-4123-b720-0031209b51d8", "sighting_of_ref": "indicator--60627b6d-68a5-44d9-bd44-0725819c52ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b48e87-c90b-4918-b9fa-3983b6a64623", "sighting_of_ref": "indicator--785c90cd-f141-432b-9757-313d13d310f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02d3ebb-9245-40e0-a76b-f657ddd62ab0", "sighting_of_ref": "indicator--6356da9a-4642-4950-8ba7-b572c5df143a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75af418b-17a0-4865-9611-6ddc5f9a54d5", "sighting_of_ref": "indicator--da8b4102-945a-4b0d-890b-23cf1787df80", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7446f91a-3392-421f-abdc-fd25b524f8c8", "sighting_of_ref": "indicator--28c75f35-a78d-4f7b-8a7b-d23e886f43fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cbc62a-0ade-416f-94f0-a8abde789329", "sighting_of_ref": "indicator--276205dc-e702-4ed9-9db3-11e8a932597b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35f28e9-d9c7-40fc-bde4-5c314958fd01", "sighting_of_ref": "indicator--407f5b60-7a70-4184-ae52-78cecae5173e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40169d6-2937-44ce-89d6-6590d49485ce", "sighting_of_ref": "indicator--c5ad380f-50d2-4f8f-b8bb-ebf0d00b3dc9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e998310-9772-4a18-ba74-1eca73a99bc8", "sighting_of_ref": "indicator--80f0b8c7-ed23-425f-a463-beca6e7f1145", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bd9fdd-218a-41da-a3df-4b471c94b3c4", "sighting_of_ref": "indicator--d2b2f2ac-d791-407f-9a90-27e75ca9fd97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ab6961-7498-4c74-8322-f2ec8b7af890", "sighting_of_ref": "indicator--9297d0f2-082b-4e8b-b877-b6c195675f31", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b6c25b-fe4c-450f-9fb5-9b8d82f6956f", "sighting_of_ref": "indicator--509d4ef2-0231-4ec1-87fb-326090082190", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcadc962-c125-4114-a3a9-ae1e3a7e3abb", "sighting_of_ref": "indicator--c967df90-433f-4d5c-a99a-0a14611e7784", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66f467f-6790-46e5-8bc5-6d8ae029ac63", "sighting_of_ref": "indicator--5b334204-56be-4228-8634-96c1bb80ab10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85165a3a-e75e-4280-bea6-07082e9e2cff", "sighting_of_ref": "indicator--917c2467-1aa7-412d-b34c-bab9b962ce43", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1be555-0681-4789-b58e-121f2d6a7815", "sighting_of_ref": "indicator--b793ee2a-f511-4d79-b938-a92cf9e9f535", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bf84a9-32b7-4318-8d64-85efc87cafa5", "sighting_of_ref": "indicator--393a4f76-2bb2-4d6f-b037-1e717a6be878", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30bc6113-707b-4d93-b6c7-bb988b1c7e5d", "sighting_of_ref": "indicator--f36a5b3b-09f3-4a49-b0f1-43586d225527", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34d6229-8fcb-486c-915c-f7d6f0a9feba", "sighting_of_ref": "indicator--a7c27a07-0fbb-4f9f-bc8e-ba14a992514e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace17838-d711-4ae9-8321-abe21d345178", "sighting_of_ref": "indicator--71afd709-211e-4108-85eb-2a059322c99e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ede4f5f-51ef-4f13-a681-b2a33b4393c1", "sighting_of_ref": "indicator--b2340ca3-7ba9-4743-8df5-48d9bd71dc0d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d8ebf7-0c18-4f39-aaed-704187dcb933", "sighting_of_ref": "indicator--ce9d8930-900c-4e91-87ba-3663a68baa2e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b97d1c-c756-41b1-a440-11880eec374d", "sighting_of_ref": "indicator--6d960733-f221-495d-af3e-1d67e493901d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d60119-857d-4447-a0e5-a6c05d835158", "sighting_of_ref": "indicator--dfa149de-30c7-4314-a017-e89fa37ab3d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b471fa-5e84-4da6-b9a0-1153b29ec807", "sighting_of_ref": "indicator--c0dabbfc-1576-43de-a696-e90c74aea94f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9b5d82-a2b2-432c-bbcb-d4fff66eee83", "sighting_of_ref": "indicator--3b85f5c6-b769-4c35-98c9-4d959f0c6471", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1246d7-9a49-44a8-8f2d-72e388afcb85", "sighting_of_ref": "indicator--2291440d-c311-4b35-9ef8-737fe1903d05", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7246897b-11db-475f-8eea-f4966587f283", "sighting_of_ref": "indicator--4987cda4-691d-4bff-bc2a-d8db235fca79", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e970adb3-d595-49b4-8b32-bc878ebfd809", "sighting_of_ref": "indicator--68a9254a-e400-4a4f-86db-359f4246f7e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5725f067-7cf6-4c75-a7ff-cbe20c14e5a5", "sighting_of_ref": "indicator--1536659d-9029-408a-a665-bc343c308483", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88616f07-97d3-4f67-a05b-f6162fc9fdc5", "sighting_of_ref": "indicator--0ccb0a1e-eb30-4147-8152-c7c223ce7cc3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0e6490-4f94-49b3-84cb-9fffa53e7a0d", "sighting_of_ref": "indicator--461085cb-6632-49fb-8753-40cbdee73b08", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ba060c-1906-4d2a-8f4c-273f43b85b8f", "sighting_of_ref": "indicator--9275ee05-00d8-474c-9a6a-57d8b810a4e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593504ab-0866-4110-aa30-802b9db85e2a", "sighting_of_ref": "indicator--1c1bb2a1-672b-4732-8cc2-76efd87a34af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d242358a-14b5-42f6-bea6-0b08b23fae5b", "sighting_of_ref": "indicator--7ed8ef76-e1c3-4585-93af-62be08b3f25a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fe7871-a00e-4439-84b8-f09efe987f89", "sighting_of_ref": "indicator--d9bbe4f1-28d8-43a3-b696-cc29262ddf5e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d270c25d-eec6-413e-a24b-3c50565f746f", "sighting_of_ref": "indicator--8dec3d7b-d535-4d36-9e44-ba4cc763e4e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88c54ba-f2aa-4571-879c-67d65b444f2d", "sighting_of_ref": "indicator--6832ebc3-c458-4038-971a-7b1006bf3da5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ac9b02-93d6-4eeb-a77e-880f9ada2b47", "sighting_of_ref": "indicator--b68bdfdc-4ae5-40ce-8220-76c61f0283f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0527676-5195-4861-b296-3ca06c4ba792", "sighting_of_ref": "indicator--e8bf19bb-37df-41ab-8e0c-cd382cc50192", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3de1611-6b7e-454d-84b1-5ee7494752ae", "sighting_of_ref": "indicator--0aaef619-a0b2-477a-a2cf-5d1ac35cf367", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac47574-ad03-453a-91cc-60c378a46897", "sighting_of_ref": "indicator--6df69afa-2a92-4016-8dab-ea642989a12d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46b263f-49db-4a9d-a000-de6e085c4c70", "sighting_of_ref": "indicator--d5eadb4b-6365-4ca8-8180-f3305acf4660", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c017a22-888a-4eb4-acfc-2f6d1b5a7005", "sighting_of_ref": "indicator--66ae884c-b135-4ee6-8ed5-516d29354e4f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799db74c-aefe-49a7-a333-4a97d015df9b", "sighting_of_ref": "indicator--83ff2d1f-213c-4072-92e1-9b8cbfff5896", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5d008d-6df0-48fc-9b43-52fc48b1c57c", "sighting_of_ref": "indicator--448ec259-a89f-4198-b18d-455633777de9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3908fe-c3f5-4f9d-8aa6-b0eb204c0710", "sighting_of_ref": "indicator--84201f76-e6c9-4029-b298-5d1b5afa983f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec2bd1e-4310-4723-894a-4f5ea788ada2", "sighting_of_ref": "indicator--dd070dd8-ac5e-4367-9e10-865b2b79947e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e97ecb5-a3fb-4be1-ae36-fa0fcf548d77", "sighting_of_ref": "indicator--4a604d74-394c-450f-b3c3-865c885b39fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8023372-e1ff-4d94-aa40-b96dd650fc8c", "sighting_of_ref": "indicator--86458ff9-df75-425e-a760-5d765aa8b14b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8ed741-5db4-446e-b315-d18f57f218ba", "sighting_of_ref": "indicator--f018040f-4047-45ea-abab-0fde879a93e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df599b8-d013-4c27-92d4-bf30fd9c5b3d", "sighting_of_ref": "indicator--130e83c0-6a8d-441f-89a7-77c8be2798cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a489ecd6-2d1e-4ee6-93f2-91221c72d3fe", "sighting_of_ref": "indicator--a000a2e5-d507-4b02-97d9-372b2732abf3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf85f3e1-c5a8-45c9-b962-913a9d1ef59b", "sighting_of_ref": "indicator--0f70215f-11f7-46ee-b813-2e5564403b78", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e163138-d61a-4196-a648-554f117516f9", "sighting_of_ref": "indicator--200dfaac-15ab-4b69-822b-c1011f79b460", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d8d9de-bfa5-40b0-b5d7-d61aae1077e6", "sighting_of_ref": "indicator--6d7f3680-7cbc-411b-b720-a11c09cae5b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb587d9b-b1e7-4224-a49e-af83e12a0edf", "sighting_of_ref": "indicator--c6a1ad33-0cfd-4272-955a-4a632fc2ae47", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a94501-2ff9-4149-ae07-76943daeea3c", "sighting_of_ref": "indicator--0f1c7045-a45f-48e4-91a0-d6da8ec302ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9885a7c3-5d48-4842-89cb-1deb4275a748", "sighting_of_ref": "indicator--0d1cc4d3-7aa0-4ac2-ac81-cff67195370f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffa1b34-6ce3-4a10-af40-ef9220881e48", "sighting_of_ref": "indicator--c1bc2943-756d-4994-b29b-eb40b1c7d749", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281220cd-c790-4c48-97ef-9982e96886b0", "sighting_of_ref": "indicator--ae48c2cd-427f-49c7-ada7-9386c75fd9a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3494598d-f7d7-41de-bf93-5b93100c6779", "sighting_of_ref": "indicator--8194e655-92e4-4e7e-8f87-e8de6f3bf84c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9eff5a-2cf2-4ef2-b8b1-b7663e4a8a6e", "sighting_of_ref": "indicator--ef5c67b5-2d69-4ca1-8079-2d26b9855b0b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0f1876-7157-4463-89b8-4187f4f0911f", "sighting_of_ref": "indicator--6b5039cf-a1b6-4cc5-af99-45b68d07821c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb10922-3a28-434c-b325-cb8587651d15", "sighting_of_ref": "indicator--960a5da9-da1c-467e-9603-aa5d3a75785b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474dbbdc-b686-4433-a206-f2b294110ce7", "sighting_of_ref": "indicator--019f220b-03d3-42bb-8cf1-af3f513e3b10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dbd589-edb3-438e-ba64-43061cb25c81", "sighting_of_ref": "indicator--146848a5-1c9d-40af-a2e3-eb1ae51d1acb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24ee9c4-9edc-458e-bd55-7632c4d4d477", "sighting_of_ref": "indicator--390a1c32-decf-4344-bb8e-586daf7034ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47fa9d6-98bf-484b-a3cc-9421d5289caf", "sighting_of_ref": "indicator--57d7349c-3528-4506-88bc-b7c629e0a2a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8690d267-c459-4925-8665-4e3e619f469d", "sighting_of_ref": "indicator--60c4f7c4-ca34-4448-80d7-05a0b01421ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41174e3e-3277-4d63-97f7-5d456a397824", "sighting_of_ref": "indicator--0a378c60-9314-4d34-9492-96c051fb03cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600e38b3-f4e0-4e5e-a9b7-cd305b741c77", "sighting_of_ref": "indicator--948c8f75-d30b-4d3c-a946-94058a304239", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86899222-8794-41a3-9d42-78adad36db21", "sighting_of_ref": "indicator--d7f63e5d-f0f2-4a9f-9daf-40954dcdd4a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36c33f1-84cd-4c1e-a38e-4013c839da3f", "sighting_of_ref": "indicator--dbcf39e0-ab48-4860-a048-d1c1882940e7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbc47b2-e2c8-444b-b09d-704a7ecbb2ca", "sighting_of_ref": "indicator--a52a4744-6814-4df1-ac89-9cfe796061fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f029d649-b5fd-4d0e-9b04-b1caec940736", "sighting_of_ref": "indicator--85e1848d-1e49-4561-8e0f-74bd45c9e9b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a38fdb8-889a-49f2-846b-9c5bd5e3e9b2", "sighting_of_ref": "indicator--3e4bd0dc-cfc3-4381-a275-dc9871181a79", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a81dd3f-5d52-4bf6-9889-eee9bf71b33d", "sighting_of_ref": "indicator--297aab31-3289-4a9c-a888-62ab5f30c686", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df722791-7a63-4b94-8832-e4bc41635bc9", "sighting_of_ref": "indicator--ab8d2ecb-0a84-4042-b7c8-abb9d5592cda", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f9f527-f6d3-4f00-8bd4-fec78ee47efb", "sighting_of_ref": "indicator--1eb6862c-e4d9-4d95-91ec-966c1627b6b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc157d5-6df5-4be5-b4bf-00fbb304e7cf", "sighting_of_ref": "indicator--940f3cad-0837-4ac7-9db5-554ef435dc6f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c569b00-6a93-44d9-8ea6-c97da6faee5d", "sighting_of_ref": "indicator--abf07f10-9e66-4a43-b05d-7166cedb9e14", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422372f2-d755-49e9-b5fa-1dc2a27d62e3", "sighting_of_ref": "indicator--ca5bae94-aa30-491c-b687-0029fc19400e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfeba11-134c-4b7d-a4c8-0fb77be2175a", "sighting_of_ref": "indicator--854b9141-4dce-4149-8e45-724137bc3a63", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43909c9c-09ea-4518-9c07-780aea5092e6", "sighting_of_ref": "indicator--6d4b93f6-68d0-4adc-afef-1d6d6c101295", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c089515-47b2-4979-bd16-42eb224b4bf0", "sighting_of_ref": "indicator--65f1b110-bdc2-481b-b603-51488f036d98", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d443846-1566-4234-bd32-fb7f3f12b625", "sighting_of_ref": "indicator--5b75cdae-52eb-496d-b2ab-a93e42548181", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4f8aa3-9467-4de5-bf74-ed23aea36a97", "sighting_of_ref": "indicator--1b5d35ec-213f-4978-aee3-6c4d474ac7b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57affcc2-bd3b-4e23-b79b-6d8be528e268", "sighting_of_ref": "indicator--313b62d1-6f1a-4b29-bcdc-ff855e53b837", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1073cae9-21fd-497d-9d40-ecd88d006184", "sighting_of_ref": "indicator--c8f4452e-787b-4742-9911-eb998aa3624e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba0be4c-0c4e-4e06-acd8-6ab88caf3bef", "sighting_of_ref": "indicator--7a5252cb-b888-4d20-b8ce-7a3ea7802d43", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad13aac7-68b4-4db9-aac7-0b6b5e954415", "sighting_of_ref": "indicator--799bec0b-663a-466d-8116-9b7937da442e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7009dc-15f5-44f9-8acc-25fb98803e00", "sighting_of_ref": "indicator--936e2a9c-f5de-411d-af0a-a4847a83f5a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b60626-263c-4855-baa2-9e77afc27b68", "sighting_of_ref": "indicator--5393126a-b3d5-4833-b989-e54dba02a0b5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7568beb-e7ca-41f0-8686-4919004fa35e", "sighting_of_ref": "indicator--0d132b1c-5258-4537-8d18-282f54e6808e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d81edc-b414-400c-ac00-16634f5943aa", "sighting_of_ref": "indicator--6035720c-26bf-4f1a-a8fc-12ca7c47b2d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00444b2e-0517-464c-b0ad-5c3746edb826", "sighting_of_ref": "indicator--1fbe6732-9fff-492d-8672-3234613c1ef2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275b86d2-ba12-4f66-8d4a-20ee1a1661e4", "sighting_of_ref": "indicator--b2fae730-cc0d-4fae-a774-c366fedcaf51", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3957cd22-bf37-453b-b55d-4f6f7a200126", "sighting_of_ref": "indicator--f152dcdc-5048-4602-8757-ea333e65810a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e568fa7b-4509-4243-8ef6-2c294027a2a9", "sighting_of_ref": "indicator--3e7fb79e-15ff-4778-99ef-3f285fd07035", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0dbba9-7230-4d23-b61b-dad0776c3972", "sighting_of_ref": "indicator--5467371d-b327-4ed5-ab4c-88c688002798", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e55f510-6503-43a8-bc99-41dfc3cd5258", "sighting_of_ref": "indicator--6960d025-d037-41eb-aa90-7fb79270550c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b394f3-2a41-4ca4-9015-2f9be17dbbe3", "sighting_of_ref": "indicator--5fb3b3a2-d6fe-4278-904c-c2784e026307", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479635fb-2331-4077-97e9-278fe2f13f3d", "sighting_of_ref": "indicator--5a75aa23-ab0f-4e2a-8891-13f770981b08", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35503e94-acbb-4521-a3a6-43862e2821c9", "sighting_of_ref": "indicator--cf7a64a7-de5e-49ab-b177-1693f5f31576", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11074e13-3ecd-4524-be59-7a9f1a5607f4", "sighting_of_ref": "indicator--ced70c26-a9a5-40fa-a71f-342d42245457", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6169c469-9a53-44cd-b030-a1d1dc3a9698", "sighting_of_ref": "indicator--f3656b00-b416-4b32-ad6e-cffca56e533c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2900c2f-ef3d-48c8-b77f-82213c93dc01", "sighting_of_ref": "indicator--44eb6023-3807-4dcc-aa8d-46847ecb1a9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e510f6-a49c-4571-a399-b13cb6cf0872", "sighting_of_ref": "indicator--1d206df3-89fc-4eb5-80ac-b44e387d9ada", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3db610-7ff7-4c62-9a40-432c6724a3cb", "sighting_of_ref": "indicator--a019645f-6353-47bc-8d2c-6c2e17e60659", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00560f75-0be8-41c7-8ee1-649738340db3", "sighting_of_ref": "indicator--26b035d4-6aa6-4e1e-8f55-aa6cddde1470", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2fc66b-a53e-4d2f-bc9f-2cd7f0096e0c", "sighting_of_ref": "indicator--d325dc7a-8473-4cba-a0fa-1a1f68ddbb66", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb50ab8e-c564-4000-bbbd-3472e00b828f", "sighting_of_ref": "indicator--8c5e541d-2baf-4e45-83ef-8ff530f7407e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07566657-23ef-492e-be51-d36a062a3b5c", "sighting_of_ref": "indicator--2131b2b2-a3f6-4503-a869-0127f75e7815", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a32941a-313e-47e9-8439-f20278fcde63", "sighting_of_ref": "indicator--1c82d6f8-b0cf-440b-90dd-ffb8d73dfa31", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d0e10d-5e38-41ac-b30b-a908c601e5ad", "sighting_of_ref": "indicator--6c996058-ddd5-4bcc-8667-39d1344e6798", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86499eda-3878-4be6-b637-09fa0eea6bb9", "sighting_of_ref": "indicator--d65e5da4-3716-4ba8-98b9-755db4dfaa18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28c90aa-6bcd-441b-822d-5bad2e4c0504", "sighting_of_ref": "indicator--3552e6cb-2585-43ef-9e6d-8c9ac3bd6506", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864abe25-8afa-4499-952f-46cd6ece8082", "sighting_of_ref": "indicator--61e3d496-e668-4d07-8111-314be206453b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d491a2f5-94e5-4330-8afb-15a45f876963", "sighting_of_ref": "indicator--20105ca0-50df-4cfd-b2e1-ac4f670779aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4495d29e-a517-41c6-bde7-6d26c93d0141", "sighting_of_ref": "indicator--04a6684d-f37e-401d-8fb3-eb78b366fdc0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffba1d1-e93e-4248-b29d-67663754295b", "sighting_of_ref": "indicator--43e7d955-adb4-4303-a542-6749bce669f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19c893e-d885-4fa2-9d90-14ee06a89836", "sighting_of_ref": "indicator--c5efb7c6-c3ee-4f4d-8f4a-9ee50fa863bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a3a620-4d0f-4e35-aa65-40f14f31c39b", "sighting_of_ref": "indicator--a72b22dc-e6dc-4689-b1d9-68285ee57465", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b34c5c-2f63-4a2a-830a-c75bce5d6228", "sighting_of_ref": "indicator--64978d37-a1a2-4555-9739-edf11e3a67ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124a8e0b-fdc0-4de7-9c80-83c3bd4191a4", "sighting_of_ref": "indicator--81b74694-1b1e-40ed-9acd-7d83136820fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b8a6e9-c645-43ae-b628-1325e777dcf0", "sighting_of_ref": "indicator--00be984c-97eb-40b1-8a4a-30456fd2268d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d892b33d-2fd0-4215-9048-dd8ede5e0f00", "sighting_of_ref": "indicator--3fbcda6d-8486-49fa-8933-d306fb9fd509", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63540eaf-23ea-437f-a0f8-a6b8418fb3f2", "sighting_of_ref": "indicator--5d45283e-52de-42a8-8439-4f71faa796fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4ba4f6-dd23-49d6-8574-a05c24575488", "sighting_of_ref": "indicator--30f9df9d-5e0e-460d-9bd0-6c2a8f3bc531", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cc26ac-9651-40ee-90d7-a04eaf8dda45", "sighting_of_ref": "indicator--d56fdff5-406c-412b-89e8-db759275ceff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3f3226-b18e-4890-8693-c896dfec61b0", "sighting_of_ref": "indicator--f8db1fda-3111-4129-8072-fc6ff5c7fa11", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3856c1-fa0b-4abc-8769-fddab179588d", "sighting_of_ref": "indicator--9e577a7a-28bd-4863-8e30-7b500b0dd1b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46b7bdc-077e-4f99-9237-f6f9b10360cd", "sighting_of_ref": "indicator--df5681d9-c84f-409d-89df-3b51a455788e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b3902b-a598-469e-9ed9-5a24186af8da", "sighting_of_ref": "indicator--7b074fa0-a9b0-4b24-8672-a664d57dc5e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1412fff2-300f-4a32-b7c6-107c44db8ea4", "sighting_of_ref": "indicator--a77f524c-3ada-4e78-a166-2ce0aefa3749", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ab4f98-2321-4340-9a52-7e4d876558a9", "sighting_of_ref": "indicator--d1ac5605-b36e-467b-8ba9-45be3297867d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce39d95-02e9-4500-ad8c-0c5a3bf716d0", "sighting_of_ref": "indicator--6f4a7362-1402-4c50-a201-1d870b8125ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b736ade8-cbab-4bf7-8ffa-ab3861072c39", "sighting_of_ref": "indicator--4d6c93d5-24f8-4b01-ab52-50a73e2ec4d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bcdbb9-28e0-4aad-a3ff-faa10014c6ed", "sighting_of_ref": "indicator--ffb1df90-94d9-4ccc-bc1e-2ca8b0a226a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b3560b-e5db-4957-baa1-de750b9a9bd2", "sighting_of_ref": "indicator--268f455f-eb6b-4680-af41-f271766851ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915f1e30-c9f7-4148-a7b8-b119ca2f3935", "sighting_of_ref": "indicator--90501edd-859a-4c12-834d-6f6002e4eec7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0192a3c-c4c1-4a58-9046-70229930edca", "sighting_of_ref": "indicator--5796b42b-438d-4f78-8e52-5a9edecacdb1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f75c3a3-cef6-4cb9-bb24-9b9e7a471921", "sighting_of_ref": "indicator--eb799113-8e2a-4723-a1af-2ce7d5981d74", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c5dfd5-8391-4dee-8d00-7610022474ae", "sighting_of_ref": "indicator--4422f1f8-b7b2-4f12-9214-07da25c1a1dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68966ed4-2496-49ad-84c7-39f795e47bd3", "sighting_of_ref": "indicator--90c9a4f6-db95-40a0-96d6-0ebeda06712c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7633106c-2ee7-409e-8300-dcfb42687509", "sighting_of_ref": "indicator--2ee3e1c9-99eb-4bc9-bf38-d39c6f3e7541", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd3929d-ed49-4c93-868e-57b1cb93efae", "sighting_of_ref": "indicator--5323c693-0b4c-4175-b9d9-24b52077f2c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfb85c1-0805-4bb0-bb54-933eaa9de984", "sighting_of_ref": "indicator--f02e4480-7212-4665-936d-f2c56b28bdb5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3082a219-808d-4777-afc2-a5d5d3abed54", "sighting_of_ref": "indicator--1ba3ef85-27cd-49e9-8d12-6fc9c75d559f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfa9fd6-e681-4e61-a6d8-0b5ab1a99a6a", "sighting_of_ref": "indicator--ed797689-9c74-4cfe-8602-85de037cc2d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a80873-f6e9-49dd-9a83-b58c8afa2ffa", "sighting_of_ref": "indicator--664b0912-693a-481f-a1ab-8390c4b2b989", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba31d97-7066-40d0-96a5-4b788ec3366f", "sighting_of_ref": "indicator--62917e81-bf58-42ff-a707-f0c463719a97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bf6aed-5f28-4c11-aa14-d711260cdaa5", "sighting_of_ref": "indicator--843b496e-50f0-422f-a93a-a1a5ab282ac4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7f54f7-cd60-421d-9d47-0e7107525b9b", "sighting_of_ref": "indicator--7d6c211a-0e4d-49ca-b74b-69b376758ee6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4b84ca-dc6c-492f-8272-c53dff97f26f", "sighting_of_ref": "indicator--9baa160e-d4a7-45b7-bb75-db000ffcda8d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d708020-f4c7-4c94-80f2-95e83e605418", "sighting_of_ref": "indicator--9e2496e8-e23a-4059-97cc-3bbbc008a53e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f853f27-c34c-4f2d-9448-61694d696a3c", "sighting_of_ref": "indicator--05078c1f-6c0e-483c-bdf2-1a94eba4dcbe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7578860a-f682-4adb-80d0-4454a4954e84", "sighting_of_ref": "indicator--bfafc2a5-98dc-4ff3-841a-048a79d32429", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3366e611-c148-4bc9-95dd-d23d64badb32", "sighting_of_ref": "indicator--498e5aa4-1db5-45d7-9629-52becb176085", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70672caa-66c8-4152-afb8-33d1f8d2d278", "sighting_of_ref": "indicator--25d85312-e740-41c9-9563-a196a58e61fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd587fb1-b7c0-4302-9522-149f71c1d6a9", "sighting_of_ref": "indicator--fe9f8a6c-a0cf-499c-86a2-d5e338007a45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43355d3-5563-45a4-b510-9751de733520", "sighting_of_ref": "indicator--efb72f7c-a14a-4c5e-a98d-4981e6011a60", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2355375-acf3-4469-8a77-f812b63aeff1", "sighting_of_ref": "indicator--ff9a3b5f-a2bb-478a-b856-c67e2f5a72e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7403aa0-a70a-4d8d-b26c-bf7dbdd9b08f", "sighting_of_ref": "indicator--9b29cf3d-6a10-42cf-9874-bace852c7f71", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f347bc18-2d31-480a-89d1-36aa8de6e163", "sighting_of_ref": "indicator--925c651e-c577-4e73-9932-9167a9054500", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46aefb85-e0b5-498e-8474-6af49d624eb0", "sighting_of_ref": "indicator--dc3c04e0-bffc-4bc0-8a1f-4d4ae0860951", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20332a0-1ded-4fba-9666-5d1d8035a1d3", "sighting_of_ref": "indicator--e2677e89-7c03-4a78-a340-2235f282aec4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28521d8e-d50e-4600-86b7-2dc1e616b643", "sighting_of_ref": "indicator--71fe2e22-bd59-4a6a-9d56-80d814384ac7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09443d3-9057-46f1-8549-94f1f9610301", "sighting_of_ref": "indicator--31c5d502-5ed7-4acc-9a7a-c90ae8fd7b01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f271e3-c698-4a6c-bf9e-544e3aa649dd", "sighting_of_ref": "indicator--ed69cccf-4834-497a-9f1a-9921d966b81c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703e1bfd-891e-45d6-ab26-fb440d8768f3", "sighting_of_ref": "indicator--271c6934-58f7-4b91-b841-a9f4e6cb6f71", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b289cc3-459b-40ae-948a-d3a29a8bbbac", "sighting_of_ref": "indicator--ef9ba9c5-5353-4fb8-aab8-5fdf73de4279", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84635df3-5560-4bc5-8d88-dea6ef1c0c59", "sighting_of_ref": "indicator--a1b37b14-b768-4372-86f2-88830d771290", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ff1274-3e56-4607-bbf4-9d8d4824a99e", "sighting_of_ref": "indicator--21cd85eb-ae05-49c8-9f3c-3c8e5591740c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea7e36f-cb06-49d9-9fa4-849bf414ee72", "sighting_of_ref": "indicator--cd28adf0-1ff0-4e5d-8ee3-54a32eb760fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae17127-0f63-4fdf-ac01-d81f419b9aeb", "sighting_of_ref": "indicator--3a2efe53-dbdd-4ca5-8bf0-1047230c76a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8250ab0-370a-402b-b73d-b62365e2f4b4", "sighting_of_ref": "indicator--79279a39-d844-4d58-96f5-1567b8bbd762", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbde867-619f-487d-bd8a-13e898d7c34f", "sighting_of_ref": "indicator--9d5c85db-3f71-4266-92aa-b7d9d441af79", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1c8191-f781-4f9c-8aed-676c7e11c4f4", "sighting_of_ref": "indicator--354b00b3-5a68-408b-817b-f7a137f74c5a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ebacd9-b9ef-4dab-8f19-3a602a9bd18b", "sighting_of_ref": "indicator--7fa4c928-4640-432d-bb51-d613fe3a99dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f442bc-1a21-4668-92f5-5726ac46d117", "sighting_of_ref": "indicator--6e9b9911-9fd8-40be-9f75-fd9b0e2112b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb35ed4d-e5bd-423c-aa6e-3526346bd56c", "sighting_of_ref": "indicator--e6e65b24-bbb3-44ef-83fd-99fd0029cc68", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c627193-1f15-4027-b5d8-98f4efa2ac0d", "sighting_of_ref": "indicator--d2059e13-6bc5-4b92-a5ff-74671c434f82", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d5ef43-3df6-478b-a76b-83a3effe81a3", "sighting_of_ref": "indicator--ebde72f2-b5fa-4d00-8da0-90b5e7782880", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5cab05-0780-417f-ab1a-d1c9999219b6", "sighting_of_ref": "indicator--6dcf68fb-d8fc-404d-bf4c-8797a5fc3d9d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36939552-e009-440b-813b-f8e94bd1897a", "sighting_of_ref": "indicator--3cadbbdc-234e-4762-aabd-bb59f6c0bdef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e51092d-eb99-43ed-bcca-4ebacca4ed5e", "sighting_of_ref": "indicator--545707da-2e4f-441a-9b7a-a48554a8a1c7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c358c28b-2125-4a63-96c1-eea4bb35291e", "sighting_of_ref": "indicator--ada1ac0c-a3db-42c5-9108-ed485a395a75", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09f6b04-8e87-466c-9da3-44b972b86ee7", "sighting_of_ref": "indicator--d7d7a2f2-4c87-4cb1-8285-5c8bf2740b87", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cb069a-501c-4264-ba18-c5bcc9921781", "sighting_of_ref": "indicator--b93046ad-d242-4e8e-adce-38ce79e9a5f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0a13b5-03bf-4d21-8f16-a32510293fc4", "sighting_of_ref": "indicator--e8216fd0-fd8c-485c-a863-e093fae09588", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f87b484-14b1-4962-879a-45f14d578823", "sighting_of_ref": "indicator--d7a49b5e-d8cc-44bb-864e-cb4b5027215f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fcdaff-53d4-4804-8a3d-832ed31064c8", "sighting_of_ref": "indicator--07eecf1f-d7b1-4454-84d1-6ba5f69c2830", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0890f1a7-89cb-4c0d-8664-5a7d811b3e53", "sighting_of_ref": "indicator--be97165f-af5d-4aae-a1bd-8ad7ba156ba2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082a4719-05c1-4d73-85fc-ff91ad6d5c33", "sighting_of_ref": "indicator--6710295a-96e2-4cb5-88c1-d43051396f35", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a799a727-faa3-48d3-84fa-300254f1afe2", "sighting_of_ref": "indicator--e5299944-9924-4d5e-ad65-28039179873c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c393b1e-7a4d-4de0-a11d-e959a847ebd3", "sighting_of_ref": "indicator--189e0b9d-d10e-42c6-a06c-2258cb14742f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2c13fb-e9d6-4cea-a403-f27e11d666bb", "sighting_of_ref": "indicator--1f3f509a-a62e-4599-8008-9f037c221186", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7292f174-f14b-49ce-9190-5f6bf93bea44", "sighting_of_ref": "indicator--d691e32a-fc2a-4384-a18a-8fd1edbbf288", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d0dcc3-b0e7-48ea-b972-35e611a100d0", "sighting_of_ref": "indicator--be192480-661b-47ed-9cd8-9bfafce35fcc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84700d43-0b49-4333-96ea-15d40ff4df77", "sighting_of_ref": "indicator--a04da9b5-95a5-4293-b2a8-d1394521f469", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedefb47-f7da-485e-b3b0-1b8a20a5a963", "sighting_of_ref": "indicator--79275caa-51f4-4ba3-a182-5b7e2c21eec4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b027cd3e-8f4c-44e0-af1b-00b1b29e5a1e", "sighting_of_ref": "indicator--bf00cb8d-e581-4589-bfc7-4f7fddce8fe8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2742328c-fdec-4485-8300-9bc025a24f4c", "sighting_of_ref": "indicator--132437c4-1026-47d4-8074-ef10d242d60f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fefca93-a603-4f2c-93ca-8c32b5232146", "sighting_of_ref": "indicator--f6390eef-3a25-4989-8604-93e62df61c57", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a71a1bb-e02a-492d-b63b-eb51297c89c6", "sighting_of_ref": "indicator--b9523da4-c7e7-42b2-b5c2-1d83de88fd17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abbdd0b-48b0-4d9e-8e64-52bdace48ccc", "sighting_of_ref": "indicator--b79ed34f-01a6-4b65-968a-885a65d055be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcf7428-a092-4de4-9015-f35f1b7e6b07", "sighting_of_ref": "indicator--77aba2f5-fec1-41e1-b0ef-3a9f891bcae7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde6b728-c2da-4b52-b954-f383120bf77f", "sighting_of_ref": "indicator--38d60a9b-cca4-4f3f-9550-4fcf6bef4ef7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5aab2ae-b2b9-46a2-aa42-3bc198f4249d", "sighting_of_ref": "indicator--55f772d5-56ed-428a-8adc-018bbb2a20d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27055aa5-2fee-4114-8494-bc6503343bed", "sighting_of_ref": "indicator--9332cf01-cfea-44a3-9acb-5bf8bbd1288d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e424b20-361d-409b-95a6-80fb93b1a896", "sighting_of_ref": "indicator--e59b58ac-f579-4f4d-9e12-b56ed0f70102", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e33e98-a5f4-43f4-b795-855b4e31bce7", "sighting_of_ref": "indicator--7cb9188e-1861-4f4c-8cc0-64edf1d09a7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c05fb9-db4f-4cf8-80dd-5086fcc8f817", "sighting_of_ref": "indicator--03ff98eb-686f-46a4-a3ad-93bfdc71da3f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187fb4e3-0689-48f9-8a7a-e336a5d4a315", "sighting_of_ref": "indicator--fc5a611a-e905-47a1-aaad-bd2f9e73962b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd32833-cdc1-4b1a-aa20-446824c141cd", "sighting_of_ref": "indicator--41ee323e-704f-4060-a368-7fe63eaab045", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66e270a-5f34-4e34-b1cb-73e7793f25cb", "sighting_of_ref": "indicator--dc5ffc0b-7c22-4032-92dc-5313de88682c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc68bc1c-9f35-4a8e-af13-f67b60dc1136", "sighting_of_ref": "indicator--b82b6cc8-82e0-45fc-abee-96d85100c520", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f94911b-1680-4071-a982-6e464864c89c", "sighting_of_ref": "indicator--f806c817-6b58-43bc-9126-13e56413086e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd20b35-1250-4598-a06f-503d807ddc5d", "sighting_of_ref": "indicator--ba4639d1-b39c-4434-9dab-9f6ba026462f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687cf1fa-6a71-4aba-88e4-d4c4bb9e3fd3", "sighting_of_ref": "indicator--48701089-6cab-4658-90db-fe2bc5b02589", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2891b6-3e4f-4c56-912d-e2478bf21445", "sighting_of_ref": "indicator--e8505c69-642b-43a4-94b2-9c3fd0efd656", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e82ea8f-9650-41fc-a4af-cd2791663a0e", "sighting_of_ref": "indicator--50ed4b8b-c8f9-457a-9590-8dc2e52769e4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0988ddcf-9e83-4a3b-9773-b19e0a80e44e", "sighting_of_ref": "indicator--b4bcb51e-1651-4233-bea4-17eb8b962a7a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bbac59-d1f3-490c-ba07-6a98216c530f", "sighting_of_ref": "indicator--d2fd3f7c-723f-409f-a2be-7cd858ab7bb2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae0e38e-6030-4b1a-9fa2-715ce6fc1ea7", "sighting_of_ref": "indicator--3f43fbba-6712-45d1-9b1c-83b6c86067ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae5580a-74ea-4ed4-a68d-c04eabf61675", "sighting_of_ref": "indicator--283d540c-a754-4fdb-8fb3-c78647300677", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f176dbf6-a0ae-4d35-a697-919e36a5af61", "sighting_of_ref": "indicator--b5843092-c0ff-40d1-bd24-e18dad2d396e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cb09f6-6f3c-406a-96ab-2a7456990397", "sighting_of_ref": "indicator--f11c480b-02f2-442f-ac72-79cccbc75622", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f1fe31-2860-47b0-9e64-d42bb488dfce", "sighting_of_ref": "indicator--393de175-4691-420b-91db-01e113de3669", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d00dff-a1fd-46f0-a1d3-df0e3a062cdc", "sighting_of_ref": "indicator--abbd7269-e8d7-4646-8727-2ff67b13aace", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c59830-f817-4ad5-ad0e-2c708b5f2437", "sighting_of_ref": "indicator--a5ea7f4b-1bf1-4aaf-81a6-2935f400658e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a48da2-9319-4857-add6-d5332283c8dd", "sighting_of_ref": "indicator--0bc04c4c-7391-4424-834b-0a087fe76dda", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbff971-94e7-4c8b-af9b-ea5d6cc0bcb4", "sighting_of_ref": "indicator--3fb77001-e5a2-4b60-957b-9b6f88ae9b70", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8236ded-a6a8-43de-83bf-49267d610e59", "sighting_of_ref": "indicator--65b5ed00-b0d3-4a19-93a0-621c9ffbe4a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c582edc-f91e-43fb-996f-7099de82ac15", "sighting_of_ref": "indicator--224b7b19-f585-4022-9dce-973ef65caa0d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b886d79-dbc9-4f30-8f4f-0fc7b8570e5c", "sighting_of_ref": "indicator--0b5570b4-b8c9-4822-9a88-7021e7d74641", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24b1cd8-941c-457a-86f1-e8a214dbf549", "sighting_of_ref": "indicator--f7739d76-3017-4035-b55b-66b5255bc518", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1851652-70e7-40c7-9423-3d329a39e424", "sighting_of_ref": "indicator--9a1ac368-4a46-439b-ba0a-a3b9a99ceba9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd7f88f-8ecc-468b-80b7-cda6c56314c3", "sighting_of_ref": "indicator--f6330684-dd08-48a5-b9b1-5af4c2108dab", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c782096b-a28e-45fe-ada4-2f8dac256e3c", "sighting_of_ref": "indicator--68671ff6-aaa3-4a26-acdb-0aae42b4bc2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e742ee-3f82-4749-a2b4-0b802d1a33d2", "sighting_of_ref": "indicator--711c9540-69c6-4563-8203-b15ce146d46f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c20e19-7420-4261-9444-9f43f2234ecf", "sighting_of_ref": "indicator--bffc0aa9-7df6-4e90-9c5c-76099f815c95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01032e1-5961-4897-aaa4-170aa0b01ffb", "sighting_of_ref": "indicator--29da30e4-16e2-4af4-854c-27efd7a398d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898a858d-9024-4975-9703-174c018e7ff2", "sighting_of_ref": "indicator--b2ebd2d3-e900-48ca-b5af-c078b744c8d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b73c4bf-c14d-419e-ae01-5118811ebf0d", "sighting_of_ref": "indicator--9ae5d5bf-11a4-4697-ba1a-146803a01972", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12cc89d7-c040-414d-a8c7-a9ed6561ac38", "sighting_of_ref": "indicator--97185e27-a68b-4be7-a5d3-f82c662fb664", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0249b7e0-8b95-4359-bd78-2fc1d347c593", "sighting_of_ref": "indicator--8a5eedc1-1188-4405-a901-7e994e697c28", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb06edbf-a73b-4bd3-a2bc-df598cf4f470", "sighting_of_ref": "indicator--102164ee-3521-4dba-bf7e-22494d1a7a71", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe63029-f414-4018-9cc3-e47a25b079f3", "sighting_of_ref": "indicator--49270c8a-28b5-4718-a9e8-aecf80f7c166", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82992800-b8db-445d-b21b-53f5e2e15ddb", "sighting_of_ref": "indicator--712876e2-9e6e-4121-be73-63db67452164", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a44c15-1e7d-4443-a12d-582d4a122d05", "sighting_of_ref": "indicator--09b9ec51-fc44-4d81-a5dd-f3ae5f69c3ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3526ee-867c-4f8c-be17-141b1a80bc53", "sighting_of_ref": "indicator--0189f71a-8d81-475e-9723-93b7525f7512", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1dadde-3cca-43d0-9dd2-b9ea65360f63", "sighting_of_ref": "indicator--adf63771-a928-4850-9ec6-431036146beb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1aa9b7-e8fe-42b8-bace-37c66165c4c5", "sighting_of_ref": "indicator--c3767681-484f-4767-a400-cbded846ed82", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94267377-6534-43b5-94e6-99235153823e", "sighting_of_ref": "indicator--178bb7c1-8b78-4189-ac93-ada384764d46", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5922b922-14a9-4302-88db-f95a41e15013", "sighting_of_ref": "indicator--790cc5d5-542d-486d-af9a-c8532399d4dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2de95e4-b919-47c7-8ed5-ad46991f0545", "sighting_of_ref": "indicator--f4a83cc9-e01c-43ae-a4f6-75e5850a8d41", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7c0f13-3d5b-4608-9588-ce116e2a7edb", "sighting_of_ref": "indicator--ba3a46ef-4204-423b-815c-6b376bb81bf9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a01b3c3-8191-49c9-86a4-e40515215d72", "sighting_of_ref": "indicator--2a51747f-f581-4bdf-bc59-871e7af94ce9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4a0c28-671d-48e0-9340-a3a4768b88fb", "sighting_of_ref": "indicator--84c7d1ad-2dd0-4e22-bebf-c4561959af87", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d442d4-14bb-41ac-8d3c-7ca4456f9659", "sighting_of_ref": "indicator--e01c10be-4509-4ea6-8746-cf349a26bb4e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74c4fa3-b175-4ee9-844c-54cee9522c10", "sighting_of_ref": "indicator--6881aa99-374f-4b44-8d7b-f57844d7c555", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acf3566-89c2-4b6e-a21a-af3deea201ed", "sighting_of_ref": "indicator--4ffd7e01-6915-42e8-bd33-787f8019752e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb122b1-d824-470a-8a90-a2decf3e076e", "sighting_of_ref": "indicator--78d6e96e-0827-4c6a-9d36-936021fad4d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed61d80-b86a-4faf-af07-81e244e28da6", "sighting_of_ref": "indicator--3979f513-9739-4a11-88da-6d32e5f17ab4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6323e7-6b44-4ba3-9236-5b07196b497d", "sighting_of_ref": "indicator--dde30d0b-333f-4bd2-a32e-0213c51da2ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8abd03-8c52-4c86-9176-2e3bc730f707", "sighting_of_ref": "indicator--85d050cf-ffdd-46c0-9f5b-7fd909748e1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f672089-28b5-426b-8f9f-769cf55f4d35", "sighting_of_ref": "indicator--b046b08f-ecab-4441-a523-ea248ed6c2ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e22b71b-0921-4939-8838-e4d280bc9125", "sighting_of_ref": "indicator--4ccbe354-6430-4e89-8bb2-ef761ac9bbf5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97da7bc-a898-4f67-99a7-6b8b2867e428", "sighting_of_ref": "indicator--49ed8609-94f6-4f89-b566-07f1f9f8ccc4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa29154c-fe7f-4b91-8d4f-856bf0fbac73", "sighting_of_ref": "indicator--0ac46a82-147f-4b70-b0f3-2ebc3eae6038", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c3fbb2-f014-4ce0-a8ad-44f4994b3e80", "sighting_of_ref": "indicator--581fca62-278e-45df-b292-a9d705653b4b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2dc6a4-2607-4d69-89e7-98ce72a4ef70", "sighting_of_ref": "indicator--37b65d2f-bba5-4de1-ad98-34befaa79f85", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f364e385-093b-4033-986d-d0eb95d151c6", "sighting_of_ref": "indicator--208bf565-92aa-45dd-ae3c-87ddcb149189", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ae8d7c-a9a7-4b80-ab56-56ddadedc5e1", "sighting_of_ref": "indicator--a02630c4-90bc-48b0-97cd-b58708dafb09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553750dd-d690-4e4b-88f8-622d9ccbdd22", "sighting_of_ref": "indicator--2e79278e-4dad-47f0-9821-0f2139baaecc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d24c88-19d0-4240-9d22-8e6fe6e4d62d", "sighting_of_ref": "indicator--472d86fe-02ac-47fc-ab5b-dbb940f189b5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46883bfa-2821-4daf-9d0b-0b3049f79fab", "sighting_of_ref": "indicator--fedc32f4-b773-47d7-ba95-9f205c91fb38", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b4060c-6cb8-4590-871d-23ea294040e0", "sighting_of_ref": "indicator--0731e16e-8f7c-4eb1-8c9e-c7dc1974f88f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5063dd-8006-4b9d-b983-9e1282ac841e", "sighting_of_ref": "indicator--3b1c0410-a9ac-4047-92ba-ccc088a00a15", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca042ac-57bd-4a8b-98ff-2888856856f3", "sighting_of_ref": "indicator--a79a4fcf-d6eb-4b8a-bc6a-5ad0e90bdf0a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db704666-2e65-4434-aa0a-919a2d51cb9c", "sighting_of_ref": "indicator--65b2d0fa-2bb3-491f-9dc7-e8051ea557f3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749c1cd1-ef98-4bad-9f39-974cd65026a7", "sighting_of_ref": "indicator--9e0904a2-bbb0-42f1-b738-2772b83f436a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c373c98-166f-47bb-b7a7-974b08b793ac", "sighting_of_ref": "indicator--4ae14e97-8980-46bf-b7c1-dbbc6de13ced", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109603e8-79ac-4eba-8fe7-d5a45cf9b8ac", "sighting_of_ref": "indicator--848df202-ee1a-4f5b-8977-9b0a75555d52", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828efa14-5416-444a-be4a-c5e0b470e8fc", "sighting_of_ref": "indicator--877fd40a-1c31-4882-b967-73ad5a0b3c40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0308bf63-e5c5-4594-82dd-77f445d8dc2e", "sighting_of_ref": "indicator--f6954549-dcbe-44e7-b133-3fd4dacb2b7a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f123bf5-74af-4d94-b5b6-69be15e7cf36", "sighting_of_ref": "indicator--0ea99df7-093b-41bb-b252-046c98a9a9fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32deacf-5457-44f3-89f6-1b5848a6c25c", "sighting_of_ref": "indicator--41ef47b1-7254-40c7-b9f0-8a94e57a84d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca584bb7-c573-42dc-a7d9-ea4e396cff1d", "sighting_of_ref": "indicator--d32cffc9-8bf9-43e4-8044-eb20c48ee511", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa2c9be-7bf5-405b-b2e6-5c5f218375b8", "sighting_of_ref": "indicator--3ba662db-0900-49e3-bd5c-bb08689fc379", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e5001b-87ef-484e-8b7c-79a0cd1375ea", "sighting_of_ref": "indicator--cfd46f04-9fd3-475a-9f3e-94d0345f8dc3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0393d98-ced6-4e22-b870-a2fd865755a6", "sighting_of_ref": "indicator--16aa21e2-0e85-4fe4-8a36-da216f577e5a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1091053f-174a-4f85-88b5-86674c6ba495", "sighting_of_ref": "indicator--9941b3c8-2ceb-4b8c-8926-c76437be7f1a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6f4dde-cfe0-45ba-88b6-ed26af869744", "sighting_of_ref": "indicator--61a4e13f-369b-4004-b1fc-7485751cc223", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b20f7d-3ae0-4e9c-a1fe-b55dc936b5c5", "sighting_of_ref": "indicator--cc958989-0f6f-4b0e-8428-8e68a7120e10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d637ab2-112b-4c4f-8d71-49fdf4392b81", "sighting_of_ref": "indicator--dcc8efd7-670f-4755-8511-a49d5ccb4883", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10059500-38e4-4c0d-a669-6e2bc484ac83", "sighting_of_ref": "indicator--f5e67198-4bd6-477e-8438-2e345daf80a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2ef47c-b6c7-4849-a56f-24e17bbac8e0", "sighting_of_ref": "indicator--adb6f227-aeb9-465d-ac9a-a2b26abfee5b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810c8113-e462-4b65-afa9-5931e715800c", "sighting_of_ref": "indicator--49bfdae6-b430-4d77-810d-e9b06df629b6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35907b42-d6af-4887-882b-a09d9fc7a0b7", "sighting_of_ref": "indicator--649cadc7-8296-4761-af57-b55c958bb39b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7b6b1c-7424-43eb-b899-eb2799bd1600", "sighting_of_ref": "indicator--4d905395-ecb3-4de1-97f7-16fc66efa41a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7d0516-fc39-4281-ba72-c5a8df77df8d", "sighting_of_ref": "indicator--a8a9096c-3116-44cc-b0fe-9de98ff1c5c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced2e24e-ce9f-4035-851d-1d7b4afcda99", "sighting_of_ref": "indicator--ade12725-769e-4196-9a47-0b9efc994df3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d30f0d6-f672-454f-9726-f04a60e83d35", "sighting_of_ref": "indicator--bcdfa10a-194c-4bcd-ba46-58afbf86a6c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d848ac1-8826-4703-8ca3-514b719f46e5", "sighting_of_ref": "indicator--fdd4be39-c5c5-40f8-abc8-a717757ab67a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6352938f-ebd1-4a65-890d-5982212962e5", "sighting_of_ref": "indicator--b09a4efa-e067-476b-9d52-8352452df1fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993e112c-56e7-4aa1-9d31-dffe0b55400f", "sighting_of_ref": "indicator--0fbabe49-1667-47a5-a9c8-006bb2d3d9ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fffc70-695a-4b84-ad23-05d988b992cf", "sighting_of_ref": "indicator--7c3b0054-b45d-473a-badf-ef2a19b4d617", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dad93d-5649-4f54-bb80-1ee7ff13d065", "sighting_of_ref": "indicator--c421f0b5-b9c3-4027-ab0a-6c131fa6f5cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca46caa3-799b-4546-9cd6-7bead5d6d076", "sighting_of_ref": "indicator--4b9ed1af-4354-480f-8658-85a2612e2a2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49336a18-69a6-4d92-8d4f-1f49c4b151bd", "sighting_of_ref": "indicator--ca18f670-c83f-45f9-89f6-9b192fae8c7c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02557f8-91dd-459f-b4d3-82254cf73220", "sighting_of_ref": "indicator--240a14d0-0b56-44ae-a3b2-965110720d58", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f995f6-2457-416b-9e85-a5eac01a375b", "sighting_of_ref": "indicator--04ce824d-dff2-45cc-a2d9-6b59a17176b8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1744e927-6aa4-43df-9af9-3f7e4bec285e", "sighting_of_ref": "indicator--3e775e22-c708-4c69-b4ce-392e3ed5c537", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4adca1-1d2f-4f94-94e1-60f9cf264dd4", "sighting_of_ref": "indicator--4515fcf2-0ab7-4353-b084-4e9d8442ce78", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50036f7e-c202-4092-ba9b-af07fa7659e0", "sighting_of_ref": "indicator--f83cf809-45ff-4a1d-be4c-1e576fe0bd65", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace74b6d-2650-4ca8-a724-8ba14633b149", "sighting_of_ref": "indicator--168e2b75-909e-4481-8803-1ef34e115dd5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b460a7e-b79e-4300-8219-8037b4bc1ff8", "sighting_of_ref": "indicator--5b6b2df8-5beb-4c02-b645-38bf69f1b2fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1052bdc8-0798-4cda-806b-c2a72aaee08c", "sighting_of_ref": "indicator--2f51e0b2-fa9f-4aa3-80ff-ad5f75c090da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e9ec47-0b7d-44c3-866b-a7d1f786a189", "sighting_of_ref": "indicator--896f32be-3071-4d77-9911-19a0cfdd2922", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e57f72f-6e32-49d9-a367-bdd41cb545db", "sighting_of_ref": "indicator--15ef93e9-d1d1-4d25-b384-9cd4dc5039ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6d109f-3036-4efb-bec1-91e25f164702", "sighting_of_ref": "indicator--546c4215-6cb7-4ee7-ba4a-7ee9e403e5ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b6605b-b2fc-41a5-b608-c40ac787bccc", "sighting_of_ref": "indicator--d4e042ef-05f5-4326-9907-750cd001ad70", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529aa5c8-7550-44dc-992a-708b1cfa432f", "sighting_of_ref": "indicator--d27f8b44-c7a8-4d17-994a-6ad789e9a21e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5054a96-05b1-439d-a8c5-9fc1fe7e4c63", "sighting_of_ref": "indicator--0fc7ac99-cca5-4b6f-abe7-96b4b230ea3d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23b0d1b-2afe-4a76-bdeb-cc85dfa943e3", "sighting_of_ref": "indicator--bbcad1b9-cef3-4f25-9f4b-91db790e12fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8bf525-708e-489a-8ba5-1b56323f9920", "sighting_of_ref": "indicator--4c486611-bd61-4d21-b624-e6178ff25f39", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cdebc6-0d28-4628-a5c0-e4d32951e5f7", "sighting_of_ref": "indicator--b3170cda-6849-4675-a8f3-00348a22d8e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e77edb-3c99-41d5-a036-a3fdbcbd4c5b", "sighting_of_ref": "indicator--31a7b6a4-6de2-495d-b9ca-b869c3bf7215", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d52f20-f4ea-4c32-bbb0-8b0fa66ee9fc", "sighting_of_ref": "indicator--d8c5d068-bd6e-4489-a389-eb7369cc7762", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd92ad16-8fbb-42a4-9057-e823e484f916", "sighting_of_ref": "indicator--ccf690e2-d533-4d7d-b94a-b322533282b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49008870-3111-4680-a9a0-33fc3b3872c2", "sighting_of_ref": "indicator--5b085137-6d90-4fd0-8ffa-9c708ee5a008", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bbb7a8-6872-466e-a8d7-a9d52c67be7f", "sighting_of_ref": "indicator--eece844c-5175-4d6f-af2b-f2978deba0f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874d4f19-0b47-439e-bf29-22105f74a0bf", "sighting_of_ref": "indicator--a686a8fa-faf3-4463-9358-c9598bcd093f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e981b64-28e9-4fc6-87f0-2de25a9d223c", "sighting_of_ref": "indicator--629b9435-af45-4893-84b3-06f9c106bc9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861e2e89-b170-42a4-8866-03e896127872", "sighting_of_ref": "indicator--df87e697-2ee4-4f4e-8e20-a49e2eef1074", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0c328b-070d-4057-8460-5c3035f3c2c9", "sighting_of_ref": "indicator--cddedfad-b447-4ff8-a189-1580da32a8ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef56cda5-1e73-4f36-9b14-175bea839fc5", "sighting_of_ref": "indicator--ef6761ff-603d-44fa-a25c-959d086b463d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d8216f-7040-4e50-8f11-2d1047c0b784", "sighting_of_ref": "indicator--fb65e25e-f626-4ab6-95dd-02b4b8dd7c2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d05021d-4233-4589-b839-5c0bdaf9c2e1", "sighting_of_ref": "indicator--1601ad5b-4e07-49e2-8023-1dc85b12989b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4972d1c6-58c0-4081-9434-e7f574e047d7", "sighting_of_ref": "indicator--271e423e-be0f-42c7-8924-902750a055fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e987cdde-5b61-4ddd-906f-9d22210491dc", "sighting_of_ref": "indicator--47696101-aede-4085-904a-b6fc7b2562f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ced99eb-ca38-4e66-9e3f-183009e834a1", "sighting_of_ref": "indicator--5879976d-3e3f-4eab-9c6f-a287630ec67e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d513906-9697-42c3-92a3-60dcf9737d10", "sighting_of_ref": "indicator--e64bb1d6-705e-46fe-9231-00af9751e405", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f400a4af-a06e-4203-98f3-a147437d496f", "sighting_of_ref": "indicator--133fad35-2c29-4f23-b4ae-5ac432f42faa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ce8d13-fd36-4676-b16b-6fe55953df8c", "sighting_of_ref": "indicator--85d3f933-bc0f-4ee9-be44-81f3b6e89225", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4434c607-c190-4d54-a4da-b06839987746", "sighting_of_ref": "indicator--4496d870-89d8-4420-af75-dc808613ee03", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10d7db7-2a5e-4d2b-ab23-f09e168bcdf7", "sighting_of_ref": "indicator--fbdd1100-3933-4318-bf09-ec0d2c65874b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ae6af0-5dfa-4887-9ba5-debd1ec8d2ca", "sighting_of_ref": "indicator--31fd1195-f22d-4320-82d5-8a23a8e266c5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7faa08d1-5fc2-4a29-96e5-fbfc5c4e8fca", "sighting_of_ref": "indicator--15bcf58a-d199-491d-89a3-d9923ae0f0f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1faa24-7d94-40c9-b1c8-81757bdd3354", "sighting_of_ref": "indicator--056cd962-54f7-4dfb-8f66-bdc738bafe09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae20ff85-2469-44be-babd-a91268405eec", "sighting_of_ref": "indicator--8bb36dda-2310-4594-8d5d-2e622b21388c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d39465-52a6-4426-8276-43e7214bda56", "sighting_of_ref": "indicator--29bf0aec-bd41-4a54-b199-f41e335b97af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90af7ad4-a0e7-4013-81ff-31eda9bdebee", "sighting_of_ref": "indicator--75132953-861b-4c58-9baf-1719da25c27a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1407c53-4c6d-4f3a-9978-71fc3950ff1a", "sighting_of_ref": "indicator--04905965-24d4-46cd-b674-97be80d109d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c2de6f-8b98-4d9b-83af-f34c0ec53a9e", "sighting_of_ref": "indicator--0d407bed-2e30-4093-b4bb-6e82c70f3212", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fad40f-3ad4-47cc-a711-7c61e27fa99d", "sighting_of_ref": "indicator--24b5c2a1-e595-424c-a82a-1153d497486c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f350d3-d666-42e4-9a93-aa33a9c54928", "sighting_of_ref": "indicator--a9daff71-252e-48a5-935e-923936a92057", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9b4fd6-b0cd-4ac6-9208-380c7449a323", "sighting_of_ref": "indicator--db09d62f-20bb-4571-9bc7-4ba089a6619e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49305070-713a-4823-89eb-dcd5bb5b7431", "sighting_of_ref": "indicator--26401f65-7b4a-462d-a6a4-9efe63f3d2e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6988ae-8aa0-4ef2-add8-b1ee03eb10b8", "sighting_of_ref": "indicator--30ba6015-130d-4f90-945d-f6c8f7e314c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0ff1b9-2ff8-4407-b40e-28d7579328d2", "sighting_of_ref": "indicator--7c3f0f28-6f4d-4a8f-ad57-62f52a37961a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf902fa-d03f-46d0-bdd6-7fea54cd72a0", "sighting_of_ref": "indicator--3f28b6a8-2fa5-410a-a9b3-c5d40f4796b8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7608534-f690-4db1-ad7d-fbb0beb05f8b", "sighting_of_ref": "indicator--a3ed98e6-55f7-4c37-a143-9c41f2514a00", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e3a125-05eb-486b-88ff-ef72d2633f34", "sighting_of_ref": "indicator--80ec30c7-cbbf-4e75-a2d2-de3b6fe47c9d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ebe121-68c3-495d-9804-703c92ddbbf4", "sighting_of_ref": "indicator--6b421eb7-f157-4a89-b41d-7f8a03a303ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d70e2c5-d77b-4242-be82-52a8dc8ebe54", "sighting_of_ref": "indicator--df0ab8e5-53d1-4a03-8857-49725af3fc89", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d6bd26-b770-4e89-9ce4-cf1b0d72a74c", "sighting_of_ref": "indicator--a4ca041b-fba8-45bb-a29e-1b20d799bfab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8f86aa-cbcf-47a1-b6e7-32b0b17a39fc", "sighting_of_ref": "indicator--7795ca46-510d-4606-a4de-ec9b8ce5567e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c082c357-d717-4fa2-8732-8dea4888b5d8", "sighting_of_ref": "indicator--acb91653-d67d-4472-a811-7d409e0a82fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df18c7c-e754-4ac7-8b96-87117c08d55e", "sighting_of_ref": "indicator--604aa0bf-1d66-4049-9fce-2deb9a621ac9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d46c4f-8ad9-48f4-873c-7419fb72fc3b", "sighting_of_ref": "indicator--ba18092d-4e69-4753-acb5-03f858eae11d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eae1bc2-dd09-4d0e-a6a2-5cafbcc62525", "sighting_of_ref": "indicator--475e6b3b-ed39-4468-95f9-2c8a835e2cc5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab6916f-4654-45f5-a60b-e19aa13d554c", "sighting_of_ref": "indicator--f55e58c1-0223-4229-9531-a967ca954f1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c703e41a-bae2-4ba1-883d-e2593841e458", "sighting_of_ref": "indicator--55d02572-d7fc-4f90-b9d1-47bc6718690e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebd062c-1605-4889-9d30-49ede33bfedd", "sighting_of_ref": "indicator--61315ca4-e313-4f75-a076-a06f0e65dd90", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a928153-269d-45a9-a316-ac4c2ec01f71", "sighting_of_ref": "indicator--033ec764-8ce9-489a-a254-73915269356f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32aa8264-1b10-4d48-b5e9-2c7cb840a3fd", "sighting_of_ref": "indicator--974885ff-90d1-4e7d-b146-c0013ade4d3e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0f7b36-d2b4-454f-864c-84d3de0cfc67", "sighting_of_ref": "indicator--d5e3df3a-282f-4278-a7f6-eedf29663ddd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30f918b-ff28-438b-81fd-05102a2d3ceb", "sighting_of_ref": "indicator--d6e40bbc-57c4-40d9-9647-c062aa824951", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22113de-b464-41da-82bd-679ac3c8c095", "sighting_of_ref": "indicator--e7d2007e-16ab-4846-b081-24192f0e2251", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a09fe2-dd85-490e-9860-049d6d4e658c", "sighting_of_ref": "indicator--5b368a5e-6774-442a-93df-5126d5b71483", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0a36c3-0242-42d1-ae5f-5ea3e8fea299", "sighting_of_ref": "indicator--ab7aaee8-272d-4b8d-b975-c163e63c06b8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b37dbe2-f484-4aba-9c90-96d771653deb", "sighting_of_ref": "indicator--e5b6c7ec-c057-4283-a495-3dd2066ffa3f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab49857-00b1-4871-aa43-3b04be680efc", "sighting_of_ref": "indicator--6f9e9924-6b90-4a07-88ca-51c7c6a891ff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fef3d9c-b8e6-47d2-8406-221be9a47675", "sighting_of_ref": "indicator--52e75eaf-4ece-4d24-8055-c2a627368e9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8694f2ab-6573-4599-816a-34aa19ed14c7", "sighting_of_ref": "indicator--5fd59a34-7b9f-4aee-a239-49339231689e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f367d6e8-aabc-4c0f-a65b-2062f9d7805c", "sighting_of_ref": "indicator--ff9e37a1-906e-4e7a-9ed0-43b289ba6988", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73747f2e-3a56-4eb2-94d4-d8b6fc03f9ec", "sighting_of_ref": "indicator--7db08305-3fa7-40a7-807f-5797785e8130", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ae83dd-fb94-42a9-a3ea-bc81313cf4ad", "sighting_of_ref": "indicator--53b8c7fa-6148-4c52-ad74-4c49686895fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5831dc48-9548-413a-a712-f49e70dea454", "sighting_of_ref": "indicator--f5ba6cdd-243a-4894-82c3-55d578ff1df1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec15c7c5-15e9-4063-865d-cba79e1e538b", "sighting_of_ref": "indicator--cccbdde7-e8b1-4805-b895-b61c12f87024", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ad20e7-11cc-4ba0-b5d4-320691175aa5", "sighting_of_ref": "indicator--03e3365b-9706-42fc-865a-a960e12b27a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f92a9a3-b84d-4813-81f8-05941bd8f2f8", "sighting_of_ref": "indicator--f9b71996-755f-47e8-949b-dcd5ef56f715", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0222ce59-3f9c-4a20-9856-83a85bb26a9f", "sighting_of_ref": "indicator--c5cc83a8-b758-4e43-8c07-3950d27ee42e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce1405c-a113-42ce-b4b3-71e49b8c7235", "sighting_of_ref": "indicator--97b9a37a-fc6a-49c8-9fa3-913794f969ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade1fea1-0d25-40e6-87d1-3bdbb33f578f", "sighting_of_ref": "indicator--9e386de1-c958-4f1d-8059-4827a53759c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f685e7-29fd-4ff4-8050-92aacc960460", "sighting_of_ref": "indicator--14194118-2f7e-4ac6-8dc0-162e40dd268d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e13fbe-25b1-41db-93e2-1e796ecd379d", "sighting_of_ref": "indicator--cd63c014-200e-4420-a3b4-01cbe293a7b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0923e5-4cb9-475b-86ee-95015b2e53bd", "sighting_of_ref": "indicator--b314ce4a-a51d-4bcb-b400-f4a6c7fd4caf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae834b81-533a-459b-ad03-d490277c01e9", "sighting_of_ref": "indicator--5befd266-0810-4fd4-8b90-3024169c0aef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27d85ea-5f72-414d-a883-e89df8eff419", "sighting_of_ref": "indicator--38546362-bfdf-4358-9b68-4666461c2f10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb3066d-3ca4-49ec-b3cc-ad16c6866f3f", "sighting_of_ref": "indicator--c90a1489-620c-4bbb-bbff-d3126e1c7537", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23fcb69-1511-4b26-8c3d-00f389972500", "sighting_of_ref": "indicator--f8834646-6e89-4c01-9a35-ca2714ac3000", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e75096a-e663-44e8-87ee-cb2f9b5a7a25", "sighting_of_ref": "indicator--5ce6ad4b-0ef4-473b-abad-eb451353c761", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66075be4-0e22-4709-a2da-7bb195b8da7a", "sighting_of_ref": "indicator--76c464a3-d9df-46cd-b15e-cb3dc125bee5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa0c8e2-ba23-40a0-b77e-654645fd3248", "sighting_of_ref": "indicator--df5e209a-0bca-4e95-9e67-f9ed1f8db028", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e77fbcf-48e1-4376-97ab-abc41528105e", "sighting_of_ref": "indicator--babe93f8-e308-4639-8e30-8e2e6907f5ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2151f02e-813b-48b2-ab3f-1d3ce827bd19", "sighting_of_ref": "indicator--60b937c2-3f0b-44cd-857c-8602dbd275fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e00c4c-93e1-480f-8149-0206c690d3cf", "sighting_of_ref": "indicator--df6af71d-ab4e-4b88-9ab7-e27af478f49f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4e71b7-24d2-4685-bde0-3eaf228a3b40", "sighting_of_ref": "indicator--5f5e47d3-8282-4848-95eb-1f969dd84cf9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159394f5-31c7-4c96-a087-94582015665b", "sighting_of_ref": "indicator--970a2dbf-b4da-4c90-a9e0-ba636be9be7c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b643c36-477b-4faf-b02c-ad81a1a976c2", "sighting_of_ref": "indicator--b6533200-d6f1-46a6-8ff3-4492b807e1eb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3eb34b4-a17b-49d2-89b2-2dd20bb7eeec", "sighting_of_ref": "indicator--deb8be41-ec6b-4aa9-a45f-180cc984d512", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b8b504-e2cb-4af1-ac65-9628303e5b8e", "sighting_of_ref": "indicator--2765e35a-fc0d-4c1f-a8d9-ae5d1e8a5753", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf866f55-8eae-4730-aab5-13f9c35c8406", "sighting_of_ref": "indicator--e9b7c89e-da3d-4581-bdfa-c306112e3840", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7bd426-4aed-4804-af23-01760344054a", "sighting_of_ref": "indicator--f1a3935c-8c4b-44d9-ab08-8e317278c077", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc60e61-c3f8-4593-9d47-bf2f67bb3ceb", "sighting_of_ref": "indicator--cb631694-9254-4019-81a9-eecda2489ec1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdfc1c4-bb58-4b77-8e79-6bb634991170", "sighting_of_ref": "indicator--4f0ca9b5-c93b-4d27-9289-3f5a4ec516f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51edfdf-f7e3-4f04-b741-936cb86e318f", "sighting_of_ref": "indicator--84610d80-e19e-4682-a5f5-5a1c6de92b57", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa438fad-7218-44e9-8558-d97654d28d4e", "sighting_of_ref": "indicator--75edc00e-d28a-4c88-b998-cc614913922d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fca1d4-196c-4f6f-bdb8-7a650ef5a268", "sighting_of_ref": "indicator--d3c9165e-f812-4162-b167-b595d556c693", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87b2988-e844-4d12-8b94-d50e2e0e0815", "sighting_of_ref": "indicator--7ac87e02-d5ab-42cf-8b56-ef4ce703826d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2c9c6d-e788-4caa-bf98-3458d91c6b87", "sighting_of_ref": "indicator--e59473d8-a1a7-4a8f-b25c-3ffa0de86970", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfc6fa8-384d-4978-baa8-bae2b965099e", "sighting_of_ref": "indicator--c06f9859-ecb1-4b6d-92b4-be94b7fdeca1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b46a71e-ed7e-4f36-b3ee-c89b65d9318f", "sighting_of_ref": "indicator--38d16686-1a83-4623-a522-846e0f847f5a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b192b89-aae2-456e-b122-13a0bc143d1c", "sighting_of_ref": "indicator--6c40089c-8c74-4a4c-a192-66363518ecb1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42695eac-5959-4f8f-9d96-7d5961d204d6", "sighting_of_ref": "indicator--ff16e163-ce85-44ec-acf8-7ad669151ec7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601762c5-3ebd-40aa-b3b9-a85b1ce577ee", "sighting_of_ref": "indicator--82721c0f-4797-4b0d-9e68-3bea2920c932", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ccc78b-fe13-4adb-aceb-c04ff4cfdc32", "sighting_of_ref": "indicator--6aba45a7-afa9-4f31-91ec-760104c7f15b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75153b6a-421d-4730-a53f-7c47ea32a187", "sighting_of_ref": "indicator--237ce613-b789-4d00-abaf-e29b5cb5184e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085b0f6a-d968-4527-8ec3-cf512f7c75b1", "sighting_of_ref": "indicator--64650c5d-d6fb-408e-90ad-157d8811d776", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839565aa-fd3d-4637-8482-be36cec46122", "sighting_of_ref": "indicator--7083960c-9bfa-4b63-89e5-769271eb6bd3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5496d581-0701-4a77-a898-13aab5aa639a", "sighting_of_ref": "indicator--4a8bc1f0-c083-4479-ad49-ac59569c279f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4df82fa-cfd3-4e0f-8a98-03235b49cb8d", "sighting_of_ref": "indicator--bd543171-ee4b-4230-82be-baf950c2edb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434ebc8f-113d-4ee9-98d2-d6afd7104b0e", "sighting_of_ref": "indicator--c9bbc2b5-f6dd-44d3-a82c-b5ac44f8bb32", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9748238d-d177-4cbf-b7cd-9f08c7c5ab3c", "sighting_of_ref": "indicator--292c32d1-e179-47d0-930a-f53e7cb2cd59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25c2a4d-f55e-4e77-8f9f-8f5f70f4957c", "sighting_of_ref": "indicator--a32d5fda-c1d1-4d41-832f-b1df2c8a23ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09638540-8464-4668-9126-0df630aadee1", "sighting_of_ref": "indicator--fe6d6d25-6922-4cc6-9fd9-82a792e67040", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9318d5a2-43f5-4c05-8217-939319681b26", "sighting_of_ref": "indicator--fa598fe1-9251-4602-9d6e-23f112943663", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fee6d6-c02a-4c02-a996-f9b71282bb5b", "sighting_of_ref": "indicator--6eb76b67-0498-4d72-a7ff-835082e719a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27b3483-a138-4872-a2d9-29dd95371bb4", "sighting_of_ref": "indicator--66942855-3695-4f21-8b83-602d55c67a84", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec20942-2e4c-4e78-8638-4d64caf88dfe", "sighting_of_ref": "indicator--a21b153d-8a55-4783-80c2-87a4378ee904", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0cf773-8b41-4b94-8bbb-96f7cc6ebc9b", "sighting_of_ref": "indicator--d3bee5f7-dfbe-472f-95e2-654f5a3005f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159c2b3d-418e-41d3-9df6-80c519865712", "sighting_of_ref": "indicator--86005a3d-7df2-471b-8214-de01ca57cff0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0555ea6-9419-4b3a-a8a0-cd57a004a926", "sighting_of_ref": "indicator--a75fc8e3-9a9b-4c89-a19a-9447109fb4b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2393520-6468-4ea9-bc4c-f52ebf5056f5", "sighting_of_ref": "indicator--8b5610d8-a649-41a9-8c86-7a909ebac06c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d68074e-ba1e-43f0-89cd-bb772cb3c45a", "sighting_of_ref": "indicator--338733dc-2375-4b39-ba1d-081818d4d45e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76823573-608a-4dc3-bc7e-5d320b06409b", "sighting_of_ref": "indicator--46e77346-18ab-413c-bd1f-7e90c2663961", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869c94bf-8456-453d-aa7a-14e299230beb", "sighting_of_ref": "indicator--58643d62-5ade-4514-a818-e71ace10542a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db05154e-369b-4160-a9d7-14000c406197", "sighting_of_ref": "indicator--b14215c5-5c98-4a35-bbdd-0f2227798cba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efd5e94-0571-44ac-b399-f403005dfb4b", "sighting_of_ref": "indicator--4f76e04c-b675-4a3a-a56d-d0c6c7efb468", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b228cb4-8c75-41aa-b198-b5122f8f305f", "sighting_of_ref": "indicator--b803300e-ec96-4f57-b4c9-f28f6e693948", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bc2393-33b6-4cde-8fe2-3f972893967e", "sighting_of_ref": "indicator--43101e74-6403-4122-a6b3-694a96c17a21", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d720a7-64c6-4809-8f82-5eeb333f077a", "sighting_of_ref": "indicator--591e37e7-dd40-4451-9023-1c739eb67ca7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192bf271-abd6-4063-878d-d47fad966127", "sighting_of_ref": "indicator--2232d597-a832-4ded-bdfb-451dafe01232", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f907cdd-428e-4cfd-8ed7-ecd016bf7bd5", "sighting_of_ref": "indicator--1d2de643-ca8f-4d6e-ad38-2536ccdcd787", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be587d2-c850-440e-befd-9af89d6bf1c6", "sighting_of_ref": "indicator--9171b893-5099-4a87-877e-68ed1d1c6431", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bae933-6f70-4c29-b2ee-39fd3a39c806", "sighting_of_ref": "indicator--fb189f36-61bb-4e06-9f57-c0f40b68fcfb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f63893-21d1-40ea-b11b-6139ed692ef1", "sighting_of_ref": "indicator--bb3bc405-1d0e-4896-9444-31c934cdf4b2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b0efa2-021c-40a4-8864-e155de7af32f", "sighting_of_ref": "indicator--7d837af5-42f9-4f7d-984a-b1ad5d3b7c34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caead9c5-950b-47e7-a516-24e2e6935937", "sighting_of_ref": "indicator--1bfc0903-581b-4d33-a195-befff4d8813d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34cbe8e-9f5d-4140-a2e7-e7af3897da08", "sighting_of_ref": "indicator--328deb36-fee4-43f3-a247-f2ccea9e3e0d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a793e8-e32b-4ae1-984a-cfe9dc306879", "sighting_of_ref": "indicator--78c77fe2-49c5-44bb-ba27-afd3a4618479", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779e53b5-fcc2-4aeb-82d5-da9abbf685e9", "sighting_of_ref": "indicator--6b9be4ac-81fd-4b16-bf7c-cd12fddbd9bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699f7470-33be-41ef-af4c-215bc411e8dc", "sighting_of_ref": "indicator--1ca0335d-1c18-4a52-a305-9de77b6601d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88b1bbd-ab3f-4cd6-8a4b-7d0aab720683", "sighting_of_ref": "indicator--16bee097-c463-4a7b-8bd8-a6ad747ca77f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce68375-f1a3-464c-8b99-53ae9f23df42", "sighting_of_ref": "indicator--fb7bbcaf-78ce-488f-b720-dd44b0ac1aaf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74433a60-75ce-41f0-b455-3f07df8d9e77", "sighting_of_ref": "indicator--2a37a7b3-4394-4eb1-b2bc-8954bbaa8240", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b790866-82fa-403f-a9da-d87a9f5ec088", "sighting_of_ref": "indicator--e8b59af5-121c-439e-8478-cd750e6c5f5f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f625639-7d80-4383-838d-d479f419e878", "sighting_of_ref": "indicator--0964a12b-355d-4b23-a567-bd82ae15e25e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6000c23-3073-44b0-9e99-58debab97873", "sighting_of_ref": "indicator--a844ea95-c9f9-4372-9cf1-4bc3bcaa31dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47785dac-0574-4cc1-b73f-26cec7d5c452", "sighting_of_ref": "indicator--f22fcac8-9548-40f6-8421-dbd6e09b63ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cf57f9-3412-4fee-8107-37fafa285c81", "sighting_of_ref": "indicator--8e80a48d-f6c0-42f9-b081-d620a253940d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c4e201-3fe7-4d5b-bd91-1b0aa871131f", "sighting_of_ref": "indicator--9d4acd5f-9e67-4ce3-a805-28a606f7b906", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56399d2-1e8b-44c7-b1e0-68812fa32b27", "sighting_of_ref": "indicator--7613f02f-0f0c-4d93-b44f-4be2da3f8a26", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e399a751-2eb5-45f4-aa5d-c463a18ddb62", "sighting_of_ref": "indicator--d5b81f20-d67c-413f-9b4b-58d0f7aa727e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf02573-a672-426b-826d-576ccb06519c", "sighting_of_ref": "indicator--f873f9c6-6ff8-4698-bd28-ed0f291da992", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effc5649-5f02-4751-8f8f-72acc850be3e", "sighting_of_ref": "indicator--0fa43433-b385-493b-a7df-1c9048d194b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b350b7c-2858-42eb-a61a-58260112487f", "sighting_of_ref": "indicator--c6e6f52a-0217-49af-964f-e7718a69cd55", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc97cc5-dbaf-49e8-95b1-4cf4d4c4e5a3", "sighting_of_ref": "indicator--715488e2-b617-4aab-8dff-2dcaba8b3b13", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbd5827-bfc0-4271-b3ef-127f2f90f80d", "sighting_of_ref": "indicator--625a1a62-8a97-4f81-946d-eb8bc38737a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcde6677-c83d-4576-9441-d466faa49c50", "sighting_of_ref": "indicator--2feb48cb-66db-42c6-a084-6f230e9771a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1f8d6b-eafb-4f6d-aa39-fb5ae1f30658", "sighting_of_ref": "indicator--0f16eaee-a7e1-4b97-bc8f-da16662ac756", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb85945d-aa10-47ea-9386-dc91afd07464", "sighting_of_ref": "indicator--9ec1a9ab-379f-4d89-a1dd-95089d37d012", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8981ec15-4db2-4e9a-a562-cb918684b201", "sighting_of_ref": "indicator--fbe36ea2-cda8-4289-8b62-e7c4c3400142", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194f066f-1ca9-44ed-961a-d0d8c4f96a72", "sighting_of_ref": "indicator--386dbd4d-e3fc-4a1f-ad9c-5ed924e9ffd9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0598e6f6-bd38-4e3e-b81c-0c515e901c89", "sighting_of_ref": "indicator--d43dd0e9-2bd7-4876-a936-7ada61cccafc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef4ae44-47d9-4779-9487-ac333b9d7eac", "sighting_of_ref": "indicator--c75b82f0-c292-4c21-a128-6fb9b8e2195d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672761ba-896d-4672-89a2-b935a0fbb06c", "sighting_of_ref": "indicator--94c28649-9891-4199-abf3-2845052b55b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6d45a4-5ea7-4c7d-994c-8c6774d1ebe1", "sighting_of_ref": "indicator--e8232029-260f-40bb-aa86-bff83c22dd09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563f744f-b918-46a2-b06d-01191599dbc9", "sighting_of_ref": "indicator--123e714b-5068-4cff-90b0-5e2a4c431202", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5385fd0-9670-4ef0-b568-721df7157719", "sighting_of_ref": "indicator--b6393c66-9d48-4b18-be93-484b0b7fbf83", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331d5b86-9838-4561-b6b7-45dc17bf75b6", "sighting_of_ref": "indicator--5540099b-87c6-4797-8d4c-6590ac8ca83b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694ad71f-f168-48ff-9dd8-8b7f6057c200", "sighting_of_ref": "indicator--3a61567d-e886-42ea-a91e-eeefe30d5583", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eadac96-8740-420d-a43a-44fd7ecc2591", "sighting_of_ref": "indicator--622377d4-88c6-43b0-908a-ab74872d292b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f811a3-c6fc-4d28-8deb-f762c9174958", "sighting_of_ref": "indicator--8ecafcc4-cd52-4e5e-9703-d492492b4cf0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25191197-2fb9-4486-a283-3b2eeaf01a94", "sighting_of_ref": "indicator--5f3a7f91-9017-4745-8525-ffe7768fcefc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7aa1f1-4c36-4c0b-b3bc-fb8ef063adea", "sighting_of_ref": "indicator--f38e66b5-1345-4b12-b8cf-9e5ec8771d62", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b057c090-896d-4774-ad5b-13c5496cb3f7", "sighting_of_ref": "indicator--e2d4b44b-eb60-4169-ad23-56bd5ecc8485", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ce82c0-8e40-4481-b19d-10cb46d81ab5", "sighting_of_ref": "indicator--771acab6-4f54-40c4-b6e4-14d05c527d28", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d22eb3-4287-4d8c-b05d-1d1bf9a0b897", "sighting_of_ref": "indicator--a761932a-b97d-4ef2-9efb-556c761005de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0f2b94-15ac-4b67-bd76-1b8bb433af68", "sighting_of_ref": "indicator--38bbeafd-489b-4507-b4c3-cc549b236014", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ac8f20-4515-4d76-b53d-d0b71e03ce42", "sighting_of_ref": "indicator--32a2dfdc-148d-4745-8400-b6e8d54ba90c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ed5b00-4c6d-4747-8f6f-6059f247e060", "sighting_of_ref": "indicator--c41452f9-82ee-49e3-bb44-1fa489e6511b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48807ed5-e410-4e34-9b8a-db8334f6475c", "sighting_of_ref": "indicator--92073ea4-2579-4077-a1f4-68522077e50e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8e98eb-7f14-49e8-9a4b-39fff45f943d", "sighting_of_ref": "indicator--59010d65-6931-411f-9c57-466c02dd85c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eabfd3d-974a-496e-b635-e3496457fc4b", "sighting_of_ref": "indicator--b535b827-2936-46f9-8fbc-4ac77cbe2221", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f840186-f5f4-4bbb-a0d9-bf4225c09603", "sighting_of_ref": "indicator--adb88a60-ee5b-469f-83f6-2f3517483a5f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4748c0-88cf-4023-8fd8-cdadb40c46a3", "sighting_of_ref": "indicator--dbd565f0-2688-485f-ad33-5b9284a901be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c31dd6d-b95c-491d-9ea0-75c5189f7e44", "sighting_of_ref": "indicator--7b6af4a6-7962-4101-a727-c35c7546358d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe250012-36ec-45af-8b40-7667409ad89e", "sighting_of_ref": "indicator--6f422ebe-3a88-4ae0-9c88-a1064f3911ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8b430e-d1bd-40b2-8806-2c2358e9f981", "sighting_of_ref": "indicator--9c9d21c5-4612-4294-9b52-e77c4e4f195c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8c75a0-c039-4480-a634-3c42a8bf6416", "sighting_of_ref": "indicator--df78ba10-3b78-4bd8-9f09-c110f263eaa0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d334e0e-ed86-4f21-964c-9241373f4416", "sighting_of_ref": "indicator--a157fa48-7a5a-4ca7-bd83-11357a6e6db7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf6e4f7-b27f-4a0d-a6f4-997456bb069e", "sighting_of_ref": "indicator--29a4c70c-0c18-4508-a8c0-03453f9b599e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9371b264-c785-480f-ba33-b5cbc92d761e", "sighting_of_ref": "indicator--60ddf3e3-93ef-4b97-b9bf-298e70fe886b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cc234a-c7a8-4548-9514-840f23003a34", "sighting_of_ref": "indicator--b9def0f6-5308-4675-869f-eff25599c724", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fce4b58-1049-412d-bbd4-5c92a601d08d", "sighting_of_ref": "indicator--1c064caf-9288-4e18-a236-a76c08d6e08c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ffaa42-95c4-4374-ace5-74bd300a6bb0", "sighting_of_ref": "indicator--8959d3af-86f4-4f1e-bb3d-891e12836af5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea05b028-b068-4417-99c7-9fdc571945e1", "sighting_of_ref": "indicator--4e42866f-1ede-481b-84e7-b9aae9e66fdb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a96971-a0f4-4ba9-9124-e7e1d905e47a", "sighting_of_ref": "indicator--bb4ee562-afc2-4ba6-a36b-b91297dda859", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df75fe3e-7f54-4fd5-b985-1e1b1975691f", "sighting_of_ref": "indicator--2d21f8f6-446f-4eb3-b255-1df8924efece", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900257c7-34b7-4fb9-95ff-20050f868d89", "sighting_of_ref": "indicator--5f40fd8a-180f-4d8f-9f12-bd769ef9f14f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97412609-aea8-4821-bcb6-e559117c2845", "sighting_of_ref": "indicator--df5dddf4-47eb-46c5-b349-dd7598f5dac8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153b80bc-bd9a-4ac6-8353-4e4608062aff", "sighting_of_ref": "indicator--c62c780b-53e3-47f0-a98b-b1e9f4c22dff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dddd9c1-0266-410b-9f39-6f640c3bb3e2", "sighting_of_ref": "indicator--a1b3bf66-6845-41dc-a870-cfb18698168b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23f871a-4fe4-49b7-868c-820bc129db44", "sighting_of_ref": "indicator--8403c39e-62ee-4645-816f-c3f0398a7872", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9002d1dd-f877-4c50-ac8c-826eaea85040", "sighting_of_ref": "indicator--f4614cbf-6eb9-4999-99eb-618b85100f84", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba18cd14-036a-4595-b6ec-03d55b61735f", "sighting_of_ref": "indicator--4e4c9a34-eba2-41a1-9b79-bafaf8d0a774", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905966a7-46e5-44d4-aa7a-088e813549ba", "sighting_of_ref": "indicator--f7b1e15a-eddf-4a50-a84e-7683c6e87497", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1677d046-e3ca-4dfc-a9bb-5b31cf36d9d4", "sighting_of_ref": "indicator--bc3cf383-590a-4501-937f-986a32232621", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab1c075-d5be-4bad-b494-2d948d31932a", "sighting_of_ref": "indicator--341780ef-f3fc-4156-9cd7-e9f8f40b5eeb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a42912-442a-4575-bf1c-f4377a5780ab", "sighting_of_ref": "indicator--560105bd-c42a-4c79-be66-23f76e6d1cb5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3be7d08-7714-4c39-a35f-582931d3adac", "sighting_of_ref": "indicator--d09d5cbe-7aaa-4f36-95c5-df0e9e0eacce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e74ec3e-f353-4e3b-85b5-713040c34471", "sighting_of_ref": "indicator--134cb242-626d-49a8-bf50-43254f60df88", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac72dcf-f12b-4027-8ce5-d7ee3da9f367", "sighting_of_ref": "indicator--e2f76436-ba80-406d-80a9-b9e61d9a2199", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931651a2-65b1-4202-8494-4701eec49385", "sighting_of_ref": "indicator--12b57127-fae3-47ba-b550-fe4c162b8413", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71e999a-2647-4792-9d97-e8517193f272", "sighting_of_ref": "indicator--b630bac6-00ce-49e4-86bd-f2cc7e7d3ab9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a46932c-359e-4ffd-8a2b-4d32de9ef9af", "sighting_of_ref": "indicator--2b1b9be8-dc79-431a-94fe-f401c4e6c73d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadb93da-f247-4766-ab76-38fbe9f5e96b", "sighting_of_ref": "indicator--1b892400-1f91-496e-8616-aa4a56e9f151", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b8082d-d931-4504-84f6-aaedaa0491e1", "sighting_of_ref": "indicator--f0273aa9-d972-4589-b57a-192af38d5a8c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9b78cd-42f3-480c-b4cc-6d549bc24b9f", "sighting_of_ref": "indicator--9e23acc7-d457-475b-95e4-56e7f857d02f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92689cca-cf69-4de9-a017-692a4a781e46", "sighting_of_ref": "indicator--bbc20e03-d6ac-4045-8898-7056b13cc8a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b72e6c-1a00-4f72-b628-0b2468c1dd48", "sighting_of_ref": "indicator--ca0d96cf-9e55-4578-869d-36878b3ee04d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59300c6c-1b1d-4a8b-8e70-7aa0f6dfb0d7", "sighting_of_ref": "indicator--e060d653-a044-48a9-bd00-a94f275011e2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068b9cf9-3093-417f-a291-0b5c12fb8633", "sighting_of_ref": "indicator--e5a0e0c7-02b9-428b-888a-05b62ba06225", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e1bc9e-7984-4e4b-aa03-40663b1861e0", "sighting_of_ref": "indicator--d1fdc097-0168-41cf-9a29-7722b46a769e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bfa8b1-9358-418e-b2a3-08463eef1877", "sighting_of_ref": "indicator--ba55ddef-fcb9-4048-95ae-a30717d08e54", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88158fb-0fb3-4018-ac3d-968620ec2629", "sighting_of_ref": "indicator--a6c9630a-ccda-41c8-a56d-5337ff65d40c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8118e500-b227-4ac8-a1b3-26eb947e16f8", "sighting_of_ref": "indicator--c7ecca4f-7f28-4bf9-bbfa-1d52cedd1100", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f98ca71-a984-4286-8c5d-6d17d034dbb7", "sighting_of_ref": "indicator--d75dce92-ff65-40c9-a453-4b7a67f359be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2316808-aad0-4b1e-9c1e-2b5be734a68d", "sighting_of_ref": "indicator--2c4c145d-99d2-41b5-90e7-1d169a633301", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f667617-984c-43a2-a984-23402e9fa010", "sighting_of_ref": "indicator--d55a98e6-5b3a-477a-bfda-4e5ccc87ca7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059eaeef-92e9-4a47-acf8-f8cfbf9de624", "sighting_of_ref": "indicator--323b6062-0f8a-4a7e-aff8-975e8fef33d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069efa24-df13-4ed1-87f1-e0e0cbd48806", "sighting_of_ref": "indicator--a2085348-1be4-4d38-abcb-9374a2572bb7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fec487-8e60-45c3-a2a8-30c5d1b48ea7", "sighting_of_ref": "indicator--ddacea81-d548-4329-892a-3b445a734cf4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb1f5ce-e6b2-4991-b87d-adc3f2c73a8a", "sighting_of_ref": "indicator--10702cf6-93ed-4f12-ad63-32c68f25f5da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5d3695-4421-427e-a3b7-6e2913dd465f", "sighting_of_ref": "indicator--b08052a2-8296-4f5a-a981-4f0e4b47d242", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6059f8b-3cc6-48c1-a299-00be8279517d", "sighting_of_ref": "indicator--5c3a7c06-afa4-4725-9e44-d4053bf7b89a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b30239f-faa3-48e1-9141-ea90c2503f88", "sighting_of_ref": "indicator--1371e9ac-5148-4ce7-9102-605bf042953f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7db2e41-7d3f-4db3-a91e-2fc2b0b908a4", "sighting_of_ref": "indicator--0b057e9a-5eb6-4a86-873d-00108053f780", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65ba60a-2ad8-400e-9349-447e8821635a", "sighting_of_ref": "indicator--0443a728-4d68-4645-b58a-9a7315f1b254", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c47803-baad-4950-a7b3-f902a3947204", "sighting_of_ref": "indicator--9d5cf5e1-19dd-403f-b20a-90277fd772ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53e68be-ad12-4c52-b5f6-422ca9aa6873", "sighting_of_ref": "indicator--470d9eb5-8d4e-4997-bee4-17f2ca500524", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75f9f0d-907d-42cc-9470-811011523321", "sighting_of_ref": "indicator--62badea5-dc88-4e71-bd04-ab3f53be139c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea5945b-c216-454f-bb3c-cd31d360ec76", "sighting_of_ref": "indicator--14d992ec-b1ff-431e-b1e0-4f914379cc28", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8f19c8-3d5c-40da-8226-55dd16ee9aff", "sighting_of_ref": "indicator--08d96f4b-819c-406d-affe-b6fcfcd38c7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aef682-00fb-447f-b4df-5944696e3785", "sighting_of_ref": "indicator--116b4ee1-4425-494e-b30f-6d5946c583fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a0fd94-d1f3-4075-bc16-0e507a967a37", "sighting_of_ref": "indicator--9b6f9f1a-980d-42d4-bea0-f77d50500261", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b245363-12b5-4f85-a78e-7c602bde49fe", "sighting_of_ref": "indicator--6e13b7ad-16e4-4066-9f38-dd6bf2c14543", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3495299b-ef89-4bf1-b6b0-61834cd8f8bf", "sighting_of_ref": "indicator--ea2ae7d2-af10-42bd-9ed9-84057b33e633", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4152a0a8-f3c9-46af-8cc5-37223fa674be", "sighting_of_ref": "indicator--8e960c9b-a8d9-4e6c-96a4-ad96eb91bc16", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66321e3-f114-4630-8c87-bcd835fbc6c3", "sighting_of_ref": "indicator--100fec14-68c5-46c2-b1ed-6f89ced1ab25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aac0b24-11ee-4e51-b645-f86c71a06752", "sighting_of_ref": "indicator--9a54f4c4-6c5f-46c9-a0d3-941dab698115", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5409e124-0be1-46fa-86a1-96a34b8fb254", "sighting_of_ref": "indicator--3cc68fe0-0f90-4555-b5e2-a85e8e2b4921", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ead9ae5-5bcf-4310-9d30-04633e32a3b3", "sighting_of_ref": "indicator--6e3407c1-72ef-4aa6-9d4f-fdc2179df6a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6565319-81ba-4edb-9185-ed8cd9fe8f2b", "sighting_of_ref": "indicator--c4604bdf-2d4f-4219-b618-2eb8c168fb2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6926156-2b58-4d08-aa19-a38273d4b6e9", "sighting_of_ref": "indicator--fb99156b-f54a-4dbe-879d-edd8900b7b8f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc0236c-da71-40fa-97f5-e59395e41a8c", "sighting_of_ref": "indicator--0b8f65d8-2a0e-41c9-8bca-9d7809f61be5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0d751a-6456-4a17-954a-fc69e5acb42f", "sighting_of_ref": "indicator--50651590-c325-4c6f-a781-3a0c7ff9ff18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18037cd6-b9c3-44c6-b817-fad1b7360ec0", "sighting_of_ref": "indicator--f35965c5-179a-42aa-ac5a-000e4b8b0cc6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8d8354-6272-4648-b0c3-12b484ff47de", "sighting_of_ref": "indicator--b4227492-c42b-4625-8e41-8ebc398ddd1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d863393-bad6-4709-9133-574fdfb7203c", "sighting_of_ref": "indicator--99f6dec9-2132-45b2-b438-a32df94e5ed0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4b8d75-0b85-4668-917d-a24d4f98ca3d", "sighting_of_ref": "indicator--824038f1-227a-4a03-b8e0-440759696fbc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bdd9b3-1862-4880-ab50-7477efc13259", "sighting_of_ref": "indicator--a3d798c4-78d1-4ad3-9f7b-f165a01bb3b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277e61f8-bd45-4777-9efa-5b498f98f8d5", "sighting_of_ref": "indicator--cfdd3085-450c-4d21-b9ff-413784e8d5c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dd0be1-f25e-49c4-99ba-98c09054fa1d", "sighting_of_ref": "indicator--a613390b-5cdf-4f42-8820-83b0f13a3b6f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f9885f-c679-4882-b1e4-003211d9b9ec", "sighting_of_ref": "indicator--24acc72b-b779-47a1-a645-b915fa7552c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5231b1-577d-4f16-a605-1cd5d9cb7e00", "sighting_of_ref": "indicator--57061a41-5e10-421a-b7de-945ff31f6fd7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f6413e-6efb-47e0-b322-99446d99a3b4", "sighting_of_ref": "indicator--049d6e40-7c83-49e2-b507-f8a3c2a74e70", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f996e89a-a24c-4f54-87cf-e56b2116abf6", "sighting_of_ref": "indicator--c0a05b1f-1b91-4b7e-98fa-ce5dd41ef694", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76116010-c6bd-45d4-947f-de15cf9ef2fd", "sighting_of_ref": "indicator--8d9df5e6-ff28-4d24-9776-e2c78a46025d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a99b140-e29e-4ca4-91c6-1aaa08edc35f", "sighting_of_ref": "indicator--d72779eb-9ba3-4cb2-9a28-964666da9169", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4301de13-a4e0-4956-b432-f8ba9f96e704", "sighting_of_ref": "indicator--938a60ed-c60d-4b5d-b736-08c85dd1a480", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a294ac-e35e-429b-a45a-5a2143c647dd", "sighting_of_ref": "indicator--171e4308-3d4c-431b-8276-12e79adaf3d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5321f6ce-2288-414a-9c97-7f9070e06243", "sighting_of_ref": "indicator--dd5a79fb-628f-40da-b5e9-2b253b3cc0a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16873c5e-68ff-4d2e-b273-f53748a9aa45", "sighting_of_ref": "indicator--fdd1d2aa-20f7-4978-a397-f739f204f07a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e7a5ba-408b-48a5-b1f4-9f662c69ea6a", "sighting_of_ref": "indicator--5e46fc10-ee83-4892-ac85-feb4e5811da9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8aca6cd-c988-4989-8fe5-8ab18b44919b", "sighting_of_ref": "indicator--10a932ee-6c4d-4f6c-a385-f46246f7bac4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8637197d-2ab9-494f-b18f-f59fe0227244", "sighting_of_ref": "indicator--ef4596b2-fcb2-40f4-9c9f-6210ea19fbc7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7de624-2c19-4236-bcd5-2d133c3f14ea", "sighting_of_ref": "indicator--00bb3815-1974-4861-be4d-972880fc39a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f08dd8-0a1e-4327-8608-50f98daf2699", "sighting_of_ref": "indicator--c9acef7a-3dea-4c2d-995a-e6b511e2b8ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47767945-5175-451c-af4b-f82479356b4d", "sighting_of_ref": "indicator--65c7808c-08a5-470b-b32a-1e963934ea44", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23512f86-6f3e-402e-bf48-5ea144fa5944", "sighting_of_ref": "indicator--725e1938-18ed-4a74-b930-f01f6c465f20", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ad9f81-df9c-4a86-b447-9ee87317347c", "sighting_of_ref": "indicator--27d21ae1-2670-462f-bfba-0bdf604f7ae1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901b72fe-1c2b-4bad-b337-d62064dc57b4", "sighting_of_ref": "indicator--dda6b9fd-f818-469c-a5cc-7534283423ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e06fcc7-f8d1-44fc-b8db-651435378302", "sighting_of_ref": "indicator--9bda3d64-74ee-4479-b2c4-614238e00127", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244c9f79-7878-451a-acb7-bc0d306d69a9", "sighting_of_ref": "indicator--43bb621d-e632-4a62-98fb-c08432355e0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fcb862-a395-4d35-a154-d5142a5f118e", "sighting_of_ref": "indicator--a09df269-3996-43e3-8dec-a870c2e6f821", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3a1f05-1ce5-484b-8105-6dddcad3b3b5", "sighting_of_ref": "indicator--fe1b745e-0132-4110-93be-5535877a738e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d775bea6-c631-4fc7-b091-3660ea87616e", "sighting_of_ref": "indicator--f492072b-182c-4a3d-9b23-9d12a7e2f2bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8c8ce1-6459-47c3-a43e-5a7678d6a09c", "sighting_of_ref": "indicator--cc995fb3-ed03-48e9-803e-9581e3e1fa9d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86955abd-45c7-4456-8da8-a22b9d59f5f4", "sighting_of_ref": "indicator--f748cc80-403b-4e10-96ec-f03c3817761a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b53c7c-6f53-4004-a503-d58bfce7f8f3", "sighting_of_ref": "indicator--a41cd1f6-4bfd-4526-9921-65db23c4e39c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a72960a-30f6-4226-8429-6bf3dff48fd9", "sighting_of_ref": "indicator--a11acd58-a40a-4635-aeea-454bd9214102", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04089a2d-f98a-43cf-9d2b-42cc4acaf5b2", "sighting_of_ref": "indicator--a15f5c7a-27d4-4bf5-b347-e53af3d5959b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529cd0cc-5716-43d9-9f1a-575d5c8e7506", "sighting_of_ref": "indicator--6e3ca366-f539-4272-a0f3-080211d3f858", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07eec81-f732-48a7-834b-afa8d712ec74", "sighting_of_ref": "indicator--68071a40-31d3-4de0-acbc-d80e0f06f9c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7235b47e-a4a8-44e6-acdb-f87944985cb5", "sighting_of_ref": "indicator--2a65b9cc-06a7-429e-b681-b9006f7cb84f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc047b42-bb2f-4e90-beea-f4542b97ef5f", "sighting_of_ref": "indicator--09f64ec9-5b97-42e1-b859-eae155fa0073", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4f1f2e-1ce0-4e62-9b59-0efb9af959ba", "sighting_of_ref": "indicator--c8a0ab55-0d72-4a85-b064-adb5434d3b19", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db842a7c-64e7-4db0-a40a-250b1c6e9754", "sighting_of_ref": "indicator--82edc6f4-86af-4328-86a2-df09e3208444", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0cba2c-34df-4d4e-a530-7bd4268568d2", "sighting_of_ref": "indicator--2f4399e9-138c-4f77-b590-78583f862590", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8f165f-c2f2-4e5d-b397-af0532c44130", "sighting_of_ref": "indicator--32657e02-3c07-4c48-9bf6-43fc66afa190", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69a4ef5-1775-445f-879c-8292b31f2fea", "sighting_of_ref": "indicator--c7b9743b-f0c0-4c0f-bf57-e3e1f8bf6f8d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165b4d73-6d05-4cff-9dc5-587cbdb36452", "sighting_of_ref": "indicator--e8bb2b2b-3d2b-4dea-a857-cf6ae8b6728f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6572423a-94a9-43af-864f-5bdb4245cd8a", "sighting_of_ref": "indicator--7a277cff-8c6e-485d-a746-39e4cc9194a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb06e5b1-4388-4d76-96dd-49fbc1107b5f", "sighting_of_ref": "indicator--cb96db5f-4f41-4fbb-b256-847c23fac2ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da0c3c7-0ead-41b9-9805-42f0a6e09183", "sighting_of_ref": "indicator--a22fffb9-022f-4899-bc9a-9d127ee21a7f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a91b3b6-34bb-4353-aedf-7a08dcb535a0", "sighting_of_ref": "indicator--1ee62df7-41f0-4f6a-9be8-aa96ef7f2cbc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6918332-36b4-46c5-b255-01fc62b30496", "sighting_of_ref": "indicator--e2ecbc4e-5a79-4d32-8634-f21a9754c035", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d01748d-89e8-4784-9390-9e2e75ba29a1", "sighting_of_ref": "indicator--19a94312-6d86-4b78-a985-7334efd55471", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d585c4ae-4540-4353-a136-985667c2e208", "sighting_of_ref": "indicator--61ce9d14-4056-4497-aacb-3b065c7e0e19", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695590cd-ba4e-4b73-a0bb-977d41a6f76a", "sighting_of_ref": "indicator--ae1afbdc-51c5-40ab-90d0-2a75296efad3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30fd060-a19a-4907-8913-e86b38497eac", "sighting_of_ref": "indicator--0c870185-fde1-46e9-ab10-a5fc27501265", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52495712-e69c-4fd4-aa4c-d70753a8e6a8", "sighting_of_ref": "indicator--d382f999-9f08-48eb-90a0-fade78ecc402", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589e8688-f548-4d59-adf9-ac8f1687416d", "sighting_of_ref": "indicator--fb592d62-4978-4555-9e58-ec43dc62f055", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74457f00-04d9-4d98-a7d4-85587c8c4947", "sighting_of_ref": "indicator--6a5c25c4-9d4b-4f6c-9a40-fbadcb6cfbe7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7982988-4611-489a-8b6a-08f921edbf60", "sighting_of_ref": "indicator--590d18f6-bff6-41d3-a41f-0dd140be4654", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a461da67-d361-4466-9c33-105ff61e259d", "sighting_of_ref": "indicator--a54b903c-9b0f-49e2-8924-f64094a2ebb4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de6c805-e783-4e41-bec1-a21bcef434c0", "sighting_of_ref": "indicator--553f597d-0783-46d0-86c6-8ef4d8f54cd0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3753c0a-4b3c-4be4-ab90-6ce7024c0700", "sighting_of_ref": "indicator--c3129d75-a1a4-49ef-9cad-d5ccd40b1d15", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e583acfc-707c-41b0-9a12-a25a542408a6", "sighting_of_ref": "indicator--2f257630-5e07-4f39-b196-dd6c18887ea0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b9b679-4429-49fe-8e23-fbd6d83d5840", "sighting_of_ref": "indicator--b7587520-2a77-4a92-b3b0-35dc6c653288", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e71f112-9f25-43b3-b46c-f2ec9767f528", "sighting_of_ref": "indicator--ff8c429d-6b1c-4f04-9920-27c1cd06eff4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4f36ec-e591-4bb4-b364-2b8ff05d0729", "sighting_of_ref": "indicator--efe2d300-a95d-4817-aa70-a0755a2c8eb4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04682c46-2a3b-4096-a8f5-bd4386944662", "sighting_of_ref": "indicator--9adead8b-21d4-40a2-905c-f86d4c39807c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2d8dda-4261-4bc4-ad2c-91ed948aa9cb", "sighting_of_ref": "indicator--1221a56c-23cb-412f-a2e6-5e72d4d332c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6b2e24-f00d-4abb-8b1a-438bc4c633bc", "sighting_of_ref": "indicator--bf8ccb75-1129-468a-9730-2c59a1c5ebe8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac954122-aff6-4e6b-997c-cfa395a8f614", "sighting_of_ref": "indicator--8a4d317c-3c67-4ec0-af4d-61b8ee6a55a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36b1287-7ac1-478a-8a8e-81e8335eb647", "sighting_of_ref": "indicator--b38cb166-c5e3-4b2e-bc36-e12e220fdaa7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdd4df8-7ad4-4dee-8811-f7c8d564b6fc", "sighting_of_ref": "indicator--d0566d26-acd2-4a7e-a57f-3a53c5a34bea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462e5cef-3514-4db8-80e4-efc59fb63c37", "sighting_of_ref": "indicator--4fdfad72-17dc-4a96-92c4-431afbef93d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc72510-2317-4d09-82b9-a966311dd824", "sighting_of_ref": "indicator--0ee1ec0a-b671-4860-adbc-8788a6b6b384", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a31233-e07a-4129-a76c-b90eedae4c65", "sighting_of_ref": "indicator--f1047ca3-bea3-40c7-836f-22ec6a669fa5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65c01eb-88d4-4da2-8caf-2fc2bb0560ec", "sighting_of_ref": "indicator--9614f872-41ed-42ad-91e4-c39feb7cc625", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f388c620-7d97-4f4d-9951-19d9c7a35320", "sighting_of_ref": "indicator--cb3e1c76-6b8c-40a8-9c20-f2e3402300cc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90326609-e127-4211-a08e-13abf3ea0ac8", "sighting_of_ref": "indicator--1fbd9dd8-55cd-4efb-90f5-f348d4894c19", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92ef0c6-9254-41e1-9e4b-0bbed1ec34f7", "sighting_of_ref": "indicator--30cb989f-9639-4e7c-93a4-b757e8c3b291", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7082a24a-816d-42b0-89ab-1aa6c7c7fb11", "sighting_of_ref": "indicator--db6496d3-0e1b-47c0-a9d1-f48ff6f9e3b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e9e5fa-3c43-488f-90ed-7e1e82d6bb28", "sighting_of_ref": "indicator--bb819d4b-9056-43cb-a350-45b68a892339", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8f0c76-b426-481e-955c-64471ff5a113", "sighting_of_ref": "indicator--df23cba4-8cec-47c2-a69a-1d9cc9b574d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ec0bdb-92f3-473e-b5a7-21d97064cbb6", "sighting_of_ref": "indicator--337ecaa3-d7f0-4a97-a5f3-879dc4ee8b0d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d6f72b-da2e-483f-9ac7-9ec5b9aba2f3", "sighting_of_ref": "indicator--9e2110e4-db9e-4941-8ad6-cbde197526b6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e664dbd5-092d-4c8f-bbe6-08289bcfdb3f", "sighting_of_ref": "indicator--5a5d88e9-9e62-43d9-9117-e2fdb9c13107", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af960329-94e5-4552-8868-8254fcb7d76e", "sighting_of_ref": "indicator--8f264ecc-52ec-4dc1-a2c1-756a72c05151", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e1585a-681b-46c4-b665-abc0189199f5", "sighting_of_ref": "indicator--949ec959-8d53-4e10-b801-b4dbe22992ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3025bbc5-021e-4a60-8e87-6c8da8d9971e", "sighting_of_ref": "indicator--43cb3bca-97d0-4823-b98e-d31d862ae729", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6c28be-af62-404b-aaae-03f8a773bf45", "sighting_of_ref": "indicator--5cda5eb1-49cc-4e99-9a5c-a2f555279a64", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22764c13-6328-42de-9691-1cb0ce79e779", "sighting_of_ref": "indicator--605b042e-40b8-42d2-be1b-de63c7ccbd99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e05642-2789-4132-8479-eb951a03894c", "sighting_of_ref": "indicator--c89bbd04-e370-40fe-8353-948a118a0ca4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01b0b33-ebae-421d-9d1b-86bd610dd094", "sighting_of_ref": "indicator--2cdebe62-2c06-4d35-962a-16b25f9cb5c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4b3e24-2e26-4859-9f8c-564f0bbdcb00", "sighting_of_ref": "indicator--add90290-c5b2-44dd-a3f3-efe0237c26be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ad8a3e-9737-43c4-ae40-33ac4dc0e2da", "sighting_of_ref": "indicator--db6a1f9e-f2bd-41f4-b0fa-8e068ae5ef99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a49799e-ba1a-464d-a553-fb66942881ed", "sighting_of_ref": "indicator--00138f68-3875-48ff-bf7e-78c13a3910e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5947f956-5140-4fa6-b6a9-8f5a94f950a2", "sighting_of_ref": "indicator--73759b05-3d20-4c51-8ca9-c64cc98d4672", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c962f02-bacf-49ab-96ca-525cf2564921", "sighting_of_ref": "indicator--1bb4315d-545f-4f42-9f30-93ee59ef0bda", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307df910-0d55-4fc5-a228-915d974cb8f8", "sighting_of_ref": "indicator--b4c58136-b5e0-4a84-a4b8-72efe0a12cb9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf5eacb-b918-48ba-b537-62d98ebda0e0", "sighting_of_ref": "indicator--567870d1-8900-42a4-b967-b3c066a757be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b59396-10ad-4b49-b8ea-97c8b1fcda17", "sighting_of_ref": "indicator--ef66e3bf-7d14-4f13-9251-e86dc107b67b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bad5b8-e7ee-4e22-97a1-4f8bf7d0d7d5", "sighting_of_ref": "indicator--579b4bb7-7664-493e-8bfe-1842376b6582", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7e3eee-b8e7-4278-806b-9a88a6bef99b", "sighting_of_ref": "indicator--6b31dfe4-e4c5-4af7-be54-bbe8f793a23d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9747c4b3-c4ce-4df9-8ea0-766b126f5ae8", "sighting_of_ref": "indicator--ac47c645-a2f4-42b0-a93f-46c413b08b09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd1bba4-e3c7-461d-9f43-1e180cb38556", "sighting_of_ref": "indicator--e63bc439-0917-446e-b036-63fb11ac11c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6219b64-1203-45f0-b8d4-875b158a7cf0", "sighting_of_ref": "indicator--5385ed2a-195f-4107-950e-8d21f22c3fb3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a268e84b-6280-43bb-a349-9dd98b9636ca", "sighting_of_ref": "indicator--4ae28a57-74b3-478b-b6ce-94c9b8d1170d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b0a5f7-6d53-4c4b-b0f1-bb3ec428efcc", "sighting_of_ref": "indicator--c4c99f38-6a07-44d6-a7a2-b18a15c149e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10aed5a0-57b5-4162-8574-ae7f83a4064e", "sighting_of_ref": "indicator--700e7703-efe8-4ff2-8f6a-844c85343833", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f44c58-1ecd-4f2b-8af5-a64189d0fd17", "sighting_of_ref": "indicator--6344435f-cad7-48bd-bf1c-9d69cfdc60ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f306b1-0de4-4510-adb7-485bbe5995fd", "sighting_of_ref": "indicator--92625f3a-c0bc-44e2-87c2-033e949abae9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7629754-7ba0-4b45-a6c5-fef894e59398", "sighting_of_ref": "indicator--3aaa0acc-e652-49bd-929e-fa7afb3f3db6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5c8859-ca3c-4e60-9dd9-a5814c5ecbda", "sighting_of_ref": "indicator--33477da6-5ec0-4e21-9cc5-b7808695fd2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b3f326-b04b-4743-8d76-e4bb8f178e29", "sighting_of_ref": "indicator--95529d98-f61e-48d5-820d-36890307518f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3fff92-ef64-454e-a66e-7643dc8543dd", "sighting_of_ref": "indicator--2eabdf96-a32e-4862-855c-7b6268a5dfa1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a2e29d-4d4b-4746-a2b3-b0287e046337", "sighting_of_ref": "indicator--2032976b-ce80-4deb-8220-cdc4c8f1224f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f19f23a-70ab-406e-8ad7-d7aaad0fe353", "sighting_of_ref": "indicator--e0d0b11e-ded5-45ac-ba2f-7768fedfcf41", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531c544b-cf54-4ad7-8826-7b1c2fb8d58e", "sighting_of_ref": "indicator--3d07607d-d76f-4bc0-8884-cf5e4e540cbb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7d4fc7-19b1-4802-bbfc-bc8d7edaeaf0", "sighting_of_ref": "indicator--1aad2c96-4ddc-45ac-9af5-f6d7c7979eeb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b45ff3-4076-4dc0-9c82-4554ed2afaf5", "sighting_of_ref": "indicator--2af146c4-a6c4-4604-8c16-2e9a4844182e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b5f008-bbea-4f69-a96b-21109f77fe4c", "sighting_of_ref": "indicator--69441770-bec8-4c04-82ad-5c4bf9ece2c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fdb965-d426-4f01-9874-edcb646a4e4a", "sighting_of_ref": "indicator--1f58ff6d-09a9-4e07-96db-c704c21a4952", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d93602-c4d5-4256-871d-1cae18cc30e8", "sighting_of_ref": "indicator--448756a0-18dc-419d-a0c9-4682ca911b59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc17f23-a7cd-48b7-945b-28f1b3d53136", "sighting_of_ref": "indicator--92bc1526-8cf9-4f84-8a6d-88840b40bedf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce662e98-f336-48ca-a67b-e37520aa4236", "sighting_of_ref": "indicator--65d78ee4-9272-4db0-8f56-dd1b47f2f2e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdb8dba-2896-4456-9e07-8205f36c6356", "sighting_of_ref": "indicator--f71549a2-cc0a-49f8-936e-7b0a4139e929", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e853cf-77b8-41cb-b8fc-ba0e694acb40", "sighting_of_ref": "indicator--14c76f8d-513e-4e5f-8025-ad94d56427dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e58a49-6da7-48b8-ade5-86a1e3e6b45b", "sighting_of_ref": "indicator--f7035ca8-12a3-4738-a809-ef01f68c83ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530ac1c7-d94f-46e6-b0c6-6debbf551c6b", "sighting_of_ref": "indicator--dcc040c4-c704-49b4-ab10-0b77bc4caa63", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fe93af-7179-49d9-8981-9f684b7d664e", "sighting_of_ref": "indicator--009c5c4b-7c44-4b90-8f14-40e51c8895ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e922bac-ba72-4b21-a267-084ae7ae5596", "sighting_of_ref": "indicator--8b0e227a-d4da-4207-8e4f-c5e2794729bc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c8669e-f59f-44bf-9f1a-822d04f8d171", "sighting_of_ref": "indicator--bd22c037-0f3a-4699-9f0c-01465669b31b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd5c845-6549-4ba7-89a2-27185d46ed03", "sighting_of_ref": "indicator--c5a5e66e-aff0-4f2a-9a9c-162c98cf52e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e2b95c-35ec-420d-9918-add2ad6e45ef", "sighting_of_ref": "indicator--b445f126-3b6b-4728-97eb-3648393a46f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e499934-5f3c-4245-8fc9-029211b71450", "sighting_of_ref": "indicator--66230108-658f-4bf4-b1f1-2bfdf9bd087b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2e48ce-da0d-4444-a21d-b6154020331b", "sighting_of_ref": "indicator--31a1e4cf-0c31-40b7-97cd-84735b43276c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5955bf-47c9-49fe-a099-af4ddc7c7129", "sighting_of_ref": "indicator--6a73d23d-478a-46cf-823d-006e4efbfaee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24ece26-2226-46f7-bcac-ec1cf21f9f5c", "sighting_of_ref": "indicator--63222d03-faf2-4c1b-a89f-1313e9c5c3eb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3608903a-df86-49bd-9ac9-08281d4bc039", "sighting_of_ref": "indicator--f2b98ba3-0487-42ed-b028-d1e576a08e9d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7184bf31-f21e-42c7-9860-adcf6e687229", "sighting_of_ref": "indicator--f72c8da4-4bfa-4eb4-8500-594c1be6b66d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a84e96-29c9-4303-8497-6a9f60d58b11", "sighting_of_ref": "indicator--02db7411-4510-4a70-8cd5-1d87bb51aec2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56468f9-3ba7-49eb-b8d9-a4c6bc61cf35", "sighting_of_ref": "indicator--bcf06ce2-096f-4544-9f64-ac14ab603107", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4d978d-2991-4e80-97bb-d3e6c55317e7", "sighting_of_ref": "indicator--3f3349ff-729b-4934-8a75-842152a9df88", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6435bb44-1d81-4178-b65e-608060201141", "sighting_of_ref": "indicator--23c72154-cfb2-4d39-b0b3-5c0dcc13ac36", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0b3425-9339-4069-80be-04371a595d54", "sighting_of_ref": "indicator--cfbfc705-be4c-4e80-a9d7-7335de7ea5a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61828636-9b8b-4cb3-8d5d-2cc59fe1fc76", "sighting_of_ref": "indicator--36a2b13a-f2ed-4412-9485-4c8f041e780f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fed15b-3342-439b-9e7e-35579840280f", "sighting_of_ref": "indicator--47242df1-8a7b-4685-a33a-2bef4e441e25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02540c3f-bc89-40e1-8d53-8415ced217fa", "sighting_of_ref": "indicator--d534d59f-0e26-4328-84a4-40dbcdf53832", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf16fdc-d38b-4517-8500-61baaddb019e", "sighting_of_ref": "indicator--2096e1fe-f751-4255-be6a-0aed06266598", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a0f9ac-2a91-47ec-bc83-74519e0d44eb", "sighting_of_ref": "indicator--30fa5385-7422-49e3-a866-c28237c6c22c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f98837-d521-46b7-ae58-a18e6850a81c", "sighting_of_ref": "indicator--855d2df0-2c36-4f84-93bd-1d62a82d3233", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccea9df-04ec-45c1-a02e-91fcff42a8e1", "sighting_of_ref": "indicator--9de1991d-1694-4c96-b3dc-2ba9722b42f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c45717e-7a60-428b-8611-eff4297fad5b", "sighting_of_ref": "indicator--08d977b1-eeb5-40f6-975c-be4fa0442372", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6c335a-3758-4282-a6b9-ffefa3b62625", "sighting_of_ref": "indicator--a61c4be7-2735-4e6f-bd32-d8e153601478", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5d5904-3182-4580-937d-a24036e4c9d9", "sighting_of_ref": "indicator--098e7f8f-985f-48b1-9954-408d688d473d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a393b20b-3b33-4a85-a4e5-32804abd635e", "sighting_of_ref": "indicator--b58a40e6-69e8-4e5a-98be-4f6c8dab97f6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc445f6b-1a4f-4248-9368-5a3f28d31549", "sighting_of_ref": "indicator--f45b4b32-f911-4712-bcb4-b5674711b597", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f03438-cc8e-49fc-b8a7-20757b9152d9", "sighting_of_ref": "indicator--d19b81d0-77aa-45eb-989b-15c1d9bbe1dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18c8efe-3fc5-4123-9575-3119a0c40ba1", "sighting_of_ref": "indicator--9fb213b9-0d60-4ed4-9e8e-c8f72f8eb85f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63463bb9-1cb7-45bc-972f-01bcbb53ff44", "sighting_of_ref": "indicator--643a0dd6-0110-4dbd-9c73-57dd85a264fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445798d2-40d9-4f3d-8a71-4ef808cc751a", "sighting_of_ref": "indicator--f3f099b3-4547-46d5-b3d6-33c6f5854cf2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec64adce-741e-43a5-a1c5-006eca89b9b7", "sighting_of_ref": "indicator--85d4ec3c-1533-416c-934d-f6cd7ccc4adc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca7c69b-af18-4eb4-b02e-61286e6d25c1", "sighting_of_ref": "indicator--ecc292a5-314e-4e0e-b033-e23c7c488a62", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba3b072-ff55-4fc1-804c-9746b9cb49ca", "sighting_of_ref": "indicator--c50952c7-d864-4efa-a8ed-961966ea4946", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cc77b7-1ff3-4088-9397-140b50156b9d", "sighting_of_ref": "indicator--bdce9ecb-14d8-4e83-b0ca-a157428569ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689bcfa3-a53e-4498-96c3-2820484f0536", "sighting_of_ref": "indicator--0e84af9c-82aa-4e23-ab61-e953fd803257", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20f46ea-083f-4479-9cf7-7049c5a91ad4", "sighting_of_ref": "indicator--da22189c-e5b6-4a11-b427-861e7697daf3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd58e137-75ae-4c7e-a636-2bab43d12efc", "sighting_of_ref": "indicator--f3043d47-396c-464a-88c9-ddcca1cefe96", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88a9249-1575-4c19-aad7-23c29ffeab58", "sighting_of_ref": "indicator--b833bb6f-346d-4631-90f7-d15bdc5ec3ae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bffcf4-7b4e-4b03-891a-f958d38847bd", "sighting_of_ref": "indicator--b6cd2ad0-7e65-496a-ba0e-2034ba0ca84c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b3e73c-96d5-4e0d-919b-783479e390a4", "sighting_of_ref": "indicator--64efd94a-2183-47da-866b-8b0e0a76d1a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8034822a-2e49-4011-81cc-201b2349d91e", "sighting_of_ref": "indicator--b859f369-d0a4-44f8-9ba2-a0ba4b12c8cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26eed36-a046-48f9-8044-d55715a5b2ba", "sighting_of_ref": "indicator--150f3420-c8f3-4f0d-80b8-1860915492bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741a1471-c28e-4104-aaa4-1c48555a11a8", "sighting_of_ref": "indicator--d7c30ade-44b6-428a-b01f-dae75d02efe6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9565462-3810-4e27-925a-355b7e1788dd", "sighting_of_ref": "indicator--191eecf9-c755-4a7e-8cc6-ac84d515ccf6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4775cd42-c4bd-4506-b488-4155cb0e0692", "sighting_of_ref": "indicator--6cc79be6-1b1f-40d0-81fc-29144e47f71d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8212fd20-c08f-4848-ae8c-a4bf5efe0108", "sighting_of_ref": "indicator--237e11ae-43c1-4bbd-ba0f-522e99ebf0f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda21755-1c12-41d4-873c-fe3e0700525f", "sighting_of_ref": "indicator--344cfa3d-698d-4838-b466-ca9630c452d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307f98de-bf4a-4a77-9da7-2a5aeb53f811", "sighting_of_ref": "indicator--356c07f5-ab97-4cd9-ad01-58c91d1b610a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da25f74-e8bb-4a21-b013-86ce06ab176d", "sighting_of_ref": "indicator--3998bad2-17d7-4c95-9aa7-9229299db7a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06615d6-b1a4-4a3b-8202-808c93ad0af6", "sighting_of_ref": "indicator--473364b6-a812-4e13-b4ef-e6d54458188a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a876f5-7299-436c-87de-3292f1c8db5a", "sighting_of_ref": "indicator--e1cd16c2-8026-4c6f-a9a5-57d5e73302af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba107b41-1c3b-47be-a81c-dd9984264167", "sighting_of_ref": "indicator--8f0769e8-3804-4229-8aec-561265487c8a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5710cdd4-777a-4931-a321-552dc3df0a20", "sighting_of_ref": "indicator--e53fac12-ceef-4301-b950-272a1d41bc32", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc21950-8e84-4e91-8704-16e0f1c317bf", "sighting_of_ref": "indicator--f3d2fdda-16cb-4377-baed-a2bc1b780b44", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0493f89d-b8c0-41f6-bc7f-cdf9b3b992e5", "sighting_of_ref": "indicator--1d610712-f13e-4dec-b6c6-eb5a1d327ef7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c7bbf0-7430-4691-9b43-f0f5562cd339", "sighting_of_ref": "indicator--4f4e2424-ccb5-481a-8ca9-4ab9c71c56a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b231d8ea-cd45-43df-969f-a811e0db2f1e", "sighting_of_ref": "indicator--95e6c1f2-872b-4ad7-bea7-aca13f16c099", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fea516-c982-408a-97d0-64f3f538e528", "sighting_of_ref": "indicator--86e4b05e-bde1-418f-9b04-86eba722029c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15411a2b-e5bc-436c-8bb0-3a43b6588489", "sighting_of_ref": "indicator--853ecab7-e751-45ae-aaea-014249b80a4d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058fb9e5-d041-47a0-af3e-8936cffcd678", "sighting_of_ref": "indicator--d9b67e1f-cf68-4646-bc81-65b2003313cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8a40e8-ad05-4193-a876-dfd9f5450a80", "sighting_of_ref": "indicator--8f2dd6b0-3309-42d0-a6df-9ea6dccc7977", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf14311-727d-4640-bd35-2b1c902cd4db", "sighting_of_ref": "indicator--44ea7e89-f64b-40d8-8089-029fe864da7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a338fd94-8257-4df2-ab0c-01063c5a95b6", "sighting_of_ref": "indicator--1049e10c-e73e-43ed-aba8-5ea8b653056d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc91ea74-d3d3-4263-ab1a-4e736cfce204", "sighting_of_ref": "indicator--583fa67e-853d-4db5-8d46-e51f98ade76c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8c111e-2820-463b-9af9-2695f671fcd0", "sighting_of_ref": "indicator--7665f348-bba3-405d-b239-efefd647cadb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecb9e0a-1d55-4159-9a05-8e2892c2922d", "sighting_of_ref": "indicator--ab756073-76d4-4b64-9803-c9943e888355", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb9dc41-b07b-4fea-9ca7-6e1c90215234", "sighting_of_ref": "indicator--4c84eec9-011d-4822-b5ad-407b3ea24315", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a8d61a-af5f-44e9-9ed4-72eb558be35b", "sighting_of_ref": "indicator--ba8c5261-36bc-46a1-a679-3a4a2dcbf4ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc75e56-18e4-4028-ae4d-428ee30a5363", "sighting_of_ref": "indicator--79143fa9-d173-40cd-8ffe-38a1347ea838", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f33140-d8f7-4b90-a3bc-114284739c2a", "sighting_of_ref": "indicator--7a16256e-b0f2-4f1b-85c6-b20e96ea761e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f658d48-f783-409d-a358-f0a60afbe91f", "sighting_of_ref": "indicator--3f037a9a-2270-41e3-90fe-da3058663a63", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddacd345-6a8a-497b-b728-17f571d2f589", "sighting_of_ref": "indicator--df5cb2ac-4fcb-4634-a631-6f3f2a9bd946", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3da349-faed-4ef3-98a8-6403b25a354e", "sighting_of_ref": "indicator--b9c6d296-1e72-43d8-88b0-ba58bb9f2064", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d32950b-a798-4c86-900c-dddaa416dda9", "sighting_of_ref": "indicator--a592d8eb-107e-486a-a539-972b066f0f63", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1397e9-f93b-4048-92bc-aeb46357a4bb", "sighting_of_ref": "indicator--ce1fbfa8-3afc-4436-b54f-8414180e1f7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68d3763-8332-4896-9b65-53f7e99aeb30", "sighting_of_ref": "indicator--99ab7fcf-98b8-4a3c-9c55-debd64a559a9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43693ff3-c759-4a00-893a-623ec37d9e77", "sighting_of_ref": "indicator--90c046a5-52b6-4f07-a6ac-5506c3a4e407", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ef3ccf-fb8e-49c8-96ae-8d5dc355088b", "sighting_of_ref": "indicator--cfdb455e-2bc6-4383-83b4-50ea48e61081", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e7cb82-27a0-4fb6-b1ed-f160be2d6246", "sighting_of_ref": "indicator--60527283-16b1-4645-b393-fffe64c16994", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7248a461-3199-480a-a21a-9a66a06635a4", "sighting_of_ref": "indicator--c3fd8832-9f63-48cd-b8a3-f7c79c34766a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4de2be-f095-4bc0-9190-9b9803172ef9", "sighting_of_ref": "indicator--f001cd6d-a92c-4a97-9877-132f89e1efde", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8518ad3a-14a8-48de-af48-ebb75f431574", "sighting_of_ref": "indicator--6b86a40d-07b4-44c8-a9a1-8d42fbebf20b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c325be-9683-4f45-b3e5-bf9f6e1cbe5e", "sighting_of_ref": "indicator--9d85a268-61a3-496b-b15f-d35c99358615", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db0b246-edcb-4350-b247-57c6889106a5", "sighting_of_ref": "indicator--6c63583e-64b9-4ec0-80b6-6b77bea321f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b192b144-091a-48da-a596-b374166e96a3", "sighting_of_ref": "indicator--f6df678a-8878-4ab1-a6bf-3006ea588a06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2deb59a1-3d3e-4831-9f30-7b90c5d5188a", "sighting_of_ref": "indicator--39a352d5-8fc3-4f67-9387-64e28c50ed08", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5add0b15-8271-4d95-a70d-51b88b922386", "sighting_of_ref": "indicator--85002489-d4af-4cae-882f-c18fa13b2323", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec837a3-5a76-4fae-8d36-b2d26d0c5468", "sighting_of_ref": "indicator--4485bbb1-c247-4542-9f3b-31a1d9945418", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d38b71-9294-41ca-ace9-a5dcb18a33f7", "sighting_of_ref": "indicator--b0221fcf-c67a-48e6-ab76-f89aa951deb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4c88e9-7409-4e2e-9ff4-154af2967824", "sighting_of_ref": "indicator--91ce5d28-5e63-4f4f-9195-7f42ad5fbc0b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e361cc8e-8cfc-4229-8a6b-01219fbbfc5d", "sighting_of_ref": "indicator--398980cc-b6c4-4950-8b97-f895aa7c19ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a6a9c9-3bcb-4e39-b568-f6a53c599385", "sighting_of_ref": "indicator--03f4932e-d9bf-4c96-b9a5-6c59d6cd81c5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b57e2e-36ef-4ecf-91e3-56872232fe88", "sighting_of_ref": "indicator--5ca0e7db-c348-4417-975c-79109ddaa6c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c06875-d3a4-414e-a0c0-b13911fd16bf", "sighting_of_ref": "indicator--9fb366a7-47ef-4d68-b82a-c4d6ebbcc40e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aeb57ac-83b9-40cc-b6f2-05263e6fa7ca", "sighting_of_ref": "indicator--77342a92-360b-4b12-8e2c-ce6a1803b3b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6b0ac8-bbbc-4fb3-9239-5890c0c11a29", "sighting_of_ref": "indicator--f217c971-5fd9-49c7-abaa-764993e46fc6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6893d9-cdd3-4be0-bd34-e734512f8e02", "sighting_of_ref": "indicator--563574d8-6785-4531-84c9-dc98ad0f6fd2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2482748b-4afc-4a58-82bd-b0e571d7df60", "sighting_of_ref": "indicator--79fe97b1-27dd-4219-9f40-d1ecfb3589e9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5066f55-3b98-4aae-b1ea-0463521acfba", "sighting_of_ref": "indicator--b30d2d45-5e32-4d14-8a8f-40833a27d7fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45e1e5b-5230-435e-bd60-9fba80a1e994", "sighting_of_ref": "indicator--a787cbd9-cf94-4f79-a72d-7beb2e7a1d3c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525cffd4-dea7-451a-913b-5eace70acf19", "sighting_of_ref": "indicator--200967c4-0e99-4123-8078-2d944c200d36", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36fa8d7-a28c-4027-a649-dae43d260ba9", "sighting_of_ref": "indicator--5ac102ee-c051-4bc1-9268-79253b1b4f32", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951276a5-13c1-4840-9f72-a70a37fe7507", "sighting_of_ref": "indicator--50f814ed-088a-4bfe-a64b-5b678578ccc6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63727ea-38ff-4a2e-91f9-bf2978400221", "sighting_of_ref": "indicator--6a5dc3b2-2909-4131-88e3-31a51efe4ea5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fdd277-ac0b-43b8-b20f-8964b2914ca2", "sighting_of_ref": "indicator--ccb7cfc0-0687-46fa-bb45-17a17dc0c6a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7903c030-8e67-42c1-a366-5805b098dfaf", "sighting_of_ref": "indicator--2dbf50c4-70a6-447f-b556-0c0753f92902", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee13ee32-801d-4faf-9813-517174e4b1fd", "sighting_of_ref": "indicator--85b1d9c8-f792-4c70-9e64-bbf09f7befcc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b318796-3e32-4094-8a02-77eeccfe9503", "sighting_of_ref": "indicator--bcc14fbc-f470-4c66-b645-30f6f8f51da8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13203e9-3bf5-498b-bc6a-1942111afcf9", "sighting_of_ref": "indicator--5c1340e4-f01b-4e3a-9650-cdeaf73efdbe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1f322a-aafa-4793-a16a-e0db21889747", "sighting_of_ref": "indicator--3a3333a4-8a3a-4e53-be5c-02514700a187", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1240b836-3d51-4da5-a27a-32462467b082", "sighting_of_ref": "indicator--dde86672-39c2-4106-8a16-ed06991969f3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00fc910-387a-40c9-af0a-75e3d1983136", "sighting_of_ref": "indicator--5581a258-a415-405c-a518-fcf9736b88ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6932bcb-3d28-4cc8-ae6d-982676189c13", "sighting_of_ref": "indicator--90c24c06-8fc2-43d2-a67c-2cae5a1ca0af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93258de-e3e6-4602-b328-01f9cd6efccd", "sighting_of_ref": "indicator--d77b937f-1205-4ad9-9fb2-aa84010388fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee1cdaf-51ef-43e7-a9f6-9eb04517dc57", "sighting_of_ref": "indicator--32ffd40c-ade9-44d7-907e-0632991e4351", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993f6654-d8e3-4d32-9b4c-3c8bfb6c6838", "sighting_of_ref": "indicator--f6574da1-8b56-43e6-bf96-1d05b538cf12", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a141fa95-f221-4c72-833b-29513af80ffc", "sighting_of_ref": "indicator--a39c398b-37a7-48e9-bb3a-3782879c4019", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab31bde8-be4f-42d1-ada3-335ff2e58930", "sighting_of_ref": "indicator--57c0e5c7-807d-42a7-ac80-2a974a36fbde", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b027d409-8c69-42ca-b178-5015d2514e2c", "sighting_of_ref": "indicator--9db920b4-b1e8-41ee-8d57-087807cf1046", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef35fe9d-2c66-4321-b2e7-b44c4db78e16", "sighting_of_ref": "indicator--b24b96a0-31b2-4d54-98be-0f797c975880", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79de0af-fc05-4a78-b084-d2d5b7a65fe8", "sighting_of_ref": "indicator--4e3bda40-43aa-4c17-a133-57b2cc05918f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9636fc49-c0ce-4e32-bd95-1bed8be8266d", "sighting_of_ref": "indicator--43665e5c-7824-4efe-a3c7-d394c8b8c31a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6acbc89-804c-408c-9842-1c38d7064d40", "sighting_of_ref": "indicator--ddd6c68c-90c1-413f-8cd2-a33f8c2c36df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b8a460-8262-4b37-aadb-e5d0a57f2226", "sighting_of_ref": "indicator--faff354e-0b44-418e-a7da-2ec5fd94e7ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ca1e5f-398b-4436-8b25-0d368ec803c1", "sighting_of_ref": "indicator--9922cf5e-4d83-48e4-ad5d-d820f7597afc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472643f2-e7d6-446b-8755-0e9cde48cabc", "sighting_of_ref": "indicator--0855aa80-7707-4537-b2a2-239fd65848dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7844c6-e2ad-4262-b5bb-c07887159e00", "sighting_of_ref": "indicator--740ef77b-d07c-49ed-9eb2-24e701b6ce72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f873a9-993d-4687-b10a-a327e65a8a57", "sighting_of_ref": "indicator--0572c02d-9e2d-45bc-b96c-c328aa7f37dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc04318a-4a8f-414f-b7bf-75080e178f4e", "sighting_of_ref": "indicator--dbb0f816-8801-470b-82c0-6b8c4a9fd9da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42be9a58-af11-47d3-875f-da6f326744fd", "sighting_of_ref": "indicator--3fac7348-2e19-4638-aae8-731529ce2f5a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ba0c4c-8f00-464d-afb7-f4ea2e761a0d", "sighting_of_ref": "indicator--cafe0ec2-bf40-4e99-bea9-a37fc3744475", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e8a4fc-73a9-434b-9b75-f4c7802ccd45", "sighting_of_ref": "indicator--2f7d0ad0-0766-4513-9814-188994c85e72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebdb60d-dc2a-4fcc-ae3a-988b2742694e", "sighting_of_ref": "indicator--8338cc4d-ab02-4d2b-ad41-f1d7af56a5df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8590da62-612b-4e6c-8ecf-725ced35a0fa", "sighting_of_ref": "indicator--46da3a9e-1760-4a5f-89ee-d685e210ff48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8443a697-b6d4-44e5-bc34-12df562a13e8", "sighting_of_ref": "indicator--e5c18d95-86ff-43ae-99aa-cb28163dc986", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da78f83a-6a5b-4a51-93f9-75b6409751a4", "sighting_of_ref": "indicator--98844eae-050a-47d2-b0ec-29a385a43732", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ecadd1-67f7-4e2a-9c1c-11647d1b234f", "sighting_of_ref": "indicator--f70b1b2f-0123-4dc0-88fa-3bd6ced7bdd0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6cac7db-9117-4e1b-be0d-d42c89daaed8", "sighting_of_ref": "indicator--982f29e7-6539-40e8-829e-9f909498409a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a2ad99-c368-493f-8d64-d39259c26fa5", "sighting_of_ref": "indicator--1924ea83-2463-41fc-9a46-debfbc43d716", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540c8e82-160e-488b-b6af-846344fb25e0", "sighting_of_ref": "indicator--0b936884-d572-4ec0-b6a7-2728d8508f4e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5fa87d-5059-498e-98f7-f507c4e3723a", "sighting_of_ref": "indicator--d9a58a2a-8342-4a57-9757-14b6af6b5896", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a50fc6-40f7-4a19-b448-e03cb80e7e23", "sighting_of_ref": "indicator--9e155c33-767a-487f-98d8-e9a0c4387a45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1454f189-b999-4c9f-b7c1-b1c17f2816ba", "sighting_of_ref": "indicator--08426724-511c-4356-8720-0946620642cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f23b26-548f-4d6f-8a22-623dcecc7fdb", "sighting_of_ref": "indicator--1691555c-aee6-45b3-8ad9-71a41a0ab766", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833f3f9a-e523-4ca1-ac72-0878f535a245", "sighting_of_ref": "indicator--6fbe47cd-d5ab-459d-b62c-69883b211a30", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b7369f-1371-4084-8067-2ac02f007fa4", "sighting_of_ref": "indicator--f6ec7f4a-74b1-49da-ad80-3e6407c33412", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00c97a7-d99f-4b1e-9ed9-d6698f270242", "sighting_of_ref": "indicator--5fd623e3-f8de-4e32-8db8-ad3d5bbd7860", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf7860f-614c-4401-a7f3-990fbfb2ab2c", "sighting_of_ref": "indicator--5f270651-a6b5-46ea-b881-243b8e772efc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e26e7ac-b09a-4cee-9cdd-0bb130cea063", "sighting_of_ref": "indicator--d343e72a-d500-44c8-af7d-21e1c10d35d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b6d7f9-ee5c-4de6-b76d-073b817c9bd8", "sighting_of_ref": "indicator--dcc4d39b-8170-44f9-9e1c-61dc4f56f4a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b50d8f3-8fa1-4ef7-ac04-151c1a851561", "sighting_of_ref": "indicator--ebc626a8-c0c2-47b2-8752-86ec9b91cac7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66082e6e-df73-42b3-a084-e4dd4094ca85", "sighting_of_ref": "indicator--a0a6ada1-d63a-4469-82f7-1eef6bdfe716", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30e7e1e-caa6-42f7-9ae3-6001e0f74d9f", "sighting_of_ref": "indicator--a25f5603-a6ae-432b-abe7-3b245c344203", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8182105d-dfb5-468c-bf42-124811a2842e", "sighting_of_ref": "indicator--c3d1699f-b6d6-43cd-8ed1-7157505f8cf9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b517db-9cdc-4c1b-bd2b-bb4f07f0a5dd", "sighting_of_ref": "indicator--8f605de8-15ce-4a3f-b928-8bb5ee4b796e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac3e8bb-7d55-4b20-9d35-dc882d6971bd", "sighting_of_ref": "indicator--0a47f4f6-3c40-4c8b-a6dc-2de5e160f8c7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa39181-c925-4341-a554-ba099564a5b5", "sighting_of_ref": "indicator--f95e9748-c676-47e6-beac-e2dc5e7064c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3e2708-ebb0-4b14-82f7-a950bf56bf13", "sighting_of_ref": "indicator--a9044cd0-d021-4f91-bb66-fcd9e72fd762", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df24d69c-e02c-475d-81da-121fa3a6d4fe", "sighting_of_ref": "indicator--b21e6d5f-a5c3-4904-9b9a-63bd9786557c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821a5aae-b9ca-41c9-bc12-b765f02c11e0", "sighting_of_ref": "indicator--cb40328c-e55d-4f2e-94f1-5c308d0cf816", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10c1a94-93fb-4036-9ad1-5712f45f528c", "sighting_of_ref": "indicator--75f1c73f-d808-4f7b-9d2d-06f40b7f795b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd43c03-0b58-4cd0-b678-5e72dc61d375", "sighting_of_ref": "indicator--d0626441-518b-4d40-ad17-2eb37f2b3a22", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25d3b80-3b83-45c2-93a6-df63d678756f", "sighting_of_ref": "indicator--d248bc19-7d62-45d4-a0d8-96d54c4ddb45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fc97d7-fd74-42f2-8e08-0c84464768db", "sighting_of_ref": "indicator--73fb78e3-3b10-4b74-a823-fcff8d96a73b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af81b5ab-6d18-4847-bc2f-874871851d39", "sighting_of_ref": "indicator--11f189c0-d510-41c7-8944-0830a3772c3c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0d3621-53d8-43cf-83d4-67c851f88c49", "sighting_of_ref": "indicator--3745ad7f-efe6-4439-8efe-5a827e70ba27", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3e0d17-01d0-4d1a-bc5c-bbb6240d3c0e", "sighting_of_ref": "indicator--052c0d3d-560a-496e-a565-6e4ae8e0d972", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957e74b8-330d-4d75-9270-2d94e666c7f6", "sighting_of_ref": "indicator--96b7ea01-aec1-4028-842e-718a78930798", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161250fb-6b4d-45e8-961c-b84f3bae1587", "sighting_of_ref": "indicator--90718389-65e9-4e53-b614-4ffd125b14ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f8b5f0-c1cd-4d5b-9a4d-62009f49c98b", "sighting_of_ref": "indicator--2a52673d-17e2-40a5-ae51-4d9890527070", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d15cb47-4d6b-4834-997b-2ec6bc4f59b9", "sighting_of_ref": "indicator--dae259a0-2af1-457e-8b46-30737982e2ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69800b9-001e-46cd-aa99-1248e9e2b007", "sighting_of_ref": "indicator--0b82319e-c81b-4ef7-9c45-87a862602a40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be660402-b3cb-4291-ba1c-2b8eac5a0c39", "sighting_of_ref": "indicator--710325ab-118e-4697-a5ec-464ff5436186", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e33a7e7-36b6-4900-a336-63c547eb223c", "sighting_of_ref": "indicator--da03e229-aeef-43a1-9984-0ca44a29adb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b726772-2499-4dca-b38c-368120d4db36", "sighting_of_ref": "indicator--645890eb-fe9b-47ab-9b20-bdaf85a6b7b5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082bbafc-2cbf-4ba8-afba-5d2f7563178d", "sighting_of_ref": "indicator--d3b319ec-4476-41aa-974f-1749e5342b72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab40275-4fac-4c58-a5c0-05ae0c38685c", "sighting_of_ref": "indicator--5772dced-bdbe-4bf1-bdaf-ba53aeaa888a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bb1706-438f-4ea6-9f5e-80a3e28ba3e1", "sighting_of_ref": "indicator--025ad209-b238-49c9-b8de-57638dfd6f6f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc6601e-f375-4a8a-a3fe-64df5465db8f", "sighting_of_ref": "indicator--cf8a3bf7-2819-4c7a-87ca-b7bfef932335", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4bde7b-f894-4df6-9f23-d944a9052bbb", "sighting_of_ref": "indicator--93cc8f69-ae6c-43fc-b9d7-ea831831efe8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ed7ab5-babc-482b-a98a-b071f3f898f8", "sighting_of_ref": "indicator--96503612-b3fc-446f-855e-cafa213f4fc1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd364a2-3822-4e8a-8692-d41871b115b9", "sighting_of_ref": "indicator--16f20a89-0615-4c90-82de-901f1f3ae00c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e5e903-ba52-40f1-9d73-4ee56df9cb89", "sighting_of_ref": "indicator--9c4ee789-d96d-4335-b83f-6f62e6256d63", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413bb83f-6b93-4a38-aae9-6dabc07ae385", "sighting_of_ref": "indicator--7066318e-de9b-4a5e-a620-bf3dbff62f26", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bcb9c0-5782-4d78-ba12-6e2d7ac4db2f", "sighting_of_ref": "indicator--2493a3e8-648f-4208-8dbd-3d2493daca0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c171a8a2-111d-403c-a66b-843a9ddcd445", "sighting_of_ref": "indicator--c8acb220-cdfb-41b5-8332-38991ada2776", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb6942f-0f85-410e-abad-41af78293279", "sighting_of_ref": "indicator--dbc786f9-8ff9-4388-96a4-2d4f09fae69c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4110c94e-a9f7-45e8-867a-768972c8ba4a", "sighting_of_ref": "indicator--14068582-0422-4489-afd4-c0a2eb3d29ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc0313a-1c64-493b-be14-15137acd48b4", "sighting_of_ref": "indicator--bae6e414-4c9e-42f8-91dc-e925ec886b6a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573d89ae-1006-497d-b969-694d558ba5f0", "sighting_of_ref": "indicator--469ed15a-a303-410e-aefc-7d05a6ab8f26", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1c12dc-e56b-489d-9414-50aedb65d18d", "sighting_of_ref": "indicator--1b565592-2e95-4921-8099-cfe0dfcdf1cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e6dc38-159d-453d-b33c-fa38bb6f64d8", "sighting_of_ref": "indicator--946f9c10-0ca7-4f29-be0b-fa092bc2b1b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a7f277-b542-4418-9bf5-f0970c932ef6", "sighting_of_ref": "indicator--a01cf8f2-1a0b-4448-9756-fa5071198fa2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f928bf38-f9f4-43e7-b791-b92173520234", "sighting_of_ref": "indicator--e124a224-5adf-4d63-97b0-735cdff399db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1d60ce-346e-4895-8469-90426403fa82", "sighting_of_ref": "indicator--b4467c90-0307-41dd-b499-3b124542f64b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb16cc14-ebc6-4fab-9e0f-578ed4d51017", "sighting_of_ref": "indicator--338e157d-12ce-437c-aca5-09fd01edf48b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c43cd8-826c-48b5-8b25-0c6b467f0161", "sighting_of_ref": "indicator--de871a44-97af-4026-8bbf-866ae48fd21d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db09dff-08fd-4f68-8a19-39658d85df5e", "sighting_of_ref": "indicator--303f9bb8-e76b-4111-b103-76be71b3a2fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2b18bd-51e7-4985-924f-0e9c3bce97ce", "sighting_of_ref": "indicator--2b2f4ddf-760a-444b-8123-c5732036d941", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5719b719-b3d5-443d-afd6-c187aca3d164", "sighting_of_ref": "indicator--d1d77dc1-2456-4ec7-b254-26c87ab05c8a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d1a360-5876-4a12-9520-19b8c4a26cf9", "sighting_of_ref": "indicator--05cfcdcb-e5c7-420f-94bd-0ff95c49e05b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f936746f-34d1-446f-9b02-49ba8fed9a66", "sighting_of_ref": "indicator--fa8ea3b0-be05-4635-a5a7-2e899db14d8e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc8b083-aaeb-4efe-a1dc-2e2669cbaa2a", "sighting_of_ref": "indicator--9117fb7f-1542-4b58-96c1-976cdedcc774", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0207bcb5-ab84-41bd-ade2-7647e718700e", "sighting_of_ref": "indicator--6cf4d2ab-25a4-4876-b363-6cc5e1bcdccb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a30f569-beb9-49f0-87da-216d9c53aec7", "sighting_of_ref": "indicator--d39187cb-128f-47b2-9b46-8c2b2a4d4c43", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a97bb9-17dd-4b82-9774-fde4d9b74c08", "sighting_of_ref": "indicator--47d7c2bd-1a1b-4a5f-8605-29c032d68e87", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab32f1f-9e1f-434d-ad97-7c93216a710c", "sighting_of_ref": "indicator--d6ef320d-719e-4b08-a234-75fe36969a1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85133def-c23b-47ab-ba6f-5e100a8210c4", "sighting_of_ref": "indicator--2135f762-152e-4370-8d47-52b25b40eed7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fd0257-d0ef-49d8-9c21-5ee67e3227ff", "sighting_of_ref": "indicator--4f514534-74d0-40d4-aa9b-ed20d7209679", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c1cd1e-e523-44bb-9fed-36923aba18cc", "sighting_of_ref": "indicator--2b628137-3445-4b41-bb3e-3dc4e4241f22", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6e18eb-3af3-4e25-a167-1a3b8b7507ef", "sighting_of_ref": "indicator--94855125-0089-4572-a674-e15b41b5e6ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5415c6b5-c04e-4781-86ec-2b0781eb217d", "sighting_of_ref": "indicator--e2a0edf1-00c3-440e-add9-bb72cbf639a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc3eacd-8732-4d91-bdf9-cc8702104ec1", "sighting_of_ref": "indicator--df594617-91ba-4cf0-ab0b-260f37596251", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c52f442-6455-491b-86a5-0abf3e3fbd7c", "sighting_of_ref": "indicator--057e7297-cd29-4660-ace0-4ddbb686af77", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef47c45-08b5-4173-b387-8741c99741e2", "sighting_of_ref": "indicator--d4433aae-aef1-40ee-a23a-4b6f207fa0b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8ab1f0-5c03-41e5-90c6-b7997b7348f3", "sighting_of_ref": "indicator--720a7d91-a2c0-461a-98ae-6f73cecd7494", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e31443-d47f-4697-8121-36b2378e4b1d", "sighting_of_ref": "indicator--c921847a-5053-4859-9806-7a2d2bff5a64", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc22c53-4e9e-4063-b780-5a6377868812", "sighting_of_ref": "indicator--8d4a7918-57d3-4c72-99b4-a47242c1a43e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b29c526-c103-4aff-80b1-fef0a049c538", "sighting_of_ref": "indicator--b90232bc-e03f-4df6-a155-5386bce0dc37", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72015187-8006-4973-878c-753e8cd0c4df", "sighting_of_ref": "indicator--e02eb2f4-4378-49d7-b2f8-ab47b4f4403b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490ac036-d5d1-4765-a1ba-8f0e9b2fb5e5", "sighting_of_ref": "indicator--7a383d16-2fbf-42a0-85fa-5416b7b46ad6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9668b6e-1ce6-4f2f-b399-a24440159557", "sighting_of_ref": "indicator--82caded5-22db-452e-b9d0-795660d3f79b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bb2dc9-1358-4bc4-81d6-108ca74fb888", "sighting_of_ref": "indicator--a6024e8a-5529-40de-962e-ef70104078c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd7bb81-7910-4aa7-bbb4-a8f5efeeaf12", "sighting_of_ref": "indicator--d724c645-7e7b-45c1-a130-e25883650092", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edeabe62-e669-4c67-8c4c-d70293974d4b", "sighting_of_ref": "indicator--8c5a2df6-40c0-4f2a-8c07-e740803b6c29", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fe72ba-db47-4c45-9db7-ae90175423b0", "sighting_of_ref": "indicator--e5df9ed8-60fe-49bc-9a1e-537de70ae9f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82ed132-5da6-4076-8383-22d8e4e929d3", "sighting_of_ref": "indicator--29a5670e-42d9-426f-bafb-eba375cb25a2", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3e2415-be32-48db-87d0-9a888264dd12", "sighting_of_ref": "indicator--6839716b-ac2c-4b03-9384-f1dbb8958c29", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e904fcd1-38c6-43f3-aa4c-b9e7334c3d5b", "sighting_of_ref": "indicator--df26b19e-cb6c-41ef-8fb2-e375403dc0f4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5ab86b-49a4-4ea6-ab34-2d47ebe808da", "sighting_of_ref": "indicator--41dff1ab-ebdf-47a1-b70b-63b155934b40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995deac1-fb33-45a8-bb5e-b5ee7e05e66c", "sighting_of_ref": "indicator--350130c2-1543-4159-bb5f-8d7c49ecffbe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e07c2ff-388d-41a4-9673-01d2f534b266", "sighting_of_ref": "indicator--e238ee83-8d75-4e5f-ad6b-c5741082b3b6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b538894-4d95-43f1-b056-be5a1ac6dacd", "sighting_of_ref": "indicator--e0c3b203-7a3a-4d86-aa74-4ceae65ba055", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e8a846-1215-4a02-984b-b08780fcb563", "sighting_of_ref": "indicator--57194465-252c-45b8-8e10-0176170738d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b988d7-ced1-451b-b3ef-707878388961", "sighting_of_ref": "indicator--3619521d-7678-4fa0-83e8-551116d3fb67", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768cb6ab-6875-4ab5-b3c2-411d2260f507", "sighting_of_ref": "indicator--4e267d02-66c0-4102-a366-0d6e473f1fe3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ace1a4-a1db-4c50-bfea-fb18afe96542", "sighting_of_ref": "indicator--d147f679-8205-4def-9ff6-62e372044b96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84a9094-7255-4185-a39e-3e22e6c3655e", "sighting_of_ref": "indicator--0d6bf18a-06fb-496e-964d-845756c4cf30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8a1f0e-a0d1-4ce1-9437-ff218e466315", "sighting_of_ref": "indicator--5da7acca-663d-4e85-b0c0-db4da2ec0af6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6341dee-28b3-4fa2-93a9-7c3784d4282d", "sighting_of_ref": "indicator--4449aeaa-0308-468a-97e1-0da1b7dd1902", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5510cb0d-b6a2-48c7-a6b4-b56ecd3531b7", "sighting_of_ref": "indicator--32181d45-a732-4fc0-810f-997182a12408", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5ebb06-6c4f-49ec-b375-22af0ab7cc27", "sighting_of_ref": "indicator--f4ed893a-c7c6-4d91-8710-cd85a4397e8b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2e78f6-50f0-432a-8ce8-bb32dc512b80", "sighting_of_ref": "indicator--28ebc592-1fbe-4e25-86fb-8c9133bfce6e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d793ad-1e18-4901-8da3-1b59117a737a", "sighting_of_ref": "indicator--0ad7d18c-ab02-4d68-bec0-6d38fe5bdbac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea5cfe3-5e14-466c-9ae4-e88a43822abd", "sighting_of_ref": "indicator--f2c9a88b-ed51-4acc-af0c-1732410dc206", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891e752e-e0a8-4f47-bb72-b8d4238d18f0", "sighting_of_ref": "indicator--2bb3b6cb-275f-44e7-a731-feb72354d39a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec14d030-aeb3-4bcc-8930-02c284d7842a", "sighting_of_ref": "indicator--e3e56be0-6b23-4a03-9a5b-24a785ec47dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57189f99-c94c-4173-afbd-542487ec9272", "sighting_of_ref": "indicator--75c64e14-b336-4d5e-a6fb-ae030c9694b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a62827-7975-4a0f-882b-016ea3feb967", "sighting_of_ref": "indicator--bdf32b85-248f-4e96-8ac9-db4b7d392528", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdee7bf8-ec18-4a79-9f36-00ec0395628c", "sighting_of_ref": "indicator--1176175c-9fd4-4a72-a90e-1b177432e30a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0de149-35d7-4cbc-b11b-81b9b913ac53", "sighting_of_ref": "indicator--492d18b4-be36-46d3-a262-4701f759fe4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95aace5a-0151-4d80-8fa9-9b569fe33697", "sighting_of_ref": "indicator--0301323c-6a20-4dec-a8c8-188b8afa912f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a33b10-5781-4187-b2ea-208183d306fb", "sighting_of_ref": "indicator--e0c94b56-323b-4165-8490-ee3a6283580c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df456be3-02f9-4a17-89dc-8ce196b955d4", "sighting_of_ref": "indicator--60ab97c1-bb56-4d2d-8555-d967e03375ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad177c76-7421-43bc-aa5d-894b02d117c0", "sighting_of_ref": "indicator--2c1b4689-ab35-48dd-a3ec-608ad2ec817b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86355b49-914d-4862-94fe-69b937bb76e1", "sighting_of_ref": "indicator--b21a6c46-5baf-4d32-854a-99977d729c3e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3abd75-3d01-463c-aaf8-241f18d66363", "sighting_of_ref": "indicator--aa530ad6-85da-4d86-a464-1991c49a7342", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed8444c-9cd3-4848-a95f-6d10addae130", "sighting_of_ref": "indicator--51dc4518-fb63-4e15-83c9-f6ef34df6a3a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2071fb8e-9b03-403a-92b5-6c06648fbaf5", "sighting_of_ref": "indicator--dd8624a4-8f17-4ed7-b3f4-99bad14abea8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed914879-d721-4889-b38f-aeaa02152390", "sighting_of_ref": "indicator--3bd1f712-ad87-4dc9-a1ab-c98a930bfd2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782594b6-26c4-40c8-b8d1-fb53e64836c3", "sighting_of_ref": "indicator--5d013391-f6d0-4282-a387-6ccdf6af0be6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6cc10c-9ef4-41ec-9a18-70b5d176201c", "sighting_of_ref": "indicator--5d013391-f6d0-4282-a387-6ccdf6af0be6", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f767978-7990-4bb9-a2d6-a1ff99331fe1", "sighting_of_ref": "indicator--929f1352-0dd1-4ab3-a24b-2e263f573de4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fff2961-2601-4c2e-b319-7157010a16e1", "sighting_of_ref": "indicator--773d5f1a-c603-4c2a-b62d-8ab0065528b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a4b908-ce84-4faa-a334-f6a3b4c7b091", "sighting_of_ref": "indicator--19c8edee-475d-40fe-8eda-9506ad3186d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641a3c86-ff38-4d72-b184-4798d28f76a4", "sighting_of_ref": "indicator--a8733982-f556-41d9-bed7-451a7fafce10", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc90133f-ccc8-4886-a7ae-12ab4314314b", "sighting_of_ref": "indicator--a8733982-f556-41d9-bed7-451a7fafce10", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e844dc1b-835a-4ce8-a6ec-23ddaf32237a", "sighting_of_ref": "indicator--782f8dd4-31ee-4189-9434-54a13d86bbe6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2a3533-1fd5-41e0-a66e-5aafdbc35aaa", "sighting_of_ref": "indicator--540c8112-d47e-4307-bada-cbf5ccf87460", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c50f31a-aeac-4cf9-ab56-305e14b30dd4", "sighting_of_ref": "indicator--c6ee06c3-f32a-4e10-94db-9a5b50e9f969", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c93e3c-414d-4615-81d7-bed8ba3c8d45", "sighting_of_ref": "indicator--35e01fe2-24ea-4182-85b3-9983c734d2ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168ea39a-1eae-4070-bd04-969259cf3f8d", "sighting_of_ref": "indicator--16ce2986-7a7e-4cad-8492-f53e1cc8ffa4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c907f6b-4939-4d60-b84f-70e5a1ce2fe2", "sighting_of_ref": "indicator--f4c1d6fd-59f9-4379-8a26-89e86b5d46b2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0533080-6eac-4908-aeb8-861a6a044b5e", "sighting_of_ref": "indicator--f4c1d6fd-59f9-4379-8a26-89e86b5d46b2", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f93a5c9-08f9-4925-837b-7f64c274e50d", "sighting_of_ref": "indicator--f4c1d6fd-59f9-4379-8a26-89e86b5d46b2", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c279586-019e-45ee-8593-96bebb5cedc6", "sighting_of_ref": "indicator--a8faca7d-44aa-42ee-a899-b2825351a9dd", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c610923b-4e20-43cc-988d-e8970a38572c", "sighting_of_ref": "indicator--a8faca7d-44aa-42ee-a899-b2825351a9dd", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f2d0e3-272a-4b64-947f-8d2411686461", "sighting_of_ref": "indicator--a69cd2fd-f2af-4090-9a8c-5346ca592ac1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0764ff20-bb7f-4d7b-b670-3ece18a9ffcf", "sighting_of_ref": "indicator--bdb9dd67-9b57-4145-b045-141f76b7e578", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9b5303-b643-4693-860b-179ab41a60cd", "sighting_of_ref": "indicator--9e8c2fc2-c6e1-4ab0-9bca-d2daef510721", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e51528a-8a77-468f-ad49-209d9c5f13b5", "sighting_of_ref": "indicator--1171a268-f834-4270-b195-649c474ccd81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b170d8-f141-4895-a9ee-dd314aa16cd8", "sighting_of_ref": "indicator--b6d83390-c2e8-411f-97be-a3696f993cce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3230dc-89f6-4902-a7cc-539b3df04fcd", "sighting_of_ref": "indicator--2284809f-95dc-4f4b-8e0e-52f12df3c0a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07cd921-b7c9-45af-b98f-977824ebf4d4", "sighting_of_ref": "indicator--9deb96c3-92af-4d36-9d5d-bf66dd861b23", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d33db5c-e126-4439-9d9a-a562379e3ac0", "sighting_of_ref": "indicator--4a9932e9-ba65-472b-98f0-d25f2feeb110", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56740b7a-1735-4afd-9e4e-08e01a066ffa", "sighting_of_ref": "indicator--d9297b08-4fca-4a29-8682-3fc4907a567e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafd2969-a90e-440e-9812-bbc982931dab", "sighting_of_ref": "indicator--03746d7f-b3ca-4875-9d1d-0dd8e0403d67", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1c3533-0ff8-4fec-b3f5-729253db1274", "sighting_of_ref": "indicator--576a83ad-5175-4962-ba35-88b8f7cd4d23", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3781e7-262e-4328-8aa1-7fc997a35c3f", "sighting_of_ref": "indicator--96674dc5-76cf-4761-a823-55f96165c3cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99382a8-bad8-46b8-89dd-fac8e160a895", "sighting_of_ref": "indicator--43957495-f0f2-4b7f-86be-ece555aaef72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cede6c-c4f1-4e3b-a4e5-8c3458df9f4b", "sighting_of_ref": "indicator--dfa1f32a-cd29-412a-969b-6ecd32ab90fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfe0d33-3110-40f7-a0a9-b5ca409be06a", "sighting_of_ref": "indicator--eadbce79-035e-4dea-979d-948a0844081e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919749a2-3fb9-45d5-9bf6-a76809394edd", "sighting_of_ref": "indicator--0e178b1b-ed1c-4e9f-b911-a607e40e9385", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d275b53-a05d-4ded-bf0e-3277600e69a5", "sighting_of_ref": "indicator--3c7f1602-ed09-4094-a93d-f29ffa2376ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c62607-afed-48f3-a252-b66ce7deaf2a", "sighting_of_ref": "indicator--32273799-9f33-4f50-abd4-fb36b2902b9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adaf2289-bb96-4867-966f-909c31849725", "sighting_of_ref": "indicator--cc0ebf74-d959-4503-b468-4fc01f8a6c13", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4abafb1-2423-4acf-9b03-926a332d6d6d", "sighting_of_ref": "indicator--de601d26-30b9-4a7e-b086-05b7c39527d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff8ae1b-a721-4727-939f-33db827f354f", "sighting_of_ref": "indicator--de601d26-30b9-4a7e-b086-05b7c39527d0", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1076c421-dc3b-4e17-9cb8-5f05ccaca075", "sighting_of_ref": "indicator--0ae91b6f-721a-496d-96db-798a319c1ebd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d172fe-676e-4ebf-a816-ba87bc229cc4", "sighting_of_ref": "indicator--bcaf439d-c039-47ad-b6f7-5067f858bc57", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce066d1b-49cd-4c6e-a436-b0e585032519", "sighting_of_ref": "indicator--8e50176f-4fd1-4c21-b408-6a37aab97c2b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4199064a-f821-47a2-ab57-1549c4142605", "sighting_of_ref": "indicator--1f08d125-8c1b-47cc-b227-b841c1394634", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff8ba25-8399-4235-a2c0-7950e03357a9", "sighting_of_ref": "indicator--f5e7be27-e57b-492c-b876-d7906768f0d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b8d5bf-a3c4-409a-862a-664770a056dc", "sighting_of_ref": "indicator--f8b9ddc7-850e-456f-950e-39ab1cbbe98c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a668cf-4e3b-4c92-bddf-6dd36323eef7", "sighting_of_ref": "indicator--def40d02-5c1f-4e09-9c7d-cca92774344f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005ed749-3bd2-44ac-b3d5-3d42b29668bf", "sighting_of_ref": "indicator--a11b95be-84d8-404c-887a-47c13ab3cc2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f98a6b4-ab5a-4466-a913-a890f93178c5", "sighting_of_ref": "indicator--37e042b0-afc7-40ab-8aec-1ba4142254d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bbfddf-303b-46c5-b61f-f69139c9624f", "sighting_of_ref": "indicator--82d4128f-60d8-4010-adf5-c1b63fba47d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ada7524-2225-47c5-88dc-c1591bc9bc83", "sighting_of_ref": "indicator--c7e6c51f-9c40-4b7b-8db5-0ad7fe2421e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a1f547-e9af-48de-8ca8-b73cfa2e433e", "sighting_of_ref": "indicator--4230f7e7-7731-4090-ac5e-23612d9fc234", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0376c0fb-2169-4dee-906a-abdaabff3a03", "sighting_of_ref": "indicator--25e783be-b78e-41cf-9274-0196cd1c3c0f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f54b97-579c-4ae7-87eb-1af31c53715f", "sighting_of_ref": "indicator--ade0fb40-c0ec-4323-ab62-291bc3062901", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4af68e-058c-4125-ab0d-e0748a2a0b03", "sighting_of_ref": "indicator--75d5ff63-81e7-44bd-9f63-c9a9470f07f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7529262-38fa-4960-8a5b-46fa2be2ab5d", "sighting_of_ref": "indicator--ed72e0c1-4f72-4ff9-a504-89a572892530", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b23d7cb-19c4-48f7-b81e-ae5f4438d4e6", "sighting_of_ref": "indicator--1c84ba69-71d1-4a76-a385-55fb0ffd4d1e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68dfac76-110c-4995-b5de-bedd7ac6cf08", "sighting_of_ref": "indicator--4f5c78a8-1408-41cd-95ce-83f2930536fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3ff4b4-4066-4b4a-9bb5-132fdc31183a", "sighting_of_ref": "indicator--475fade9-94c8-4ab3-9e4c-274e93e1704d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d992d6-3725-44f3-b89d-4cbc309cee2d", "sighting_of_ref": "indicator--f144abdf-ff88-433f-974b-a1d86c7aa617", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72d7618-b16b-4739-98db-9ef3ee361d95", "sighting_of_ref": "indicator--69f2d1b6-042c-4ecf-b68e-a141f3c6ac80", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae05d3e-d739-423e-a85b-9b6c4dd76ffa", "sighting_of_ref": "indicator--d9850eaf-e200-44e4-a77f-325d7f21534a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144b40f8-6b49-4026-bb07-d46e08d2e158", "sighting_of_ref": "indicator--3385e47c-b44e-4e19-a6fe-a24b3ccf2ad1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61825a73-109b-4f83-8a98-aaec636b9a06", "sighting_of_ref": "indicator--b07bd1a1-a019-445a-b13c-a89e25fc33af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712ccfaf-19cf-4639-8e19-374077ce3eed", "sighting_of_ref": "indicator--e985ae31-8be4-4ece-985c-83d02400dae0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798233f5-cccc-4e7a-8720-c260609fe206", "sighting_of_ref": "indicator--e82fa1c5-4bb0-4baf-8551-5e4988e8c532", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e0cedd-4df5-48b0-906a-1974f372016d", "sighting_of_ref": "indicator--7bebe7a0-b84c-4e0e-a0f3-5701a4d7b0d9", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b953a3-263a-4161-8308-85d59bb4e151", "sighting_of_ref": "indicator--c90e3a22-7eac-422e-b6ea-6dad0541f576", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20c7519-fc51-45fe-ad5a-fd3b3e53a63d", "sighting_of_ref": "indicator--1478110e-04eb-4209-a9dc-e3ae5e68c452", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ba551e-3218-41de-b342-04b13de170e2", "sighting_of_ref": "indicator--3b968148-280d-493a-b55e-ea94c79fa5a3", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd32ae33-a524-4332-953e-383b95a5fc99", "sighting_of_ref": "indicator--f11a0078-1b2e-4c57-9e55-1bd2a56be78c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f02d488-4c0d-4fc2-aeb1-6411435c8f44", "sighting_of_ref": "indicator--a5b32e19-f64b-4c22-a262-dff255fa0e09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3271363-bcb9-4880-b277-db8c3722b1f9", "sighting_of_ref": "indicator--73a3d57f-65de-43bb-b562-d58f6dd110b3", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05521c8-dadd-4f43-aa10-d73b53997b97", "sighting_of_ref": "indicator--4c68e5d4-f754-4931-98bd-070f1ea040e4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2acb3a9-0c7a-410d-affc-c33145ffc43e", "sighting_of_ref": "indicator--25e3564a-cf0c-4133-bb6d-e0b62ad4d9a9", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bddddf-746c-4d94-95ae-ea7cb994fd30", "sighting_of_ref": "indicator--ea7198da-cee9-4e98-a352-e66b8f4a0a1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5db9114-ab4a-4545-9cc0-6933e3d3f2a1", "sighting_of_ref": "indicator--2c0b83e1-69e7-4169-9e3f-6ac7683a6df3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32b6e9f-532b-42e9-964a-7ecd6ccde882", "sighting_of_ref": "indicator--8c32de62-7d1d-44f0-a44c-236827badff4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8121d91c-ad12-408b-9fe1-d465a79c6209", "sighting_of_ref": "indicator--26d897b3-6ee3-4bad-9f7e-8119dd11ad31", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874082f5-d356-4081-9b68-13c65c49cf2d", "sighting_of_ref": "indicator--8b7f042b-8c6e-4314-ba37-52a092e095ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc20cc2-c681-4025-ba32-2befdd73cb3a", "sighting_of_ref": "indicator--51d28047-2c60-4c36-8c3a-40eb637fddff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158354e5-e450-4a95-a46c-671de4b27567", "sighting_of_ref": "indicator--d4009f8d-8c5f-4ac5-bbcb-40ca57f1397b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338b1fe7-b579-4ae1-9768-7e553502799d", "sighting_of_ref": "indicator--82184e9f-5012-4ee4-becb-444daa28c7f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b1aaba-e3e5-46bc-aaa0-6926891c1198", "sighting_of_ref": "indicator--11853d92-1cf7-46f9-9100-f11218d518c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c20c41-e6a3-4e82-88fe-600b105dd02d", "sighting_of_ref": "indicator--c7ba8113-2f2e-46c8-98e8-73f6d90e125f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c8804a-88b4-4c1f-a4d1-fec26523dcfb", "sighting_of_ref": "indicator--bef738b0-a1b5-48bf-8782-6af3a5056b01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ef792a-996d-4f67-9d1b-5b253a5470b5", "sighting_of_ref": "indicator--24742efb-b676-4941-8c2a-c82eda227f6f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917c1894-1ebf-40f8-9fdc-147451774b01", "sighting_of_ref": "indicator--51229620-eada-45b8-9836-82659f7e3431", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4077c81-e042-490b-89e0-d53e7801db2d", "sighting_of_ref": "indicator--8b8b5033-4570-4e48-a968-a283897d5866", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac607d6b-3829-436d-8b14-88ea0840d143", "sighting_of_ref": "indicator--d289e0e2-018c-42fd-b1bd-3f99af1158a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4e40e7-993b-4ed4-9bb4-8ff6bc5bba34", "sighting_of_ref": "indicator--4a97972a-d9ed-43d8-8eae-67a9629c50af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60b6c12-a754-44fe-bb28-3d75bfcec257", "sighting_of_ref": "indicator--36c297a2-853a-4747-a9e6-f92518d59079", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b713bd91-1de4-4e12-9f22-1bed234914bb", "sighting_of_ref": "indicator--c2e1152a-8db1-47b9-8a80-d1a8b83dacf5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14137ecd-3353-45c4-b6f3-81be94039339", "sighting_of_ref": "indicator--37cd5198-9abe-4744-b1a2-da22508e3b07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235b911f-c2ee-434d-bd87-c5ac7fb378e6", "sighting_of_ref": "indicator--5fc00c06-7983-4053-b74d-7ca93450ced5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb26cdc1-292c-45e4-8672-c0091b915fb5", "sighting_of_ref": "indicator--ee960aba-3a74-4ec0-bdf9-36b5b95b98a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e498fc-efe4-4989-b2ea-bf300e23cb42", "sighting_of_ref": "indicator--590076a9-365f-4852-b4d4-e2d064edabda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415cb825-7c1c-4ba9-9add-3ec19c6af404", "sighting_of_ref": "indicator--fb4ab8de-c585-44cb-ac57-43f7c759aa3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0925b3a2-c086-46e1-8a6f-69234260165d", "sighting_of_ref": "indicator--14c7916c-6af6-4c1a-a58e-ede76c18e78a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56010ed6-879a-461c-902d-92de5781b59e", "sighting_of_ref": "indicator--0f4b5767-8fd1-4782-9dc0-221fd1804990", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d5f55a-c422-422d-9c4d-e533a2f9b661", "sighting_of_ref": "indicator--a7ea4086-f9c0-4a7e-8e38-669e108ca8a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8c84d0-c6cc-4b91-aace-ff665263754f", "sighting_of_ref": "indicator--0a46e94a-2acb-46f3-96ac-7932b94d1a74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6e3735-729b-4079-ae39-0eef3bf1f68b", "sighting_of_ref": "indicator--9a10c9fa-889d-4638-b0e1-ff8224dd7b7e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52523b15-3157-40a9-a484-cbb06a52a723", "sighting_of_ref": "indicator--db2c354b-9aae-459d-bce2-37feb66284dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb634c49-3fd7-4b96-81ae-42931bbaf618", "sighting_of_ref": "indicator--3b80113f-20cd-4481-81c0-8835ecf84ad4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015f4a72-3ff6-4235-8861-952413c6c783", "sighting_of_ref": "indicator--9f809afa-924d-4654-af34-c7db29411bdb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dd222f-cef4-4999-8624-066954169723", "sighting_of_ref": "indicator--e77e6155-164c-4333-ad25-8e26751527df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8774eae2-3ea9-41d2-872d-d66965acbe32", "sighting_of_ref": "indicator--de45093b-20d1-48d7-8242-e9c5e121b4b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8641e928-f67d-4588-bd20-6a0087cf2889", "sighting_of_ref": "indicator--b8cff93b-c244-4516-a020-6f7563ec27b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3475208-dc10-4e49-b60b-2e282c0a5e3a", "sighting_of_ref": "indicator--199f5ffb-5aa7-4e75-9518-aea54ce72b62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a1350a-cda2-43ef-8c15-305c0222f766", "sighting_of_ref": "indicator--4110fd4d-e510-4b0f-bd7b-dbf340e6efba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bc5ab2-8227-49db-bbe1-179a806d6eba", "sighting_of_ref": "indicator--1e66b0b6-797c-4ae5-ae92-5d11d8f1b5a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd88a03-a558-41fd-b5d4-47d4cf6f7015", "sighting_of_ref": "indicator--80d4d69e-0c47-4802-ba2f-7e0fb3ff90d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43b64be-c31f-4d9d-a5d3-c0c7283a0e32", "sighting_of_ref": "indicator--d616dc04-57d0-4ead-915a-32551a02ba4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0cebfe-4f84-481d-9678-c52f953260f2", "sighting_of_ref": "indicator--4059661f-c0c6-4b7a-8cdc-2771692043bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bb94f8-da43-41e7-8677-9c641ae09c73", "sighting_of_ref": "indicator--1bb33e5a-a25a-4f31-840e-0afd2e43b732", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a177b2-7735-4b95-9f91-36987d07f266", "sighting_of_ref": "indicator--60a3536c-6e0c-4fc2-b873-36b4cd0c2f01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae297515-cbf1-4925-88e4-a37384348e30", "sighting_of_ref": "indicator--a9b130a1-d0b8-4b0b-a838-50648ad0d799", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa68cb0-18ce-45f1-a479-83a12f2309b9", "sighting_of_ref": "indicator--28e586f0-7635-46cf-9161-16587c05ea6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6329f862-ecff-4ceb-b988-188c0e22b895", "sighting_of_ref": "indicator--a40d22a6-4cc9-44da-831f-aa1dad46bd0d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9835a5-1206-48d6-8f4a-8693e1f6d600", "sighting_of_ref": "indicator--66bdbe15-1f27-4d25-9678-9f1a2b41bdfe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82e39a4-bffa-453b-b20a-f6c22005398e", "sighting_of_ref": "indicator--5e81e8b0-e6dc-40e4-8080-6e0791506476", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040f6a54-4b87-48c5-bd2b-e1457f0f31a4", "sighting_of_ref": "indicator--3e7a65da-242a-49d7-935b-0229ce5b670c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c359991-52ef-40f2-a1bc-833b29f4a937", "sighting_of_ref": "indicator--034d98cd-9122-45d8-a3b6-d690f77cdf39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf698170-20f7-4159-adc4-28b21ba99485", "sighting_of_ref": "indicator--7a5ad2d3-f03a-4c38-8c63-0eefb069d333", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511c3db1-793b-4f67-880a-82941c1bca09", "sighting_of_ref": "indicator--2706e7e3-295a-4bde-9658-114c07a879ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1633da08-1817-49d7-9136-93d9a324c6e2", "sighting_of_ref": "indicator--fe1c99ef-4593-41be-be3e-c7d054e5bddf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddb02c7-c032-41f8-aed1-f9b1f1b82f5f", "sighting_of_ref": "indicator--c68e8711-a405-45bb-be8e-a7d483fd5d4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8b6de1-e142-4e21-95c0-5e1a00ecbeb7", "sighting_of_ref": "indicator--73e752be-a1f2-4a46-a236-89b9f3ea9bab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652fe3a1-0951-47e6-8cda-895564094d72", "sighting_of_ref": "indicator--5020647f-3f69-4a32-a61c-47a6e451f4c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a342d3-662b-4441-98c4-193cb32c2b2e", "sighting_of_ref": "indicator--62d5ee40-a46f-4f60-86e9-10d1efa35ed8", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7e40d5-5426-46f7-86c4-fe98b25ce109", "sighting_of_ref": "indicator--1ad57df7-b720-40cb-b3b9-aef53b4f7ad3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f482a1d-8f84-4c54-b540-591d87f9cff5", "sighting_of_ref": "indicator--cf227735-9a83-404b-aa07-d85736dca625", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702e08f0-d5e1-458d-94de-ec6fcd70b52d", "sighting_of_ref": "indicator--33aa1acd-f425-42e5-a221-91b82cb2bd40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0ab55c-d984-4c0a-82dc-008e5ba89a1e", "sighting_of_ref": "indicator--36fc01d5-787a-4bd8-92d8-b70e09c73405", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1c82ae-1d55-470b-b2c7-b6d59244283c", "sighting_of_ref": "indicator--2141d158-4e78-40a5-b3fe-507dbcb00d0e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016e1b6e-6d2d-4dc9-964b-7273e548064b", "sighting_of_ref": "indicator--9c6fdcb8-c68e-4698-8f36-63270fc2471c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c84d652-090f-499c-bb7c-4a745475ae97", "sighting_of_ref": "indicator--6cc4edb8-685c-4e85-82eb-acf37b0ff023", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae669d9b-3790-4148-ad9e-59144a9e28ce", "sighting_of_ref": "indicator--9732948c-8cda-4efc-9782-2a791d8a2700", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85c888d-23eb-4a1f-9c66-d176ca4c9bf6", "sighting_of_ref": "indicator--de0b52f2-5ffc-4a80-9d4d-263123c26243", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e62609b-eef0-4f55-ada9-90fb90772a55", "sighting_of_ref": "indicator--22d502f9-f4df-4e84-9e14-f1803407dec7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a621da86-cacb-4252-96cf-85a80232e7cc", "sighting_of_ref": "indicator--278453f7-37f7-4066-8a2a-09a8b48bc094", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574382be-f19a-4e69-8e18-31e0e8e940b7", "sighting_of_ref": "indicator--f9e6e0e6-ec26-461a-a7f7-b1d1ecaea720", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fe1036-e9ed-4772-95ba-34c09fe054a5", "sighting_of_ref": "indicator--8fe5a668-6619-486e-bc30-7b346df0bab7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc449713-54fe-4725-876b-846352f88f82", "sighting_of_ref": "indicator--24b08d61-9a45-4531-878e-6abcb7ef2ca7", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf49194-9941-42a3-bd9a-5d829860e263", "sighting_of_ref": "indicator--412d417c-07cf-419f-97d4-2192459dbabe", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854baa1f-fe9f-4567-9c92-29f43478fc73", "sighting_of_ref": "indicator--713bcb65-1c21-4807-8ac9-64d831d1028d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68787b6b-4e34-476d-9e8e-3041d115db58", "sighting_of_ref": "indicator--6b43b82f-9623-4ba5-86d8-ee130b96f190", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca1011e-6f01-4ce3-9894-80f10dcd94cf", "sighting_of_ref": "indicator--03f428e9-830c-499c-ac82-320d5d1a8224", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f233cf00-6613-4a48-b170-7a1637dcdd73", "sighting_of_ref": "indicator--83df4193-7abe-4499-a19d-40297cd79b97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecd3c73-2c4c-4cbe-a7e0-1652877da5e1", "sighting_of_ref": "indicator--346bef6c-5ae8-4462-be41-83a939d7ccd1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54aa18c0-9df9-4b3b-a147-9d5a688057b1", "sighting_of_ref": "indicator--d73216f6-c70f-45b4-bacd-11a2562d22cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90c067a-dbee-4d83-9b53-d1f92aa3e881", "sighting_of_ref": "indicator--99da6a79-f80f-49ee-a714-f335fd4c64a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c751166b-8ef1-459f-b5e3-c0d73d43613d", "sighting_of_ref": "indicator--d413cc60-b577-45a7-9134-c14700bf60df", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e1c0a5-fda0-4671-81fe-66a5616fbf0f", "sighting_of_ref": "indicator--495cdc1d-1826-4a09-8c11-68c6ac7d251e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae6a9e3-ca19-4018-a8e1-4bd296ddf233", "sighting_of_ref": "indicator--bfe799f5-dd60-4130-968b-2db41aaa613a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d89767a-679d-4037-87a1-be4fdfbae585", "sighting_of_ref": "indicator--2e4e5fde-1cc7-470e-9a44-10dd7e8d2cb0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2327d9-f31d-4616-a1fd-d9e13ae542a6", "sighting_of_ref": "indicator--d1dae36e-97c6-4719-9778-6a3e663c4bfa", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc3cfc0-5929-4364-8357-d6703c02a46b", "sighting_of_ref": "indicator--3a7db418-8e8c-43ed-beec-6e5287efb854", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519c881b-9fe7-49c9-aa9b-11f0348dc9be", "sighting_of_ref": "indicator--900a96fd-51c6-493b-8c22-137040b69b13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ceae71-8567-483b-82cc-504821863841", "sighting_of_ref": "indicator--cca0c227-2c2c-4c3a-9e7d-62f9e9fd9004", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5aaf28-8d6d-4db4-82ad-e42633f637ca", "sighting_of_ref": "indicator--da244a43-ab4b-4e12-befc-7b76ab7288c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9945661d-810f-46e7-8cae-f40e23a18675", "sighting_of_ref": "indicator--7597332f-1320-4504-a4e5-ebb24c8b9bdd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e7d163-477a-47dc-8bcf-4f97124a512a", "sighting_of_ref": "indicator--211b4645-c11c-42de-a5f1-5519fcd83734", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf71b155-5d29-4bbd-b67d-18c3a39275cc", "sighting_of_ref": "indicator--b3895577-ff4a-48c6-8f66-bb0e96789530", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b368263e-823c-469e-9c56-e897102270f6", "sighting_of_ref": "indicator--0a89fd71-c926-45a3-8629-1cb08964f737", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec87581d-3a7d-4243-b034-1af607b5f825", "sighting_of_ref": "indicator--b5fb2b03-292b-46ff-a500-d7bf5b42f699", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7674e1a-1421-4287-8cf1-a69d251e13fc", "sighting_of_ref": "indicator--6af3ea8e-d79a-40dc-9a58-555e5bded294", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157b6333-dbb7-4944-a631-cbbf3778b017", "sighting_of_ref": "indicator--d5b644b6-c134-413c-aa80-5514d2c7c7f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12534ca2-7c57-42bd-af5d-d384bc1ad1cd", "sighting_of_ref": "indicator--970a8753-e260-4857-b798-96febbfdfd24", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebba71a1-bb26-47ed-af24-dbb654b9a98d", "sighting_of_ref": "indicator--73b328e9-750d-4173-911d-18542d8e2cd5", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c84397d-ec7a-4316-ac4c-396503f16bbe", "sighting_of_ref": "indicator--2b4fe2b7-bff3-4af4-bb88-ca75915005ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a463464-6703-4837-aa16-cffe10e98a8e", "sighting_of_ref": "indicator--17405580-d7d9-4ef3-8c4d-9a389280cd33", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b718e3-6b95-4fde-aa1b-f6646854ac90", "sighting_of_ref": "indicator--1a5f41a4-c28b-4904-b6cb-69a9edb5b63d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fdf481-4059-467f-b469-70c0f7aaca21", "sighting_of_ref": "indicator--e71c24af-841e-44b3-8c57-9db528a7ee3c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3988b4fb-f148-46e3-840c-ee595ac3580f", "sighting_of_ref": "indicator--c09a23d5-4cf6-42dd-8df4-5275dd6fe9d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6caad3c-7c37-462c-b6e3-7ec035c77a34", "sighting_of_ref": "indicator--0b7b6d49-10d1-4965-923d-1104a68bcd19", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb51a63-8875-4b3c-bdcc-9c89707660bb", "sighting_of_ref": "indicator--27cf11d0-38b5-4bfa-8b5f-18b27229c650", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12904724-4a68-4e08-9a35-d67661531b2a", "sighting_of_ref": "indicator--5fd3bf0c-d90c-4d83-a85e-904196ef8afb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05e221c-c7c6-4a99-9402-e6210917f8b7", "sighting_of_ref": "indicator--cfb60b63-b95a-4d46-b2e8-90b0283111ae", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec51653-8a9c-4c36-8c70-8a89e1dd7d22", "sighting_of_ref": "indicator--9ce83c15-0413-46e9-841c-5be1f9878e2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637bf73e-1a38-4e57-b8c7-c84b28a3899e", "sighting_of_ref": "indicator--87a03d00-46ad-413b-a72e-9917d00883e9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2593cee4-3bb6-467b-8491-f8d486c42864", "sighting_of_ref": "indicator--5319a345-e544-492a-8152-5fec719788e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b6e815-3df3-41ef-9056-75c9eea3dda6", "sighting_of_ref": "indicator--52ad1f87-f639-4727-afd6-9009f2059dfb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803712f5-0399-40a8-89d1-a958de413490", "sighting_of_ref": "indicator--6bc887ba-4b51-4e2f-8165-7f0cda9cc93c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a4c1d6-2abe-4144-882e-977c278fd5c9", "sighting_of_ref": "indicator--64dffebc-37a1-4ae4-9aa2-b4ba795d4150", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d384fcb5-b73e-45c1-b352-fa1844f9a6cf", "sighting_of_ref": "indicator--c75e0689-eafe-4b77-9497-7df023195871", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a89e04-509c-4a96-add5-2f88332f1e25", "sighting_of_ref": "indicator--3f2ed5cc-67f5-470e-9f56-e890d042a2c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6badaaa-de7e-488e-9616-6448c23725f0", "sighting_of_ref": "indicator--5231b469-dfbb-4226-bf78-78731a28b053", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05fbe8a-7038-4cdd-9741-5ed6a0990b5b", "sighting_of_ref": "indicator--9bf12930-d8a2-45cd-aff1-7cfa3f5646b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b80994-52b3-4800-8707-79531e207643", "sighting_of_ref": "indicator--596925f0-b0bb-447b-b465-a4d9d842eafa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c92bfb-c6aa-4a27-bbd0-4a4f3b578dfe", "sighting_of_ref": "indicator--1f7dbcfa-c098-462e-a410-ba14d8877a4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921642a8-c301-4a6d-a8ad-30a307bbee9c", "sighting_of_ref": "indicator--45b3946d-8f2a-442c-ad73-24a9adaa1bf3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13e9eb2-8db2-4006-a70d-19be3150345f", "sighting_of_ref": "indicator--d42dd16a-7af0-4001-93e8-221276d19822", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f093b91b-254b-43c5-a67b-adb6391ea3f9", "sighting_of_ref": "indicator--2563ceeb-3534-426f-beb0-efa25b68b0f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c462eed-dcba-4853-ae9a-9c670f80e77e", "sighting_of_ref": "indicator--65bbdd70-7b65-45b7-9171-e72cda902d89", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a72f88-b38c-4ba5-af6f-e655489dc67a", "sighting_of_ref": "indicator--6de74966-9e1e-43c7-83b0-b892f40a96ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2457bd60-1f7f-437f-a52f-64e12fcbafe9", "sighting_of_ref": "indicator--9ed9fd0b-cddd-4337-8837-35cf5cdf8798", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67594d70-44af-476a-bd7f-7e732932f0ef", "sighting_of_ref": "indicator--7c177067-ba27-43cd-970a-c0373ee43538", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c929c069-b9db-4726-a600-29b861847a79", "sighting_of_ref": "indicator--76319b48-686a-40c6-b566-1b6939d59a48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d414676-2932-4741-b6bd-b5e4dd3a9971", "sighting_of_ref": "indicator--4c19005b-03e6-41b8-9020-072f2ea4b392", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ff81ca-1382-4cd2-b296-94ca0ac44b9e", "sighting_of_ref": "indicator--22ac4bbc-5b2b-40f1-9eaf-41d629da8bcb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941a1b97-9d50-4ce0-9b8c-a2ebf9585171", "sighting_of_ref": "indicator--6ac8cd4a-8657-4874-be03-cf0dcefee75f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0b1562-7bd8-444a-865e-19ac2ed773ab", "sighting_of_ref": "indicator--cee760db-f197-4d62-9da8-e2ae9ec35d95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c29fb0-ebc5-448c-926b-c8ff684d3d78", "sighting_of_ref": "indicator--32807810-7ed3-4093-ae3a-7e19e854fffb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e839dfa-49ce-42a3-a14a-c9af70f19721", "sighting_of_ref": "indicator--b4637006-0e9c-4901-aa3c-06fc1c8b12da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4889c17-d529-4348-8f95-cd919780b31b", "sighting_of_ref": "indicator--064357ef-353b-4431-9622-938b405efe7d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae63bc0-aa3b-4df7-9eb7-6477407cfdba", "sighting_of_ref": "indicator--0cfbebdb-e7fa-4047-b93d-1afde48556ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd2a012-8e75-4917-b8db-391d6b91570e", "sighting_of_ref": "indicator--c2944c1d-9163-47cd-a89c-7ea65155fd43", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb24d61a-a69d-48f8-8394-526bcb2210f8", "sighting_of_ref": "indicator--360c1596-c6f0-4cef-9698-850b28dd7963", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc6bdac-336c-40de-8177-f5a00ae65c41", "sighting_of_ref": "indicator--722e026f-cd5c-4729-ae27-08b9b62e59ff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10dfb97-02b4-446c-bab4-11d5fb63e0dc", "sighting_of_ref": "indicator--8d80dcca-bc88-4e07-9d96-93b241e082cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1227b1-89f1-4bfb-82f5-2d71d7c5251b", "sighting_of_ref": "indicator--ba94a1c6-cce9-438a-a3d4-96229653fbe1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee7ce8c-7537-4fa5-a81f-fc293fb8d9c0", "sighting_of_ref": "indicator--7e52c2fb-8f53-44dc-b380-c8fc8b15f6d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4436e5fb-ef75-4a65-9e13-616960ae31b0", "sighting_of_ref": "indicator--9058d2ed-e6e3-498f-9101-e6a6a8784ec4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d46f0b5-2edf-42cd-85c4-3fffbae41f68", "sighting_of_ref": "indicator--6ab51d7c-df57-4186-83ff-9f62126539af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbf970e-50fb-4c96-8fd9-0ccb94e08356", "sighting_of_ref": "indicator--42c41185-ac77-40b0-8e8a-cd9d86ac2f73", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1203b532-13bd-4f0f-9737-de1ae6032406", "sighting_of_ref": "indicator--de7895f2-ecf0-4638-ae03-e114ba0d049d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9848ed-d47a-4544-bd9e-12eba84b5dfe", "sighting_of_ref": "indicator--ac1fc1e9-e96e-4ac8-b91a-031a0bf0a74b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ffe50f-a8b1-4e6c-8e13-947b5b0061d0", "sighting_of_ref": "indicator--37b63f0a-0116-4b23-8083-fd675f9a197a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e51021b-27aa-4ef3-909c-8ec970dbee9e", "sighting_of_ref": "indicator--61fb04d3-48f7-418b-9e5d-22dbd086f82e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5384da1c-ab09-48ee-aee5-cf7e83c501ff", "sighting_of_ref": "indicator--f6c677dd-31c4-44cf-8934-28f397a7fe79", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b9e990-58f8-4eb8-9f93-4ce8543ca17d", "sighting_of_ref": "indicator--f5273776-e903-4ba8-a263-d1840197764d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbbee67-e465-43dd-a8bc-9367fa39be48", "sighting_of_ref": "indicator--9e2c7c12-dc48-41d4-9be1-3802647c502a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7448730d-a18e-4cd4-946a-dc975e176b3a", "sighting_of_ref": "indicator--236b45f0-3c21-4d2b-9303-ae2e22b80e2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebc077a-dc23-475c-84c5-cc5968d4cf15", "sighting_of_ref": "indicator--58c79e4f-82bd-4de2-b408-8f66700172d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea832176-8c3b-4d34-906e-f16711f03545", "sighting_of_ref": "indicator--807592f4-cb89-4212-a78f-ed6eaac53f01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21871da-af8e-476f-9a6c-f8eb242e1243", "sighting_of_ref": "indicator--4afc0f26-b6b4-440f-89ad-46241f3897b1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3bc4c0-2f08-4a62-8509-d1aeb6ee7c92", "sighting_of_ref": "indicator--4422d00e-e48c-4609-b62b-ec9d81e11efb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0b67f0-54b7-4755-9e12-b26ab9c8da6d", "sighting_of_ref": "indicator--880d6954-739a-4b62-a303-063063af274a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3c23fe-ec74-467e-80ee-5b7396e76095", "sighting_of_ref": "indicator--40386680-ce61-4f04-a675-e718350871c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d192ea91-89fe-4277-a51d-7029301eee0a", "sighting_of_ref": "indicator--b95a120b-cf14-4c53-bf10-5c1ee7a57dd4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d6eb7c-7680-4eaa-b2dd-efcb07fec655", "sighting_of_ref": "indicator--d932d8ed-da3c-4359-9889-84cbaeed6fce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a14add9-9fe2-4a50-82a8-5d977f183738", "sighting_of_ref": "indicator--ba055dc7-2d98-422d-b7b3-d0e31e2f7e25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcc63ba-0656-48cf-9dd1-323be9f524d4", "sighting_of_ref": "indicator--f64e805d-b804-4b84-893c-8a1eca4b2fa3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa00333-a54c-438d-884a-01d104531b3a", "sighting_of_ref": "indicator--391f3466-1145-4bee-8109-cf74f5fd3a06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c182dc-9a14-469b-a136-809af25f0174", "sighting_of_ref": "indicator--1a3a0998-f4f8-4f9b-a5b5-7da5ce16b5c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4ab4b6-a4d6-4693-85af-9971ba1c0277", "sighting_of_ref": "indicator--b88bdd87-a125-4612-a044-2fa480cf6d38", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b19061-c420-4fa4-929d-69237bed88c4", "sighting_of_ref": "indicator--25e62071-d505-4d6c-9d13-703e07edd55e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b0f42c-c104-41bf-9419-2135ad679157", "sighting_of_ref": "indicator--e84a019c-8720-4152-bfe2-645c91933c7a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758bea30-03d2-419a-8bae-30e1af800e56", "sighting_of_ref": "indicator--3c262705-df98-4ad6-9f33-f047882c91be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb6b840-d059-4331-abd8-db27643a272d", "sighting_of_ref": "indicator--d18f44e8-724a-4676-bf5c-d01c36eb7641", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fbdcb3-24df-4bb2-ab5a-65e7d25497ad", "sighting_of_ref": "indicator--b4df99f7-f84f-4650-a695-bdce82cb2640", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46418df5-9527-4cfb-ad08-939117937876", "sighting_of_ref": "indicator--c7e8b7a5-8ca7-4d54-9628-7475f503b3ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78ece79-420c-4af7-a085-2466c6e97c9d", "sighting_of_ref": "indicator--32ada785-13a6-4661-a849-090cd65d221d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476af532-c7be-4ad5-9a44-28d5a39a706e", "sighting_of_ref": "indicator--2193d6d7-000f-4acb-af47-e9794022ffb7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe02e88c-745f-42e9-b828-9b131c0872a1", "sighting_of_ref": "indicator--25c4464d-e1e9-42ec-99e9-9c9a8ea937bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09f4090-f5a4-4aaf-8d3d-db6c01f54c5e", "sighting_of_ref": "indicator--7e2518b3-8f1b-41f1-9301-f1321171e3fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0634a24-7b76-475a-afb9-eac8763599e8", "sighting_of_ref": "indicator--c27d2925-0414-4385-9029-f05bc8955a53", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8025726-937f-4f9a-b2b3-dbec317b8b63", "sighting_of_ref": "indicator--58a7c536-75ae-4278-8906-a26a5c4d50df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c4aac0-b1bc-4592-b840-56ea6f877e3a", "sighting_of_ref": "indicator--de04732b-ed49-4dba-8cfe-8ba5acd4faad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec518496-5783-4a02-8092-bb5329d898f3", "sighting_of_ref": "indicator--42ef7ee8-9147-47a6-b13e-0c4eb99a9d4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5031eba-2c33-4b12-b817-3df9b28bdfae", "sighting_of_ref": "indicator--eaeed8e7-7a6f-4c66-9031-618dc7841e33", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92d6659-8ab5-4174-bfe5-9d8f21946a37", "sighting_of_ref": "indicator--2691607f-a2b6-4504-b580-6933f5827945", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15ed80e-732c-4a15-b457-7d503eb27c36", "sighting_of_ref": "indicator--1466ebfb-3386-4b2a-b6a4-1f93b8e98159", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7251916-e468-42d2-859c-bc45143a1d75", "sighting_of_ref": "indicator--0f1bc0f9-4bff-4c23-b230-051900222a61", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37239806-3243-42e5-a0a2-0e5ad853ce23", "sighting_of_ref": "indicator--34409006-af29-470d-8e8b-75ff89164087", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d036eae1-d455-4679-b195-1de6e41388f9", "sighting_of_ref": "indicator--f9c9ea76-38d7-47d0-8ba5-cf98b5909dfa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810ca1e9-d546-4196-81e5-b1465713eeb8", "sighting_of_ref": "indicator--3c18a89e-3a10-4b78-b028-7bc9ea591a66", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2d942a-b5ca-47eb-b4bd-07d8b7a8a17e", "sighting_of_ref": "indicator--e87676fd-3144-43ab-98e1-b05cdbd1f851", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c292f446-bdf2-4edf-8266-309c78c10d7a", "sighting_of_ref": "indicator--c4f88482-d07b-40ea-8250-f9146eb44f81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e420a8b-2430-4cd1-8f65-0689fa357461", "sighting_of_ref": "indicator--c4f88482-d07b-40ea-8250-f9146eb44f81", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a021cb5-6e71-44ad-a391-683e28d29f90", "sighting_of_ref": "indicator--f22e5fcb-0d79-4d96-a6b5-dd4a0bc9993b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2760b595-32d9-4c05-9977-17c94f254a72", "sighting_of_ref": "indicator--37bd7456-1376-4374-9870-858f284b477c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01385430-bcf1-4820-9563-70854dd458ac", "sighting_of_ref": "indicator--126b30a2-0f61-4ee4-bfe1-f9cef3782ec4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67303a0-807c-4d68-b33c-3f553b033773", "sighting_of_ref": "indicator--55bf46d5-00e1-47ac-bc65-20f7e4cc64c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e094182-4cb2-4615-9944-e460adee2eac", "sighting_of_ref": "indicator--595881e2-558f-41c0-af95-a25c7142472e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48be6a55-610e-423c-b8a9-eb715f92697d", "sighting_of_ref": "indicator--3b2cf56e-2d45-48d0-832f-301667d6f392", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36f9937-b586-4bda-8d50-6d8b04fb1344", "sighting_of_ref": "indicator--3ee2413b-5163-45bb-9bc7-55ce154309a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e721fb3-fee9-4cd6-8666-a1bf7f3df18f", "sighting_of_ref": "indicator--c9773155-cfb2-4851-a311-188e25f4235d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f1f996-9dd7-4c5f-a5c7-ac0638559faf", "sighting_of_ref": "indicator--76e1aecb-8618-4df5-95e9-9a88e1d2889e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308539d4-02e4-4bcf-b578-4870ad41c11c", "sighting_of_ref": "indicator--00c22b9a-7f23-4ce0-af2b-0ed2e3073f09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae053449-9e5f-4587-bb9e-705559f66abd", "sighting_of_ref": "indicator--31dee13d-218b-46d4-9a4b-06840a575331", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df835710-7927-4cc5-92d8-3b04d015462f", "sighting_of_ref": "indicator--f327a0fc-ab65-4487-bd2c-6f2afbe1af1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0a8bac-2d69-4b48-9235-141143c44032", "sighting_of_ref": "indicator--fded2730-25af-4353-942e-2a3782662353", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ebbfb3-f265-493b-843f-214a48055517", "sighting_of_ref": "indicator--9ab0cee7-c6e7-4cd3-aaed-72e0e92cb267", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b96687-db58-4931-9315-aeda09ce620b", "sighting_of_ref": "indicator--44a6ac9c-1e36-4410-b503-d78ee5306e61", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035145f8-e52f-4691-b259-d5d24b15035f", "sighting_of_ref": "indicator--a4cfb6c2-39f6-4425-892c-eaf1176c24e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc51aa8-4301-45f4-b38c-c531f6c692fd", "sighting_of_ref": "indicator--25065c66-0b34-4832-b41c-0d4ee9d24458", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7a838e-b166-4da6-bc5d-831b4e9957ad", "sighting_of_ref": "indicator--c44af2d7-b2bb-4c00-baae-4165ccbcf45a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9810c8-02e8-41a0-9af2-f9f8301b0f4d", "sighting_of_ref": "indicator--7255b8c7-3089-4f26-8f2b-f700adc4e826", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afb3330-3fa0-47d1-beb1-e30239acb3b8", "sighting_of_ref": "indicator--f1dd65ac-2805-458e-91be-d6b65c41d52f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6362a2-615f-467a-8c80-2122cd566bd6", "sighting_of_ref": "indicator--3d2b0710-7168-476e-806f-c43be0287d17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8268cf4-67b9-4d58-8c46-9e9f45c5bd67", "sighting_of_ref": "indicator--28c700b6-b7ad-4937-8ed9-73f172055103", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bde02e-b80e-48f8-a634-36bf95ebecc6", "sighting_of_ref": "indicator--6d795c81-df87-4ad2-979f-a64ceaed471c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e30c927-30d6-4f06-89c6-3123c14fee6e", "sighting_of_ref": "indicator--ea16af77-411f-4ff2-8a57-9b32f7c94efe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a34ea18-9ba9-4a4c-9c7e-3cc799929b55", "sighting_of_ref": "indicator--db2e579e-b4af-498e-91ab-4f0993d623de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524776fb-1dfc-4b60-aa4e-875842d4dce3", "sighting_of_ref": "indicator--0580d049-5ce6-4f17-ba10-8865a84ade48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00f13d3-cea7-4397-a977-cddcb2d6ad7a", "sighting_of_ref": "indicator--bb58b4e8-3a03-4f27-9b76-14a7b38fb360", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005e65dd-37f8-4e49-9673-05c16257865f", "sighting_of_ref": "indicator--bc3660fd-5e6a-46f4-a877-e315bd9cffed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e76c30-f0d2-4a01-bdee-529e78619760", "sighting_of_ref": "indicator--317eef63-2b19-462c-ab18-ff01186e6f88", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68188240-342f-4a56-9657-74e22f4a1de7", "sighting_of_ref": "indicator--a467c90a-39a4-47b6-a630-cffa75e3f9d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f4fcf6-e136-4abc-aaaa-a3dd10639de4", "sighting_of_ref": "indicator--1b30c976-a512-4e87-af3c-05e590cd1ec7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bedfc17-3f39-4c49-9388-c6a8db83d82a", "sighting_of_ref": "indicator--6215447c-ee0b-494d-a8f8-6c4630d999d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f0f125-88a8-44e1-b0fd-bdcd43c9553a", "sighting_of_ref": "indicator--5605c444-d632-4212-b860-5c4c0707646e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4307469b-ea2b-4fdc-bba9-aef57f923845", "sighting_of_ref": "indicator--756606e8-a57b-4ea0-a93a-4971b4f71e1a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81da58a5-3899-4819-aada-6168033b0b65", "sighting_of_ref": "indicator--d0e8ae51-4c9f-488a-8540-16c42d9571a9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f598bbcd-f11d-41fe-9e41-ce8fcc3b3182", "sighting_of_ref": "indicator--8947ecd8-a5d5-405d-9919-e6dec74a8ea8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec38335e-7362-46e6-9e57-3551d829d4d0", "sighting_of_ref": "indicator--da66c0fa-6f77-43f6-863d-5d3eaa800b24", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28ff95e-a97d-4845-a261-8e5a1935ea92", "sighting_of_ref": "indicator--0e946044-6e47-4fe4-8261-2e62e4fee02a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062246b4-c270-4507-844b-9e640b19fa87", "sighting_of_ref": "indicator--bccba39a-e82f-42c2-bf15-6cb8e19c3f7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1446aa-3dd9-4505-8817-bd83f9a94dbd", "sighting_of_ref": "indicator--bd12d386-449b-4041-bec9-4432d70c4dce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30566e0-2539-4dcf-8d46-f8b64f12a58c", "sighting_of_ref": "indicator--b4d7b1a0-9417-4e99-9a1c-946d717c872a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5548e0-d6e1-435a-a948-a97d1b416f19", "sighting_of_ref": "indicator--a64df31a-e52c-4e5d-9eb2-ceb6149f0ade", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf0177e-b15f-4e43-a315-c114401d9933", "sighting_of_ref": "indicator--9332337a-030d-4548-ad0f-f3b4bf7a5071", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd54b2e-34c3-4030-9b22-0994ee9c1d0f", "sighting_of_ref": "indicator--f58eeec0-575e-48b8-b1ab-6039f185f8d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4f2d9a-0ea9-4106-9426-77fd4fe9d655", "sighting_of_ref": "indicator--6bf193b4-6b9b-4e88-8bf4-65f3e1db8410", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3d4ccf-6942-40d3-a1e4-115e9ded37f8", "sighting_of_ref": "indicator--bf86e7df-ba67-4f42-abc0-c332b1d004af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cb5591-fe5d-44d7-9f5d-bb339422e900", "sighting_of_ref": "indicator--d809000b-13e7-4ad9-9da0-1b251aa3dcca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4199af4-f85e-4bdb-9c1d-d36efc668c21", "sighting_of_ref": "indicator--153abe44-ec38-4d33-9d73-a4edd67a1ed8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763e2f13-6b56-41e0-a6c2-a1728a97624e", "sighting_of_ref": "indicator--7d8f380b-e490-4711-8519-9bd7e033d343", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86c3d68-1139-4bee-a899-4a0754b91867", "sighting_of_ref": "indicator--a5e517a5-3a5d-4dba-b12d-af52d377901a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93942776-a801-418a-b9ca-fc7e2535f051", "sighting_of_ref": "indicator--0c7bc30f-f2b8-4845-b34d-b5963664e5d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3daef952-f495-480a-b6cf-b9b3517489c0", "sighting_of_ref": "indicator--292ef69f-cfd7-4d66-ac25-48bd28de1310", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f68dd16-012e-49c2-8fea-84e7f6acb5f3", "sighting_of_ref": "indicator--a575c017-a27c-43b0-9a4d-b627e92d0f86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48594b9-7a7d-48ea-a2c4-6b7fa52c591d", "sighting_of_ref": "indicator--2405dc25-f72a-47f3-8020-00f7c3f68d37", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb778d8-e43e-48e9-9eda-f339561d96ed", "sighting_of_ref": "indicator--e801f3bc-f29c-4ae2-80e2-e958838d1cc3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52868093-ba5f-4bc7-bd7b-e411b5ebe20e", "sighting_of_ref": "indicator--8d0a632e-456d-457a-99b4-44be97ecdea0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4385de56-65d7-4dbc-9deb-047c0cc2c590", "sighting_of_ref": "indicator--a20603ad-56c7-4ac4-97d6-67e552e6bd12", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049d0559-6138-4f92-b174-6611eae23948", "sighting_of_ref": "indicator--c45ba61a-ac06-4678-ad2b-d1a5c028b365", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5264038e-f880-4cf9-b94b-13efc19412fb", "sighting_of_ref": "indicator--3a9aa288-4ec7-4a5c-9fd2-38ac7b15c685", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03c1029-4544-4d7e-a6a7-0bce86c4ab7e", "sighting_of_ref": "indicator--e36e5229-4359-43e3-9fa9-caaac4576717", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8225fda9-a026-4a2d-b7f4-6b1ae149085c", "sighting_of_ref": "indicator--21039fd3-4969-4195-8ca5-26e39954894a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e06e129-6705-4cf4-835f-2b4bb8d51af0", "sighting_of_ref": "indicator--40721f50-426f-4185-a7e1-1e0a1e2b722d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d781c87a-bae4-40bc-9f64-233cf62d0d0b", "sighting_of_ref": "indicator--44db25c4-d190-4d05-86ff-edce492f9a77", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897c0e4a-db56-4a61-ba16-73f3086e5c9f", "sighting_of_ref": "indicator--915c9c5e-bca4-485a-8a34-92161c2c092b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ef31c4-7941-43a7-9ad5-b1c0f904a55f", "sighting_of_ref": "indicator--2228fa74-3577-4921-95b5-91fcfa33d114", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fe63e4-5339-487d-ac7e-62c4e19073c9", "sighting_of_ref": "indicator--86362861-2ab4-42e7-981f-63f8e736dc79", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86faf50-4ed7-498f-a1a5-516be7373de8", "sighting_of_ref": "indicator--324a80bc-52a0-41a5-b5b1-5f3117938580", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798ed2bf-67a3-454c-bc98-4942167ac4ac", "sighting_of_ref": "indicator--0b901148-7338-4133-ba37-63d2c64b780a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9564e3a9-656a-4179-9ef3-fef73042153d", "sighting_of_ref": "indicator--20e9aead-a267-463f-9b57-561438280391", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e39b60-bf9b-46ea-88b9-b2fe5dc35872", "sighting_of_ref": "indicator--7a3458cc-d2c1-43d6-adea-2a1e8ef6f751", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e59ba0-23f2-42c2-9028-740334c944b1", "sighting_of_ref": "indicator--05a84904-cdfb-44aa-aa32-327667597b1e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c76745-f905-43a0-90a3-0db831daa66f", "sighting_of_ref": "indicator--b8673d83-1ef4-469d-91a3-817a96a01c59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bec40a-db46-497e-9afc-6c2d2f1f1304", "sighting_of_ref": "indicator--030a20db-2aa5-4ff9-b988-f7ea60485b02", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e535cf5c-a862-4818-b72f-0f3469c5fdec", "sighting_of_ref": "indicator--5b39089c-c7dc-4b3e-a1a6-c3948d0451a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f9458f-b0d2-4c71-a29a-a1f6624a89df", "sighting_of_ref": "indicator--26225d1d-cd1f-4703-acaa-9402bca26003", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fce767-ac47-464a-babb-5e5602ef93f3", "sighting_of_ref": "indicator--fc0d2302-2e7c-4c92-a23b-6c688cf3e0ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9890685e-7719-4a8e-ac3e-2901463ea2c0", "sighting_of_ref": "indicator--3d85cecc-1daa-4507-a17d-1c3f83ecddb2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7eddbd-8422-4cbe-8396-38eb5d36a232", "sighting_of_ref": "indicator--e4c40ac4-0f9b-4d75-babe-48e34affe9a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4538a8-1540-4406-b4e5-d416ebba1c0b", "sighting_of_ref": "indicator--0a96da28-d26e-43d5-8d65-de4d750264a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508c1933-6657-440c-9b52-d099c4e4eb3a", "sighting_of_ref": "indicator--e39cab49-f3f6-425b-8d0a-bbfb196ebb95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0c91c6-a491-4d7d-b834-040b482fe700", "sighting_of_ref": "indicator--4a4aca18-c9c7-4d0f-afc0-55730ebcf497", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca523ce-a0dd-4f80-82b0-69336d11db25", "sighting_of_ref": "indicator--2a825c92-2601-4fd6-8bdf-f6bf39a9c6a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b5f2fe-c714-4503-802b-c3f37300c5cd", "sighting_of_ref": "indicator--d6c32dfb-bedf-42ef-974e-dc525d2228e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b241ac-67cd-4660-9213-0332135f91de", "sighting_of_ref": "indicator--ab3c13ff-4070-49e4-b13f-97d046b26e5b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacbe782-851e-4830-a0ed-1ba7e8ea38fe", "sighting_of_ref": "indicator--fc558243-415f-4d10-a0ce-9864b6f2a7ff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5899ccd0-860c-4ef8-b814-ca14dd0ecc64", "sighting_of_ref": "indicator--896b7d38-cf28-4803-8604-fc5d395df972", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c894c773-2da2-4c0a-9c6d-cece4267136a", "sighting_of_ref": "indicator--c44b408a-396f-4a86-aa38-3831cd9d8b05", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518fcdcb-7f2e-48ca-b46e-19508c9688e8", "sighting_of_ref": "indicator--c474059a-ab4b-4188-b15c-a0817a2dadec", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471be914-95ba-4012-881c-c167a2d0bec5", "sighting_of_ref": "indicator--016d3e29-6118-408c-aaad-bb9e309e4f89", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4eaa8c-6d5a-48f0-b09d-6914b47b03aa", "sighting_of_ref": "indicator--96886da1-d4cb-425b-a946-29a00e18eb8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e723357b-666e-4c8a-acdc-f5c35e1323c8", "sighting_of_ref": "indicator--957dc06a-c858-4675-9e20-8f1018dae37c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4d7b6b-844d-448e-84be-54573ab5ebd3", "sighting_of_ref": "indicator--85e473cf-bc65-48a1-b8cc-f649f51e08a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676cfc46-411b-4f23-a62e-1be5c2f3453e", "sighting_of_ref": "indicator--256d125f-84b0-475c-a53d-1ae9c63031e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7221b3-628f-43ca-94da-29b54df04f2b", "sighting_of_ref": "indicator--27131b4e-6b54-4bb8-8997-ef8c5a933a4b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad65e70f-aaf7-4159-ab0c-1b3e860ab8e9", "sighting_of_ref": "indicator--2fc0dc6a-9329-41bc-9a8b-e32d464a77ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0002b7-b04e-4a5f-945c-2a7584ae85ee", "sighting_of_ref": "indicator--e820af3e-f149-4f55-acf7-c488f4cabcbd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615f9dda-383c-46fc-aa74-8bfeb2b9196f", "sighting_of_ref": "indicator--1cec6137-a5b1-46f4-a7dc-04fe1beb02d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd1edee-d50c-4f53-bd5f-8de4a83e266b", "sighting_of_ref": "indicator--0a524af3-1520-4a96-badc-376aa1237ef1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd8fa11-dd9b-4827-af27-54eeecaf631c", "sighting_of_ref": "indicator--24676df3-5782-4cfc-bb7e-aca08f3a2bae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c80f53-aefa-4451-8e24-7b05e8beaf65", "sighting_of_ref": "indicator--e5e0a82f-361e-4e41-9815-282fd571da5b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c0bfb4-a465-4ad1-8b97-bca4aaa4d1e3", "sighting_of_ref": "indicator--9985b537-be78-4387-a26d-8b9772525d34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442c5a9f-3346-4554-84d1-f41cea015200", "sighting_of_ref": "indicator--20d1bacd-aca7-4c10-8eaf-c07612bdd16b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112e2081-bbf1-4740-a514-8717e7695262", "sighting_of_ref": "indicator--d0130ecb-3203-404a-bc93-27e1fe6fdb9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d86da4-9893-45f1-a40a-43f9e07dfbed", "sighting_of_ref": "indicator--d5f07427-b514-4d8a-bfeb-44b2352d0571", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58d528a-bb12-43b0-9a19-99f10198424c", "sighting_of_ref": "indicator--38652da6-b8a0-4989-bd06-e15d13694904", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4293ee31-4c49-409c-9d0e-728edaf6b070", "sighting_of_ref": "indicator--38652da6-b8a0-4989-bd06-e15d13694904", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539a6a90-3cd2-4166-958b-ed9ffd87de47", "sighting_of_ref": "indicator--38652da6-b8a0-4989-bd06-e15d13694904", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e6e49e-6509-4dbb-96e0-723fcdf8ec80", "sighting_of_ref": "indicator--9ddae6fc-4d33-4b80-98e2-ee95958bb37a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324b46b1-bd4a-4e45-8164-14159117a393", "sighting_of_ref": "indicator--16a53548-7c77-4a09-9de9-d1fa24acb5fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5b0090-e265-4e0d-a2ae-c383671c0f89", "sighting_of_ref": "indicator--b07e2d5b-f03a-4a74-8368-e4632221dce9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016827c5-d0d8-434f-930f-0d7d5df040ee", "sighting_of_ref": "indicator--0f760285-46ec-4ecb-ad1a-91a995e45fe2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e156bf1-421c-4029-824c-c883bd14fec4", "sighting_of_ref": "indicator--7ff18a44-ee6f-4131-ab7b-d81172a6c62b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6825f6f8-3c8e-4769-b8d0-5dd3f93ac6a2", "sighting_of_ref": "indicator--53b24afe-079a-43f4-9c7e-3669ed37c071", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29234864-7558-492d-9866-f0adf61f6ae4", "sighting_of_ref": "indicator--05d9b1bb-a5ee-48b2-9b17-667067ec3a1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1613db-72c1-4a48-a41b-1d0b61ed9436", "sighting_of_ref": "indicator--22158a12-dd4c-4070-8465-f92371e1ecfa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e3da99-ee10-46d9-b9d0-ad9c27971475", "sighting_of_ref": "indicator--7f2cb163-af80-4897-94d1-b66ef9ab688c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ac7a15-c281-436e-92eb-4ef7aa59fda5", "sighting_of_ref": "indicator--c4e81beb-bc8c-4de4-8d6a-fcc1c981a379", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1d7bff-d4ea-4212-ab98-c1d127fd1131", "sighting_of_ref": "indicator--b1cc21ff-8f2e-4e49-a3cb-5626a7150021", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40af23d2-54c4-4482-bd14-b586ac984044", "sighting_of_ref": "indicator--1f231a5b-dfdc-476f-b5eb-86f2ae154a35", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00acaa19-f4c3-44d0-b88a-b854eec20c3a", "sighting_of_ref": "indicator--12609a49-c6a0-40e9-baf9-6d3180ff8a6a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f655be-bc15-4def-949e-d1cd0e5eb42b", "sighting_of_ref": "indicator--4c8f0244-9796-40f1-8c3c-b68c22d8877b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d24b85-9d70-4d2a-8e1f-0b3f0314d9ce", "sighting_of_ref": "indicator--0df369f2-f075-479f-9f26-4f4807173ec7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5836a827-9191-4369-83f0-04acf61e2eca", "sighting_of_ref": "indicator--9da71330-befb-469a-97b8-b4392a6d0150", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62336cf1-d622-4fca-8eff-081abca8762b", "sighting_of_ref": "indicator--031e04c4-1bf7-4792-89f2-017e5051b715", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5374ae-b47c-4625-9abc-ec316d0e6c6e", "sighting_of_ref": "indicator--262140c0-f4cb-49e8-b076-6362371aace7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e5beeb-1ea7-4697-87aa-d576f7b74e7a", "sighting_of_ref": "indicator--dc9ad363-2379-47d4-bc5e-3395cb38f7e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b27b13-1731-48ec-89a5-ef630feacaed", "sighting_of_ref": "indicator--ddb4b19c-fb96-4f3a-a8f5-96e144e50333", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d796a943-8319-4dde-8aa7-570c80c02df1", "sighting_of_ref": "indicator--5ad25b51-c913-4457-beb1-648fadecf30c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5575b18a-b198-40af-bb8f-83f12a0e5559", "sighting_of_ref": "indicator--631ada92-1f1f-4773-8e60-8c91e695610e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dc5cf6-3bfc-4916-b51f-66f6875b1de0", "sighting_of_ref": "indicator--dc4d7a10-48a7-40c5-830f-99d1983da7a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43010992-31f7-437f-b828-fe67c9192c37", "sighting_of_ref": "indicator--a408b296-c38d-4775-a4c2-85914563c606", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef52db51-72da-4b7c-8caf-fb6c19f0abce", "sighting_of_ref": "indicator--fc99e77d-c6cb-4e84-9208-386ca5463f34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d6047c-fcc3-4df6-b00d-6ae3685263c8", "sighting_of_ref": "indicator--fe3903e6-6652-4f9c-b3cc-cbe3e8ffc178", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0a334c-258f-423d-89bf-364c861f1e68", "sighting_of_ref": "indicator--95820182-d03f-4bb7-adf8-f1d27fa8c6ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b80a51-276f-4d2a-b805-30569686944b", "sighting_of_ref": "indicator--b2432302-c012-420f-9012-cdd85ebc7b34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486020c6-1a0a-4f86-8752-5b256d5b31db", "sighting_of_ref": "indicator--a22df30f-1961-409e-b4a5-fcacfa17931c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b31841-0dea-46ec-baf7-00ac0cd04b90", "sighting_of_ref": "indicator--3f0efba8-1b1e-4c26-a778-2e70e0397960", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2199e4ef-75ee-49b7-9013-8aa329be08b4", "sighting_of_ref": "indicator--648a952f-f251-495f-9eca-23aa9b6e60f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3cdc6d-b8eb-4f2c-8b15-1b49183979d8", "sighting_of_ref": "indicator--96fafcc7-2dd0-4a01-8227-90e41dab1c9e", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3e2bf1-25aa-4fa2-b55d-1c6f62b9c87d", "sighting_of_ref": "indicator--96fafcc7-2dd0-4a01-8227-90e41dab1c9e", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d27bc1-aeef-42ea-839b-5760c819b45a", "sighting_of_ref": "indicator--bb7e68b9-9fb2-4efc-8ad0-1ee2295f500e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd447df2-244d-4e56-856d-9802b2729110", "sighting_of_ref": "indicator--27bccfed-6081-4e98-973f-83ccec248dfe", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3014ae65-80d9-4243-a7d7-1b3b86ab0d2d", "sighting_of_ref": "indicator--150f9954-b886-4b51-b55b-1f588ff3e166", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007b5b4a-1766-4e24-9dc5-f38e1c1ba920", "sighting_of_ref": "indicator--2902377f-c235-4180-825d-83ffd597c892", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b6cbd2-bd53-4b6e-902d-df4a3e5eca40", "sighting_of_ref": "indicator--1b08cb7d-6414-4bf7-abd8-5a9152c266d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d2a722-c7d6-4573-bce9-4b5977495437", "sighting_of_ref": "indicator--7d3db842-937b-47fd-b7bf-ed99e0e55782", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8af11c5-c983-4170-bd59-cdb6b29155c9", "sighting_of_ref": "indicator--4f55c598-046e-4ca2-a771-c4d063354f85", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9fb65a-80fd-43b4-b44c-40a069cd0a6f", "sighting_of_ref": "indicator--4d8c605e-44dc-451f-b09e-029835c3c5d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3e8805-e68d-4d38-9f63-680de3d9bd49", "sighting_of_ref": "indicator--45b47dbd-7563-492f-9856-f86d37e43ad2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1126e39f-45b2-4044-9648-f82c974d9235", "sighting_of_ref": "indicator--2efc3a48-e4d8-4d03-af78-71404e5abe4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04234fa-0a05-4e7d-a1cb-fb651ab024dd", "sighting_of_ref": "indicator--473672e6-ecd9-42ef-ab5e-4a0087d5e357", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f32f720-eb8c-419b-a71f-fabe195dda37", "sighting_of_ref": "indicator--eac77545-bc5e-423e-945b-b7564d16e2de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0e5b22-2af2-4c99-aaa0-5b2fafd09d4a", "sighting_of_ref": "indicator--457585b7-c279-4313-adb8-75700429cfd7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8563ecb3-3507-48b3-999c-83699889842e", "sighting_of_ref": "indicator--f332e5d0-bbf7-4b35-8ce1-6a1d29fd3a85", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0c98a9-d920-45ef-9ac0-29bed00dadee", "sighting_of_ref": "indicator--d80e39eb-c89b-46d7-bac8-95ae219c6053", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946ccce5-5d65-449e-b996-04076ad8e9aa", "sighting_of_ref": "indicator--4fd4ae24-7f3c-4efc-8273-5aac215ff990", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36fd2ca-4a1e-4063-a624-edcd0a402b02", "sighting_of_ref": "indicator--6b97c68c-a185-4713-927c-c22c0a5dc6d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d775fec9-c687-438a-8bdd-5148ff880225", "sighting_of_ref": "indicator--7850d3f7-23cc-4c02-9bec-d346fc6cb9b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a251af6-09bc-48e6-ac56-6f2dc4842ede", "sighting_of_ref": "indicator--5c5eb6bf-fd6a-47ab-9cbd-bf408d766f46", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f3c6f0-21e0-430f-880c-499e3da8e154", "sighting_of_ref": "indicator--c146f363-2d6c-4fb3-b944-6a21e3bfaea1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bfc602-f61c-4d56-8f12-a2f53b982fba", "sighting_of_ref": "indicator--80c7b3bf-f978-424d-9caa-64974be3bf59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1d88c6-fb8d-40b1-915a-9778d7d087fb", "sighting_of_ref": "indicator--f0945fb3-0c57-4301-ba09-21cd7ad30470", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067d4fbb-c449-4b41-96fd-8353ffdd0bcb", "sighting_of_ref": "indicator--c3d871dd-596a-498b-8bd2-f39d4a430cbd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb508a90-0006-49d8-afc1-f76ecd62b35c", "sighting_of_ref": "indicator--8f868a5d-3a22-472f-9e30-c88fb65bd51d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96fdea7-2140-4ce7-9726-fc132741363d", "sighting_of_ref": "indicator--c154957d-efb6-4dc9-97c1-092d1c73048c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b44dc22-a390-4ee0-9569-271d1102267b", "sighting_of_ref": "indicator--2da1d4f8-6078-4da2-8bf5-3b1177a53063", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd0d158-a84f-47d4-9f9d-8be7de3023bc", "sighting_of_ref": "indicator--22a6a7e7-87d3-4495-8a91-b9144906ff46", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b124f197-acc2-476a-b32a-ab1cb92c935f", "sighting_of_ref": "indicator--c443e5fc-fdde-4311-beed-ec11da240627", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f94ee48-31db-49f8-80f9-f5d6bcfb87e3", "sighting_of_ref": "indicator--9aebf4d7-ebe4-4792-9c23-89055c7ac4c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2ce3c0-3d94-480d-bb35-4b8efcc0e4e9", "sighting_of_ref": "indicator--9aebf4d7-ebe4-4792-9c23-89055c7ac4c4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a88ed45-ded9-493d-8b1c-bfe4006b8d42", "sighting_of_ref": "indicator--9aebf4d7-ebe4-4792-9c23-89055c7ac4c4", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e732f6b1-d3b8-4a66-974a-a26ad7621e58", "sighting_of_ref": "indicator--fa1431fa-e628-4a2b-975a-c8d40a4bebdd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def4a6e9-c383-4b21-8e98-e7650e431038", "sighting_of_ref": "indicator--2c136c41-3ddc-49ba-916e-40b0aa6af1bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f54cabc-52f4-47f5-beff-7ef634130468", "sighting_of_ref": "indicator--780fd25d-a7c7-4448-8ea1-33255cc87277", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e74276e-ebe2-408a-b1d5-d448816d9c48", "sighting_of_ref": "indicator--71590bf3-014c-4225-b22f-476bbce6c9f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce83f4f-0618-44a1-849f-996c173c5059", "sighting_of_ref": "indicator--ba8c7e24-961c-43f2-9bfa-326f771d27f7", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5295e324-b077-454d-b92a-9c6f1af49997", "sighting_of_ref": "indicator--96d6238c-5fa3-49b5-9bd4-4d42490b8838", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19a5a56-b6d0-478e-9c0a-378e3762820b", "sighting_of_ref": "indicator--aebafaaf-c224-4cad-a59c-1b15e4418986", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9b8a9a-57ac-4013-b9c0-ce8370bed242", "sighting_of_ref": "indicator--45161323-5dc9-4de6-8a6a-9649208c62e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0246e69d-676b-4eda-b0e1-b3ea597d4c34", "sighting_of_ref": "indicator--d2e1b1ed-93e8-41eb-b019-a7ebb5170519", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2671b8-c731-42f6-b431-a19735924343", "sighting_of_ref": "indicator--271c730c-7cd1-405e-b1ed-4efb23e70583", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01709d6f-8e8e-4cd0-9f43-626c1c6517bf", "sighting_of_ref": "indicator--9f8a8d39-5e4b-4607-8a0e-4f10e1109e9c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937fbd6f-bf5f-4c49-bc4a-c86f420c19de", "sighting_of_ref": "indicator--d5be1122-10bd-4421-8366-1295366057f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fa50dd-2b1e-4d72-ad41-fdc3e28cee14", "sighting_of_ref": "indicator--1aa5e00e-0594-42e5-874f-31d49f2a99ef", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc3995b-88d5-4598-9633-660902ba45ce", "sighting_of_ref": "indicator--f9b7f668-623f-48e2-9617-4edf32f4ac90", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7faa73b5-43a8-4755-bc39-1bebc1591a86", "sighting_of_ref": "indicator--daa54d90-c774-40a4-beab-3866725dedb1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5fca6e-17ef-4788-aae1-33f1525514db", "sighting_of_ref": "indicator--ddc2ba3c-6965-4c3a-b447-550997a581f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afcc6d0-a165-47fe-af76-2da0d3ab1b45", "sighting_of_ref": "indicator--70584a10-04a9-4a58-bd85-350172f13fe5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68359cfc-fa5b-4ba4-9d0c-c4a44c19ff9a", "sighting_of_ref": "indicator--22ba53ee-f68e-4049-8c1e-873a08f9b1c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ac1a2a-b875-4c62-b09d-84a61b521a41", "sighting_of_ref": "indicator--a1956899-672e-4ebe-9b79-f4b9811d2b64", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e3fe6c-384c-4cee-9efc-17738289aadb", "sighting_of_ref": "indicator--7bc27611-09f1-46a2-82ff-4b506dc7273a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7ae853-9bab-4720-b6a3-6226957de0b5", "sighting_of_ref": "indicator--66e7fac5-ca91-46ba-94e8-fca4c4d1d0a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f5a3d7-496d-4402-8a3f-4ba68c6f3f1d", "sighting_of_ref": "indicator--67cc44b6-a7fe-4ad8-98d0-671e97184f5a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1194f15-509f-4595-9a68-a31b8848318b", "sighting_of_ref": "indicator--611ea04f-b7c8-43ee-b701-904fdb315e41", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fca4253-6271-4fce-9945-9edf1e3b8d89", "sighting_of_ref": "indicator--0bf63286-9f85-43a9-8a9d-f1eba5b5f2a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465bf8ad-4b4a-436b-b738-8e58b4eed286", "sighting_of_ref": "indicator--12e24b1e-23f1-43b8-8474-e8ff49a1e03c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a01394a-0b2b-4ab9-9045-a234fba55525", "sighting_of_ref": "indicator--da9af9d8-3a23-463e-9ae6-2f80bd8160e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffde7330-5bd3-4768-9184-20222d7f2b03", "sighting_of_ref": "indicator--1ed038ce-3300-494f-9680-20a8f2172c0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e54aff-d8bf-4205-9d1b-2f5c696f11f0", "sighting_of_ref": "indicator--e15a70f4-5088-4f15-b237-160c4ba3b15c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7a7a05-030e-49fb-a65d-397facd8dcdc", "sighting_of_ref": "indicator--196bf9e0-6867-44da-af92-ed4105b78a22", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f52e759-ad89-423d-a92f-c7dd49c586ed", "sighting_of_ref": "indicator--196bf9e0-6867-44da-af92-ed4105b78a22", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2836535a-690d-4110-afff-9f7947ef9f91", "sighting_of_ref": "indicator--622d8c09-4e3d-4f98-a07d-0171237d0e6d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0532603b-c7d2-4dfd-b418-6172585461c5", "sighting_of_ref": "indicator--f4a378cb-7f2c-402f-aecc-39c110382caa", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1041e0a1-02e9-4f42-8e52-1af8c03ca945", "sighting_of_ref": "indicator--21183e86-7106-4917-a3c8-459adf464bc9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4fc540-47e0-4975-a3bd-9af6bce8e772", "sighting_of_ref": "indicator--2c10756a-22ec-4078-aef2-343c53baf87a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc2ea11-8218-492a-ac83-85c37e0707fd", "sighting_of_ref": "indicator--b7f5a5b0-87b7-4642-a179-cc1c0909101f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc80ef85-0bf8-42e4-b1dd-47d3cfdd3572", "sighting_of_ref": "indicator--c10e6f93-d813-4283-b61e-7b5d22db05c7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21160be-cb89-4206-b5cc-5676ff75b304", "sighting_of_ref": "indicator--540d3512-da9d-4b5e-bf49-47c9c4051cb2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5e588a-deff-4f8a-858a-4482ddef2d5f", "sighting_of_ref": "indicator--6ab16480-5971-4dcb-8d79-983d5020ce2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd6a727-6c24-4b39-a4e1-0655a6df305a", "sighting_of_ref": "indicator--b31b1b60-8609-45eb-9ee7-01135b5c9086", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605d3a70-f490-43ee-a9d2-1045578869a1", "sighting_of_ref": "indicator--4d8c2443-a73a-41e2-b2b1-38a7606fe0f4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bd9f8f-0988-41aa-80a8-d2083e6c0a5b", "sighting_of_ref": "indicator--69b8eeb2-6259-402d-8088-2f8cc1992c5e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f00412b-674a-4dbe-9cd2-8cd3d72adbba", "sighting_of_ref": "indicator--56d7eab9-0174-4a1b-bd5b-191584d6ab4f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1a3e68-a2cd-4d88-a277-e84e9fb8dcdb", "sighting_of_ref": "indicator--96e28fcb-0adb-4386-a711-2d1f7cba5e50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b2bfd4-bf00-4572-8624-ca9a02a96864", "sighting_of_ref": "indicator--3f6e615a-5d14-403c-9a6c-090f2c063223", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8703bdd-376c-46c0-8ba0-e9b3e742939b", "sighting_of_ref": "indicator--5a30f199-a8ed-46a9-98f4-0e08a6668c0d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987593fb-5558-4b38-b821-e728a2cee75f", "sighting_of_ref": "indicator--e316c820-1bdf-47c4-9c9f-d846fc7d2640", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812f70a3-d814-4384-8ca1-e821c6c24ed9", "sighting_of_ref": "indicator--55d122cf-a7b0-49db-a3a2-1acdb62c1f17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb20000-c3a2-4ec0-8cb0-fb28b3d07b84", "sighting_of_ref": "indicator--d2a68d1e-5116-499c-85d6-aa374c4713d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3eec246-26f8-4dde-a0e5-0cceb76a7a0e", "sighting_of_ref": "indicator--e016b4b8-a2ef-49b6-946f-49b223c47e73", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679e0041-350e-40eb-a625-b6535144ae51", "sighting_of_ref": "indicator--d1333e38-a797-4c74-b046-c790bb89d841", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecce861-f4f7-4d7f-a088-070d5f3a63f9", "sighting_of_ref": "indicator--205343db-fa86-492c-8afb-5842704920a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26467ac-83e1-4940-bacd-4654eddbe33b", "sighting_of_ref": "indicator--a9d48a17-cadd-4fc4-a659-1370e29c9f2b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c8e1e9-c7d5-4767-8a43-381226a5cdda", "sighting_of_ref": "indicator--217df46b-6d77-400c-bec7-0fb01b6e0328", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bf436c-a999-4f9b-858b-ce9625429fee", "sighting_of_ref": "indicator--c15856eb-b73a-4e2b-b2bb-5a660d1b1748", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a1c7fc-854f-411e-992d-360a83007906", "sighting_of_ref": "indicator--a2717587-4a5b-4a97-8f27-8edbd2dd092c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff769e80-92e8-40a3-9e2e-ac2daa9ed3b1", "sighting_of_ref": "indicator--37e88960-07b5-4e33-a8db-8d437ad10c6e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d438eaeb-28f3-4036-89bb-31e4952320d0", "sighting_of_ref": "indicator--95c39875-2bd3-4c73-9799-8572b3303b35", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b36ba6-3930-4f95-857d-5b28d57ad52e", "sighting_of_ref": "indicator--b70ced09-06cc-44f9-ad6b-585e8258f898", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8378c1ac-762e-4e6a-b4cb-96a71370fa9f", "sighting_of_ref": "indicator--dfd9a0bb-a7e5-4e71-9b05-bfdcfbd72370", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15013b6-03dd-4961-b6bb-2bb63accf9df", "sighting_of_ref": "indicator--8609bb38-1233-49e5-a300-4aa57c5dd6be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25859e05-ac13-4bc7-ae27-1c33a4ee9fcd", "sighting_of_ref": "indicator--e175dee4-2eee-4819-93af-13a5e5b87eda", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec57f9fb-86f8-47e9-92e9-278a8ac90188", "sighting_of_ref": "indicator--b1088d90-6761-4ca8-9f1e-67e4c496201c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b2bfeb-8254-448e-96ab-76aff3952f72", "sighting_of_ref": "indicator--fb901a9d-56f7-422e-b393-1b29f7ae5717", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10fd13d-cf06-4a51-b5b1-c64721118d23", "sighting_of_ref": "indicator--5b9bee6a-1f32-4800-82c1-5990f8a9a1ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f8c835-7673-4507-aa2e-bbfd37cac55e", "sighting_of_ref": "indicator--ad5452a5-2979-40cf-80f5-5c1e5478aa7e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7eceba7-3106-4a6c-8b03-3ff557e5e0e1", "sighting_of_ref": "indicator--46681714-676a-4cdb-8218-ece390c9fab3", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b80e43-0711-4b9f-9fcc-73934e59e3a7", "sighting_of_ref": "indicator--d9dcb026-3653-4027-a73a-f00780db32d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27517e7-c31e-4c57-99bd-5de4662dbef0", "sighting_of_ref": "indicator--9538cefc-e89e-461c-8442-72825f333a5a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6583e69c-55c4-4d1f-864b-68e44af9f14c", "sighting_of_ref": "indicator--d23e77c4-e262-4287-b447-9318ba302329", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca01aff-6db1-4d9a-8b35-813f7122a789", "sighting_of_ref": "indicator--ed35559a-c29f-470e-a9ea-d9636ceef65d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67b52f2-8392-47ad-85eb-95a973dacfdb", "sighting_of_ref": "indicator--b18ea357-9dbc-4a8b-87be-c424adc11730", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4670bf69-a344-4c5e-a2d7-95d7fcb557a4", "sighting_of_ref": "indicator--0b3882d6-bce9-407c-94a2-7e95f1db2867", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e029aa-0722-44cd-840d-094bad55b777", "sighting_of_ref": "indicator--c44d9cff-c81f-43f7-82f5-7fb24315a103", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c94c693-bb38-4edb-b5cc-c8175afe287b", "sighting_of_ref": "indicator--ff5576eb-9b72-4e5b-a692-916ee96e0c61", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce28b77-f874-4bbd-a9f2-c0dc5142d980", "sighting_of_ref": "indicator--92f6982b-72e5-47e1-8524-9fd0c66383d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0695dd4f-0511-49b0-a0a6-6a7e8fde40f1", "sighting_of_ref": "indicator--b2186ac0-d0d8-4181-ae35-a745b1af582c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb188d3-c566-48a1-b288-8aff1009b28e", "sighting_of_ref": "indicator--8766c8fd-dfe4-4d16-9b79-b8be6c14812b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652df0c7-2c60-415c-bc74-b89321c64fae", "sighting_of_ref": "indicator--c9986215-5cdc-4979-b017-632b55c3ce25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd4ea40-2d33-4a08-a83c-a7fe7060d5ff", "sighting_of_ref": "indicator--089aa379-13fa-434a-aa11-9440cf3ec6a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac67dff-d734-490e-9f57-2e0930b42b34", "sighting_of_ref": "indicator--42b156c3-382a-4f13-8458-ced17fe7d94b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d192f3-c672-4591-900a-a93e090e555a", "sighting_of_ref": "indicator--d9bd2783-82f0-488c-b43f-27b4a733e26d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32815015-ad11-442c-8a5e-2a975014f21d", "sighting_of_ref": "indicator--67f1f5f8-0023-4a97-92d4-91ca78f2938d", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedd4365-f4b0-41d5-97c9-0b9e7ead096c", "sighting_of_ref": "indicator--e3e921dd-0cbd-4102-ab77-f30cc7d18587", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1807596f-d2b6-4d1c-b7c2-e17d7dbebb3f", "sighting_of_ref": "indicator--c0cc102b-3437-4509-a61a-d8dc166267aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4a7c41-4afa-4a4b-89d3-e0960353c03d", "sighting_of_ref": "indicator--08502891-b102-446d-8e2f-3c9b457d51d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3330bc92-c066-4fa5-8b2a-9ff9dbd761f8", "sighting_of_ref": "indicator--dffa6f02-2bdb-48b0-b082-f161c16b6327", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f058a6fa-cb99-499a-85ca-53a900e97a1a", "sighting_of_ref": "indicator--31126652-259f-4259-90d2-0ed3197db28f", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e311f5ab-85f7-4519-ad8b-e4191b12f96f", "sighting_of_ref": "indicator--4afdf53e-d0b5-4e45-b0e2-f5dc9bf53bf3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c765327-a55a-4667-92ad-b3f588bae119", "sighting_of_ref": "indicator--46fdc641-ab03-4f18-896c-04c23974008f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e646d96-72b1-48f6-8291-11117f828700", "sighting_of_ref": "indicator--5b9880e8-f9d3-41cc-b5b3-9c2dedd0aabe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e409139c-0621-4ea1-b2ac-8b13f6161110", "sighting_of_ref": "indicator--0e821245-130e-4d67-9930-b4a158e2dd1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d87157-5804-4de2-8d73-ac66d0dcaf48", "sighting_of_ref": "indicator--da584b71-cd4a-42b6-86d8-373a6c03a4e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbc5085-8eba-4c33-ad57-0fead91380fa", "sighting_of_ref": "indicator--cf13028a-12e8-40cb-be75-739559a93a68", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c53953-c790-46f0-9caf-5ac1c1bb96c0", "sighting_of_ref": "indicator--57bb3a67-b41a-4467-86f7-af8d183535d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe6a688-a619-4733-b707-984e303d7273", "sighting_of_ref": "indicator--6d4f8ffe-95ce-46f5-b71f-4dd1a6c06126", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf484b0-0b42-4f80-be82-4baaa6b45736", "sighting_of_ref": "indicator--670050df-9156-4d49-8744-843744842178", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaf0853-e9cc-4853-a6c9-06b8825a0cfb", "sighting_of_ref": "indicator--ef6710b2-de6b-42ec-ae6e-1a393b632085", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe405e6-0672-4754-8199-25507fc087ed", "sighting_of_ref": "indicator--dd92643c-4080-48b1-b1eb-de6e2a9f2c72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f5c2af-3c9f-44c1-acd2-ced4ac9441cb", "sighting_of_ref": "indicator--4cbb77cb-0cab-405f-bd56-28e8bd6b4f5f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787fa509-b6e9-439c-8e69-4eb91497c5ca", "sighting_of_ref": "indicator--41118c33-f46e-4486-a2d9-fde99d276a17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a778cd2f-6365-43cf-9ad6-d7a7850c4080", "sighting_of_ref": "indicator--82037075-bcf8-46dd-bfa5-1e7cb8ad8f1d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8634b2b5-9829-4525-a644-59c5f85aec58", "sighting_of_ref": "indicator--c74188ac-459e-47e5-ac97-698bdb99df37", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b47108a-f348-46c2-b1e5-94d71ce5da9b", "sighting_of_ref": "indicator--68a9736f-93d6-4312-ae00-8a9092467e35", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190f35b0-5828-448f-8b29-ff8c24301743", "sighting_of_ref": "indicator--adeba295-5b6a-4442-8817-6d5948ac3b9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6f18f0-9fad-4785-892a-f001bc9f2458", "sighting_of_ref": "indicator--adeba295-5b6a-4442-8817-6d5948ac3b9a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35caf1da-8c4b-4ebb-b9e9-d5b7b3b3bdfe", "sighting_of_ref": "indicator--aa0dbd69-767f-455b-9f9f-344998214cd8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f807b619-7dbe-43d0-9a28-a02acbaee0cd", "sighting_of_ref": "indicator--7a6f1ab2-4723-4021-b81b-c01037296150", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53d865a-798e-49fa-aa95-b934d8067e0f", "sighting_of_ref": "indicator--7a6f1ab2-4723-4021-b81b-c01037296150", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af9aa34-1692-4c84-adaf-f2c1c2e6f0f0", "sighting_of_ref": "indicator--514d6582-9c39-47ca-923a-dd81014e016b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7849405b-bd23-428c-8390-01a45ccd0885", "sighting_of_ref": "indicator--b1f93061-a87c-422e-879a-c7c441a4c109", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50dd7560-7826-4729-91fc-db2e4ec6df57", "sighting_of_ref": "indicator--8a722dab-9c4e-4e10-bc15-a35a42370a25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bb1f85-2d03-4b1c-95ce-39a8b6e74a41", "sighting_of_ref": "indicator--571ab3b3-4f72-4fcd-9341-aecfd417c4a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f30a2c1-b95c-41e9-9712-df3ec186a67c", "sighting_of_ref": "indicator--50100e07-6b27-4b81-a116-300c77f2961d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf42c90-16f4-4496-bef7-afbfe95a0a16", "sighting_of_ref": "indicator--616bb0d3-c653-4159-a658-0c585fb48f2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acf1ed7-495b-4979-9333-07d0c47da474", "sighting_of_ref": "indicator--347021fa-bae8-4f4b-9138-3d6d41d8d22a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6eaafe6-3059-472e-813d-ba153aedb5fc", "sighting_of_ref": "indicator--50f4e754-5e95-4186-8a68-a3502af02955", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7609abff-daeb-4477-93d2-7b5e40cb81da", "sighting_of_ref": "indicator--5a06f8d3-8443-47c0-a9fa-5261ea9d9da7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bef12b-7b94-47ee-b3f1-d26249e42a83", "sighting_of_ref": "indicator--87d2ce37-0ce5-467b-b365-59839948fdc1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d43e047-c326-4e76-8e6b-1ab039c41d1b", "sighting_of_ref": "indicator--fd5df098-82c7-417c-9089-de281fc2fcc6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd27e78d-7d38-440b-92be-48438d0992fe", "sighting_of_ref": "indicator--9fb09f8a-5ff9-4e5f-889d-24757ca8e580", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2058a1e3-d060-4ec4-a657-d9bdeeec9c95", "sighting_of_ref": "indicator--ba5b5567-43cb-411d-8341-53cb409860a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b6dfbe-237e-4b02-86fa-caf6328c773d", "sighting_of_ref": "indicator--ba5b5567-43cb-411d-8341-53cb409860a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4aef614-1f1f-4a4d-a2db-b44aae6b2893", "sighting_of_ref": "indicator--8593de30-d93a-4c77-89c4-dad9aac6009b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5feab22b-f5cf-4d9d-a6c4-6fee0cee47ee", "sighting_of_ref": "indicator--913eb01e-fb5c-471c-96f0-0ed1d81eb06c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0b7b57-891c-42da-b971-8f625fb550b9", "sighting_of_ref": "indicator--9cb4004d-2c20-41f9-8a43-b0067cb9beb2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32090164-27ce-4810-b1b2-42db969f6da0", "sighting_of_ref": "indicator--f23d6975-886e-4165-9607-603fac2e2c29", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c37add-903e-4a31-a633-fcf9fc631735", "sighting_of_ref": "indicator--068cd555-b35a-45a7-8af3-0b5fceb4eeb2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fca1fd7-fe56-4050-98fb-b42d4016dd47", "sighting_of_ref": "indicator--0c73b240-6772-4a80-b636-f5be04198540", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697074f6-0d3e-4c80-9826-740a9726054b", "sighting_of_ref": "indicator--77f18916-aa10-4b5c-a72b-dd696efc1521", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66376401-1799-40d7-aadf-e112135b955a", "sighting_of_ref": "indicator--e671ee64-ba17-4d5c-8eb1-fd79dcc3e60a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa319028-6581-4ca1-9574-ff193e856707", "sighting_of_ref": "indicator--a1924fe3-eb77-4505-99d8-8d2de2c41d4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f178bc3-c7e3-4799-a20a-35fd5d2c0843", "sighting_of_ref": "indicator--c256c91b-24f7-47c4-aa4f-7542b421badf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103592d1-5ebe-4b59-ab37-b2d59c40da29", "sighting_of_ref": "indicator--4523c223-a246-4bf2-882b-c39d41e412e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1bb9fa-2ff0-44e4-9a60-0586f0d3fc33", "sighting_of_ref": "indicator--004fdf35-0f35-4f75-bb29-eab85eef3638", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86888319-5375-43cb-ae0c-adfe16a8f7f5", "sighting_of_ref": "indicator--19b2fab4-9626-4ca0-970e-e758de2875b6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813dc2df-059c-42e9-ab94-d06bc5dd1292", "sighting_of_ref": "indicator--9de45588-b655-4227-8815-3c58b28aa8f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea23432-31b3-49aa-8fc8-3e599e326be6", "sighting_of_ref": "indicator--43a400ab-a26f-4c04-ba04-18820e95ac14", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c31a1b8-c54f-44ad-8da8-ad6d120df1f7", "sighting_of_ref": "indicator--357e1b95-43db-4115-936d-8dea624e4653", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d528a4cf-c29f-4f27-99ba-c8c3ba40b714", "sighting_of_ref": "indicator--6adb2f03-568c-4cd5-a1e9-e1861864bf09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2af6d2b-3832-440d-9594-616934db59eb", "sighting_of_ref": "indicator--5156785c-f028-40e0-a1ce-6d32af0248d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232783ac-ea1b-4b31-979a-1c0b54e61ef0", "sighting_of_ref": "indicator--f83d8c4d-f535-4baa-9154-7e1b18a5e205", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf9b790-b3b0-4c16-a1b4-28cee007519c", "sighting_of_ref": "indicator--ef08d68d-d2fe-4318-a45d-14e37472598e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd365f53-1531-4cde-ae95-156eb60b8bcb", "sighting_of_ref": "indicator--a6bb0f0a-3f00-49f4-ba36-f46d0cda6bd1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42879ffb-1c25-4805-8261-0cc4d866fc64", "sighting_of_ref": "indicator--d58169a0-f9d4-4b4d-a259-cfed9c133dfa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741a6902-250a-4199-ad7f-ac58aad4d00c", "sighting_of_ref": "indicator--1f09da17-fe9b-4f4e-ac2c-af41d7ed9b8f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34702ea-46d0-47ef-8a27-31d007572fc7", "sighting_of_ref": "indicator--aa185ec8-8329-48bb-84f2-58405349205f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc89d7b-7ca4-4978-b0a5-9bce84dfb6e8", "sighting_of_ref": "indicator--d59a4ea0-31d2-43e4-844a-83b9f626e5d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb082b8-ced6-4ee6-8ad3-9b5a8a14c4e5", "sighting_of_ref": "indicator--21800d8f-d6e0-4d92-8aba-1756de2a6a14", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c6f0fb-9536-4a77-ba06-ba50f79556a5", "sighting_of_ref": "indicator--0ec2e08f-4145-4086-8660-e14f89b5493c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17eece4-949e-401f-ae80-cbe43f1c88d4", "sighting_of_ref": "indicator--01d588ec-a298-47bf-a61b-3cc747fada47", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adeac2e-b051-4d89-8f10-b91f1f493e66", "sighting_of_ref": "indicator--785ddf8a-9e2b-4175-82aa-7c950d22cf43", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6a409d-d420-48e3-ac8d-533a92fe83b1", "sighting_of_ref": "indicator--793b1775-ad23-4b9d-a755-68136e339b4e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c59716-70a7-4e24-896f-5e3af64fa3d0", "sighting_of_ref": "indicator--e482f838-e508-427a-9bd0-9aab51515976", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f288d0c1-ce45-4ea7-b206-08b6210321ee", "sighting_of_ref": "indicator--ba00924e-193f-4c8f-b7ac-0b28da810eac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcfc085-75cb-4062-b591-87b5d607a571", "sighting_of_ref": "indicator--fc568269-56cc-4fb8-a069-7145680a10ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaacb74-ee29-46b0-9760-5d0fb7905c8b", "sighting_of_ref": "indicator--6eb91d41-07ad-4d5b-aba8-c42287ea49c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20e7b05-84a7-44c1-95b4-f986e7885aa9", "sighting_of_ref": "indicator--3e1c8d76-d711-492b-9495-9451b64e22c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a923e571-53c2-4efd-9527-21f55a282fdf", "sighting_of_ref": "indicator--ff672b41-67ed-43da-a65c-bb8201d56769", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8161d9-4e8b-4a79-a440-9cdf2328aa92", "sighting_of_ref": "indicator--d4fc4819-0195-4808-9b55-3c626da2c671", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b1a18d-6161-4c29-b3e7-8d472a94f8f6", "sighting_of_ref": "indicator--956a0702-0f56-4bde-84da-f0791b8bf66d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95001bb0-aec7-4318-bc90-16e18ca2238b", "sighting_of_ref": "indicator--c1477d22-bd40-41da-aa02-40a385f7cb77", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae74973-5ae5-4603-9d66-3e7e65642dfc", "sighting_of_ref": "indicator--926da36c-2c29-4687-9d46-f718244a5a73", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfed385-8a23-41d6-8fc8-fef449a6e6dc", "sighting_of_ref": "indicator--da2620e8-43de-42f3-be13-afea79e290d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6c81ec-1f08-497f-834c-8a8a4c7656fc", "sighting_of_ref": "indicator--5698b11a-40ef-46fa-8460-3cd949c71feb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c10e291-d2d1-47d9-96e3-56197f3fcdce", "sighting_of_ref": "indicator--f1747d58-120a-41ab-a09e-8720a91f2900", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8592ec34-a66b-4e0e-9a45-64cafe46e6d1", "sighting_of_ref": "indicator--87115628-d8c4-4008-bdf3-fba027806ae2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e737ebe-cb6e-4283-9f22-079564044937", "sighting_of_ref": "indicator--6f38a194-cd5a-4d05-a8d0-929c135836d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8d9083-11bf-4b25-b42f-d82eae9add8e", "sighting_of_ref": "indicator--78fefaad-0e57-4cc8-9511-38b96151f4ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631d935c-d70b-4948-906a-086b6ad0c327", "sighting_of_ref": "indicator--6f76ee48-9a8b-4025-afb6-a0a74e8e7166", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0533555-ca9c-4336-b403-991bec0d41ec", "sighting_of_ref": "indicator--0494ab4c-126e-456e-a118-08eddb0b66f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effe9766-40da-41fb-96eb-ab7ca79f560b", "sighting_of_ref": "indicator--9a3d6ede-589c-4900-8c19-e93de772a8e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60af181d-6ede-4a71-a134-4fe8b07390c5", "sighting_of_ref": "indicator--c013a520-5e30-41c9-94d9-f0ea089de6a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67ea89e-704e-47a8-abf7-cca9e0501856", "sighting_of_ref": "indicator--7968a3b9-61d2-42b4-970d-0d04dde0413d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a013acd-0738-42f8-81ea-2409b940439d", "sighting_of_ref": "indicator--a8a086e1-b7a7-4425-acdf-289bd7d5d3c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46137cba-1032-4c79-b308-0c135977ddc3", "sighting_of_ref": "indicator--5adae10b-0707-430d-8c8a-34f80b925e4e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d23c40-d99d-4a13-a957-68ae7a066968", "sighting_of_ref": "indicator--1bdc557c-b449-4c5c-9eee-986bb45b120e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e9d1ac-7c65-4a90-b6d8-a4bc4a9a0d8e", "sighting_of_ref": "indicator--52d4cfb9-3074-434e-9c38-c2447672594d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5736f05e-452e-42b0-bbf2-d1e364343afa", "sighting_of_ref": "indicator--7f32129e-3918-4479-b12c-b01a03be4680", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ba0c54-2f84-453d-8bb9-75ced7b6178e", "sighting_of_ref": "indicator--f813ccb1-12c4-4c0e-9985-5f08d85a44b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8944a9fc-7ae0-4ae1-b5d9-20cdb61b2316", "sighting_of_ref": "indicator--f43749c3-ce3f-4473-9905-c819a55f235a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b884de2-504a-4153-ae17-f75f029f2f66", "sighting_of_ref": "indicator--01aa6d7d-3ec3-4e2d-9d0b-53adaa13e12d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d669ec-c5c4-43ca-b6a3-5e280d70d891", "sighting_of_ref": "indicator--5d5d63ba-9ca6-4291-82bd-98a7a79ac30a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c19d65a-4530-4774-abcf-b1b1f282cfa7", "sighting_of_ref": "indicator--67ebffca-9c26-4034-b388-b9c9f4a85674", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b60417-a819-47c0-a67a-2c5cf7d820e3", "sighting_of_ref": "indicator--1ac3cb03-20dd-43f3-924c-9722735a74ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73681147-9f95-4824-9db9-9c29a62f7c73", "sighting_of_ref": "indicator--e4681c3d-65e2-4c5f-9254-b3a954101318", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b8fd6f-449e-48b6-9ee7-ef6875bdfa66", "sighting_of_ref": "indicator--cab0f871-4d38-4a93-8401-486acbc89134", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e6ca22-6fa1-4daa-b46c-9e75b8b57242", "sighting_of_ref": "indicator--988b5c12-3816-4259-b5f5-fdd6e6936859", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3d49df-5593-48d1-8a03-69f929997285", "sighting_of_ref": "indicator--dd5b5cc9-59ba-438a-a868-39ce25cec5f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320394a3-2a31-4594-afbb-70d0a4309542", "sighting_of_ref": "indicator--557148f8-d7e0-4fdd-96bc-c833c11a252d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3902a59f-dc83-4539-83ba-0cd40dc2d15e", "sighting_of_ref": "indicator--57b6b394-879d-413c-9d94-f923d806571c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ace4881-980c-4e6f-be38-e3488ad466d2", "sighting_of_ref": "indicator--f5c7774f-aeb5-446a-9b5e-dd30bd52e74b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765754fa-e2e9-46e6-8fe5-dbaeed399776", "sighting_of_ref": "indicator--9a02f02a-2287-49ea-818a-221159a922c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa782f3-1286-4d65-9d4c-9f1057ed0783", "sighting_of_ref": "indicator--c699de52-537b-45eb-abf4-a5697e839bd2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946607bd-e924-413c-bb4b-8cbbbd306da0", "sighting_of_ref": "indicator--2db2d69b-ebfa-4860-a92b-078265ea2b56", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f4930c-92b4-4fff-8b16-b57a44ba4091", "sighting_of_ref": "indicator--c8f1b222-834c-480e-b484-e8776d5a61c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4323c5ff-ab04-4b56-9001-2ae4ff518e1b", "sighting_of_ref": "indicator--3df64832-5cba-4db5-94ac-d5c954c378ae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746743b1-1f0f-4a94-840d-4995856efdb3", "sighting_of_ref": "indicator--77d52ee6-51d3-4312-9645-5051f70bd2cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ae1fc1-7bac-4477-89ee-3e17ec0b1cfc", "sighting_of_ref": "indicator--24c0bb35-09f5-4ef5-9a92-d0346521ab76", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8b598a-2f5d-4de1-8d4f-ace77136816d", "sighting_of_ref": "indicator--05b76c73-2314-4e7a-b7a4-76ea06735e5e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa14fe15-459a-43aa-91a1-9e7da5fd1ce2", "sighting_of_ref": "indicator--502e3a75-28ea-4e7e-b595-3138caa001c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40342706-8454-4218-97c6-ed96c20b737a", "sighting_of_ref": "indicator--873a4606-946d-48df-9e0c-187e8a5fee68", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b29656-dc8a-40e5-9c49-75fb5684d3c9", "sighting_of_ref": "indicator--41f6f84a-7e4d-4199-9de1-201d3f9f607d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b465fa7-69c7-4b22-8f3e-5563130d2242", "sighting_of_ref": "indicator--3ed470ee-7b0c-4724-b04d-1021ac35fb66", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f08f93-675a-4963-a839-8c02b378117f", "sighting_of_ref": "indicator--61ef5dd7-a0f9-4df0-bc02-72f4d6a6bc9a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf2f774-da0c-4563-ab99-0f586204fd34", "sighting_of_ref": "indicator--16a87c71-7355-4899-9a42-ceb3b644284d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0d8fc8-27b4-4324-b045-edaf1bfc2940", "sighting_of_ref": "indicator--f2b6c190-8dca-4cf5-9a9e-b2337386829f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a155a5ac-0549-4da5-8b8e-90947b7fec03", "sighting_of_ref": "indicator--8a21160c-326d-479e-896a-367f9c46f0b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273a29b3-2fd4-4fda-8da7-2fc4f80d034a", "sighting_of_ref": "indicator--800c6d2a-dd92-47fe-8766-69648d0fd9e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefd4504-0c8b-4887-8119-c05797fab17e", "sighting_of_ref": "indicator--f1d62964-11f9-4f2d-b26e-21a4f6e283d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1a2603-c28e-493d-aa30-79587cd9f706", "sighting_of_ref": "indicator--4be71d51-deb8-40dd-abf7-03620b0958bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc923d7-b2e9-4c1f-b845-8c7d990a94d5", "sighting_of_ref": "indicator--903a8eb3-ae40-4e2f-97b7-a58ab08a9895", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5912d748-f72f-46ee-a351-111b0937d970", "sighting_of_ref": "indicator--b9fab5ca-825e-47ec-a14d-510282e079fb", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f1ed7e-6a8d-4027-8e94-ba205b8e4124", "sighting_of_ref": "indicator--e7792bac-f88b-4ee5-9745-b3f511fbc5e4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c420a16-5b31-4f51-9260-f2e4647c8274", "sighting_of_ref": "indicator--8c2c34ab-b94a-4501-82d6-0e6cebc2e66e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b252f9-2f92-4211-b02f-c215d869fec9", "sighting_of_ref": "indicator--7b8919ce-d330-4da4-afa4-20930e20cfa6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4393fa-8def-4c2d-b704-13e44962dfb9", "sighting_of_ref": "indicator--05124a11-a7cf-4b1b-9c4b-3eae453507af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cefbd47-e9cc-4e57-86fc-89f2da02d2d6", "sighting_of_ref": "indicator--ed403e56-bbba-426f-b8af-d5f04d4e96d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d4b5e2-91f2-4330-a2ed-e3d1bb9e8a2e", "sighting_of_ref": "indicator--f80e5345-4703-471f-ba56-118b9b4797a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9ec411-1420-4d9b-b55c-06a44e9bb6ff", "sighting_of_ref": "indicator--a1b157bc-0ede-49cb-9d39-6babe0cb5e42", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e047dd47-aa90-40d4-a5e6-5470111bb970", "sighting_of_ref": "indicator--3303876e-5cb6-41b0-bca6-12313f3a69c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe9e4fd-9ad0-4010-a4a2-a1eca898cbd8", "sighting_of_ref": "indicator--47ffbc4c-7b13-48eb-b268-d931785a7bcd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e499a9-2e0e-40e4-ad3f-a57fed4f7724", "sighting_of_ref": "indicator--f9ee3f2a-e74b-49d5-bf6a-95dbb3eb6bb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c990d9f-fdb1-4c99-b4ab-d29b57e41384", "sighting_of_ref": "indicator--0af486f6-4e2a-4c68-bd8a-dfebec6bfa06", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387d0266-c72a-4d98-a2b4-4b3196d72e72", "sighting_of_ref": "indicator--a41b0e04-e1a5-458a-89ad-be0a934efebd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d14c09-85cb-41e8-9eee-0d2458b937d2", "sighting_of_ref": "indicator--17446e7b-b126-49b3-aa5c-9298d084480a", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302135d5-e889-49cd-97c5-db901d313aae", "sighting_of_ref": "indicator--c1cfc86c-c726-4bfa-95f0-b591596f73d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a73c8d0-bdf9-4618-8f8a-1a149388e9ef", "sighting_of_ref": "indicator--b4f858ad-16c3-4bb7-b1f7-d81d092dba2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c50844-e0f2-4ded-9ced-01258ffb59f1", "sighting_of_ref": "indicator--e4c99802-69f2-4328-a06c-ea8544884435", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880d3161-1843-49f0-b1ed-0c8b749995af", "sighting_of_ref": "indicator--093cc88e-d8eb-43ff-afd3-84c4f4c01a0f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259dc7a4-707f-48d6-83c7-03ddc1440aad", "sighting_of_ref": "indicator--08bf570e-f250-47c0-b983-04598d2c50c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcd4507-102b-470f-b762-3ce38f360c42", "sighting_of_ref": "indicator--723d9477-5466-40a0-9030-a91021218706", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371b6b07-7c4c-4431-a44b-a0b9bacc31ab", "sighting_of_ref": "indicator--ccc3abbe-8d22-4732-9168-db5de4469920", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370cf0df-2a7a-4f20-8e4d-b312b1728775", "sighting_of_ref": "indicator--51fb6924-3cb9-4ce3-942a-0df7578d3c32", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d55589-d18e-48e2-8012-c4f16fbadeed", "sighting_of_ref": "indicator--bf2dc182-3d40-43be-b3af-9da480fbb532", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70ecf50-726f-4c44-b619-67ab086ee5c4", "sighting_of_ref": "indicator--d84baba4-0775-427d-b092-3cf26276f805", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48babcde-ed8e-439b-bd27-b399873f6ec0", "sighting_of_ref": "indicator--3b41ee07-6041-48fc-9159-a53243b96950", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6208aab-b955-478d-a21f-a606e6fc2b7f", "sighting_of_ref": "indicator--047da89a-d50b-49a6-b28f-2f44d4d9dc40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629a1051-03f4-47c0-a3ef-8f0f7341ce17", "sighting_of_ref": "indicator--edde3bd3-e1ac-473e-81cd-80018b4ab1c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0106e770-0c04-4125-9b21-45a0803521f1", "sighting_of_ref": "indicator--584ea03c-ff30-4dd1-9731-8cc5bf162cf0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f803d7-65d3-4622-8096-c04417752900", "sighting_of_ref": "indicator--cd1605b9-40ea-4611-80b6-3a4a662235d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1d3794-3b14-4e61-ab89-1fa3bf003a55", "sighting_of_ref": "indicator--8958152d-1c43-400b-9ff0-432e7d5fb628", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845c59b2-8e47-4078-9b45-fcecd76c6cfe", "sighting_of_ref": "indicator--c7e5180c-8e47-42ba-a0ec-ec165d715a95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080dd3bb-0506-4bf3-8ce1-a750002ded34", "sighting_of_ref": "indicator--c7e5180c-8e47-42ba-a0ec-ec165d715a95", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07817dbb-4bfc-43da-91a8-c2e35ac627b3", "sighting_of_ref": "indicator--c7e5180c-8e47-42ba-a0ec-ec165d715a95", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9f8167-9ecc-43d6-ba5c-d84e8a2a4c46", "sighting_of_ref": "indicator--7a0ad7fa-11aa-4b64-93d2-29f9dc3068ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41811d9a-93ff-4a4e-afa0-c602844997a8", "sighting_of_ref": "indicator--da62948e-ad4e-4573-8e2c-2ee9348485f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5db19c-4613-4435-9461-2bf74f512291", "sighting_of_ref": "indicator--f9e799b4-23dc-4eef-b67f-1b4cac12fdaf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61dabc3-899c-4c2a-9c8e-be24d2f4cdd8", "sighting_of_ref": "indicator--e04bef17-a3b2-430e-9aaa-18c66896075e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7a90fc-f1fd-4e63-b65a-37f5cae1fd3b", "sighting_of_ref": "indicator--0f6817b8-09cc-4aa8-9b06-a26ac4426c1e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9108cd-e899-49a2-bb82-30681f2e8511", "sighting_of_ref": "indicator--b51d0f79-a0f8-49d2-b397-6aa097e00bb0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53071bb9-850e-4bda-a9b2-410f017fd3df", "sighting_of_ref": "indicator--bbd2461d-1182-429a-88f9-adeb3ac69c1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a550ecce-f1bb-400b-b3ce-19c7c7b84ae0", "sighting_of_ref": "indicator--ecfc48d2-a880-402d-97c8-79f8b57af816", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17635a6-c0e8-4718-a04f-b34a2f2646ea", "sighting_of_ref": "indicator--72a9de42-ed24-44a4-9e53-21fb9bd5ad0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d480c3-3513-4c0b-be1a-9d991514d8e8", "sighting_of_ref": "indicator--987e3543-6cb7-444c-9ea7-b316bbe219f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a617bce6-1356-4020-8beb-539502d9578f", "sighting_of_ref": "indicator--5d583a20-e12c-45be-a046-a8824a0e4f9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f436081f-617c-4d9a-8c36-2d3bdfb0da9a", "sighting_of_ref": "indicator--100e6085-b551-41f8-a92b-3bbbf3277b56", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1494462a-7676-4c4e-9660-1c1c0a7504f2", "sighting_of_ref": "indicator--01199d09-577d-4b8e-af0b-d20007c51292", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0579ad3c-34a3-41d0-a947-02fea9148f0b", "sighting_of_ref": "indicator--0b79ec07-26d2-4ccb-baca-fcd07bdfae96", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537581e4-7aa1-4d0d-a5c4-1d4494ad3848", "sighting_of_ref": "indicator--8e9920d0-1d09-4c79-95f7-5d296981b93b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd862e69-89ae-435d-a90b-768780edfa84", "sighting_of_ref": "indicator--7b74e991-06b9-412e-935f-583dfdccefa9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e17724-c855-4b8e-983f-4fe385940224", "sighting_of_ref": "indicator--417dd0e9-4e4e-4f78-96bb-bb24672ee8f4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b3343a-456e-468f-bd50-9f841b5f7e37", "sighting_of_ref": "indicator--f41e83b0-7f95-4fb8-bba8-56e66d444c93", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e05588-9f70-4a35-b438-8829ff2f3850", "sighting_of_ref": "indicator--da3f8c10-9ad8-497c-bcc1-3b23bc64ff4e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9314889-2fb2-43c6-987c-efd3b683b442", "sighting_of_ref": "indicator--e49161c2-1473-44c3-8098-0a91633c8957", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739f1409-5e72-4e36-a7f8-ed4a9662e475", "sighting_of_ref": "indicator--fdfbbe45-07d3-4264-b29b-4f616e6d664b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436537ba-e00a-4674-9007-ec4be82cf7fe", "sighting_of_ref": "indicator--cf9e777b-e2a7-4224-b12c-aaf6db968348", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa9035c-1168-483c-92c6-13bd0ebe2215", "sighting_of_ref": "indicator--fa62fb7f-ff84-4147-87a0-d7b69cd2fb12", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4327affa-79bc-4ceb-bbef-497e205a9c28", "sighting_of_ref": "indicator--5447ce82-1588-4412-9f39-6dd95f693dbf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412e7d8e-c14b-4590-9f0b-2d59ce4ffe59", "sighting_of_ref": "indicator--af0fadc8-e337-499c-b734-2aa13203259f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b039cd-65ca-46b1-b718-0ecc2962d297", "sighting_of_ref": "indicator--8bad93c2-e980-4305-87d2-80423c02473a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac73919-89c9-4bd3-b2cd-654ab49491ce", "sighting_of_ref": "indicator--66344c75-e9e5-4a59-b103-c3e2be39612b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1804fd2f-6142-40d2-adf5-f7118d897795", "sighting_of_ref": "indicator--f2949902-5480-4b7f-b02b-b2ff71d38f42", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550b286e-d3dd-4032-b8e8-ce3fae7a5397", "sighting_of_ref": "indicator--5ee2e005-6947-48ac-b756-b53af7b66ced", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06664192-c5ca-4b15-b181-2fbc749e4028", "sighting_of_ref": "indicator--25db1e11-e8f9-4f47-b9cf-74adb19e7fee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17928747-e490-4304-9418-50da4bd93aa6", "sighting_of_ref": "indicator--145d3f23-7d91-45cb-80fb-27dfe60c444e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f74d2f-1696-4f18-9ffc-c9c30c36de46", "sighting_of_ref": "indicator--dc45602f-fd6b-40bd-9157-33f0c41bd22c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3602fe8a-6c1a-4d6a-a3f3-200d0f85fbec", "sighting_of_ref": "indicator--a01102c0-7730-439d-85a2-1fd08c2442b6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150920d0-1175-4199-8918-c1180abb1a70", "sighting_of_ref": "indicator--cce6f2a7-6a43-4843-a1fd-dfa70257d793", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29de8283-30a9-4fa3-93d0-90a735283c85", "sighting_of_ref": "indicator--ceeb40fa-3bd7-4273-a2b2-ee75515f2763", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85df4d9e-d211-40e0-b445-d7a34c29bad2", "sighting_of_ref": "indicator--8f8b7029-c210-48e2-bf31-f42c3d78acea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0b35e2-b08d-470a-a286-bffb2a4fab68", "sighting_of_ref": "indicator--4aae172c-00f5-4809-b292-4b9a0b6eff45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acd0314-50c0-4b12-8f22-376e7646623e", "sighting_of_ref": "indicator--e06c7e7c-1e37-4d60-abaa-15c497676c7e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01802735-b01c-42f4-a7bd-2a8fb38a7f3e", "sighting_of_ref": "indicator--62cfcf30-d65d-49c8-8359-7417b74879c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88ac252-11de-46ac-a152-bab765403417", "sighting_of_ref": "indicator--cb9ed599-094f-4877-9a30-f88db1f07d33", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef052cb-3269-4c42-b0a9-0d7bbb23a6bd", "sighting_of_ref": "indicator--584834a1-e0e5-472d-919a-6fc6966208f3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2701020d-138d-43a3-8ff5-f2ede1fe6a15", "sighting_of_ref": "indicator--5ef9ab83-31c8-4d8c-be72-c579f1e6ffd0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9636917-9bf7-48f3-b05f-cb05f193c00a", "sighting_of_ref": "indicator--8f154e93-1380-4c7a-bb0b-37ec9b4848e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8744bc-2665-4f9f-bd48-3b84ebc00685", "sighting_of_ref": "indicator--36469126-8c77-418e-be30-57b84be9cdc2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f92e978-a603-4f6d-aa20-7e5fc0e7ffc6", "sighting_of_ref": "indicator--d7360fcb-632d-4aff-9374-b046c55037da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367236aa-226a-44ec-800a-3a1ed602a198", "sighting_of_ref": "indicator--7b679061-c52c-46bf-9ac6-d42f2ae73d93", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07423bb-0c7e-4d88-8feb-0122c29c7ff2", "sighting_of_ref": "indicator--bd3b76a9-2cac-4e69-9f71-308bbe5cb450", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c877e29b-204b-42f9-8c65-25921b048817", "sighting_of_ref": "indicator--755cb4ab-c6ce-469a-9603-d3b169172476", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbf74a2-7245-4d9c-989e-4322c68eb04c", "sighting_of_ref": "indicator--23c07985-46f3-463d-a237-255a3c00b9bc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ed2bcb-b2a5-4a0f-91b9-3abab5a31885", "sighting_of_ref": "indicator--b905a5f5-36d0-4378-9b9d-9249ad72a79a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26bc50a-4195-4896-8600-cd7f9067e046", "sighting_of_ref": "indicator--944414b3-2052-4689-a25e-fa69ef252244", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7b2eb6-dbd8-4ffc-a5b8-b343b48b7a29", "sighting_of_ref": "indicator--9223b372-05c0-421e-be25-f89894e43291", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d201cb9f-a6f7-40a6-b257-450385816f94", "sighting_of_ref": "indicator--02b2fea5-d97b-4104-b828-47301a44c0e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59577b94-6df8-4bd2-82a9-78e6832b85f1", "sighting_of_ref": "indicator--fbac5e85-6f03-45a0-9fa0-ba22171111bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da2036b-f166-49b8-9e4d-2fe3fc831da3", "sighting_of_ref": "indicator--315ab4f4-8df0-4fe7-9f2d-847ea1476eb0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc741591-77f9-4492-8dd0-bb591c6bf579", "sighting_of_ref": "indicator--ec89f93a-3dd7-4d53-9890-209133bad97d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43df76b-06d9-4c2f-bd5c-a9e954fed9d4", "sighting_of_ref": "indicator--dc90c63a-f21a-45f8-b4d8-aebc7886e646", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dec9d93-c9de-4e1e-b54a-e8cbd05ffaa7", "sighting_of_ref": "indicator--3c2255ca-8a68-4b49-ae78-df7f7006da8e", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227aad50-8050-4bf7-bfde-59754f8c2a74", "sighting_of_ref": "indicator--99cdd62b-e623-488c-9b29-ff4049767b5a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5a63a6-5d4d-457e-8d82-a65eb48b37d0", "sighting_of_ref": "indicator--0fdef424-802c-460f-be83-c5b0a9d670f6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2405ada-9adb-4d70-8d4c-632960a7ca50", "sighting_of_ref": "indicator--9def43b5-1915-442b-a28d-2d7dd03439ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab61f6d-7d34-4b39-beeb-7372056e0f48", "sighting_of_ref": "indicator--35c2d4ae-659e-4ad2-b9df-940ef32883c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0dde1c-d664-4955-83e7-513975194f62", "sighting_of_ref": "indicator--e1bfdcec-ed2e-4f8b-b474-bc9c231e84aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d65e10-ce25-4f2f-bca9-24cf8750226d", "sighting_of_ref": "indicator--6f1b0f0b-1e66-4738-b4ce-60aa33d8f1c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6041f0db-a910-448e-b930-aec751f3526c", "sighting_of_ref": "indicator--cc3fe662-0e71-4d11-8351-b610fbaa42b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f6d6af-90cc-4b3b-ae9b-1f27099af56f", "sighting_of_ref": "indicator--8cb8e4b3-6b12-4bd4-951e-76b0336177d6", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57aa3aab-0189-4cb7-b796-91a2723ef9d4", "sighting_of_ref": "indicator--505f9260-8b2c-4c76-8e8e-fb84b63eba16", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fee2a8-ec0e-483b-81e2-f9b4b28254c7", "sighting_of_ref": "indicator--508305d4-7fb6-4b73-a797-486e0349ab3a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c27816-302a-42c3-a633-f9523183c32a", "sighting_of_ref": "indicator--a9ab6df6-8a3b-4af0-8925-20bb1cbfde9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96229b47-a6cb-40f1-aad8-ace4fd53698d", "sighting_of_ref": "indicator--eb1eef1f-fa34-4e52-a046-158ac55fef49", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c335a511-3200-4b5a-9739-72764832f030", "sighting_of_ref": "indicator--bf77980c-7f31-48d8-9e82-a684d8149e34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a158fe42-5f54-437c-a546-50548c7038ab", "sighting_of_ref": "indicator--16a64c0d-d835-4d62-8f7a-4b0b393565b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487c19fe-fc6c-4f51-8ad5-2bee461aa370", "sighting_of_ref": "indicator--c7e0ec20-8577-4441-87ad-6678e5d86ff9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66554d76-099d-496f-889b-bcc67d93e066", "sighting_of_ref": "indicator--25f6842d-81b9-425e-846f-c43e15f34c10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987ceb0a-0916-4049-9a01-581b4d671f1b", "sighting_of_ref": "indicator--748ee1c6-9b41-428b-8c62-e09e810471f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15322b65-b0e4-4b00-a5f4-fffbc66f92cb", "sighting_of_ref": "indicator--f7cfc5e4-c547-4b02-a228-949070002545", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbe0fc4-67a5-445f-985e-5136d866c916", "sighting_of_ref": "indicator--4db0a848-238a-4a01-bc27-0ccd96097af1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a80dd2b-9d64-41f0-bc29-e62b0732eb66", "sighting_of_ref": "indicator--3f636b4d-ffac-4734-b2b2-a61e7b3dbf0d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ab0aa8-d973-4352-a8f9-395ebefd9b9a", "sighting_of_ref": "indicator--63bf35c7-78b8-4b3f-a00d-7e5012a34454", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95a0666-e6fa-4bfb-93fc-72cb7f390cec", "sighting_of_ref": "indicator--4b4a9587-9989-48fe-beef-567761dea9ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4e14c8-e162-4e80-b210-8ffaffd81012", "sighting_of_ref": "indicator--b2571b4e-f577-45a1-afbf-28bffc16dcbd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7026a41-7cc1-403a-8e82-dfbe5c9c6a88", "sighting_of_ref": "indicator--fbb79fa2-57c9-419e-abfc-565e3b26a5c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9f953a-b1bf-478e-bca2-0d7b5ae9a447", "sighting_of_ref": "indicator--b4464fb3-8b04-4b2c-8567-683d3527284d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353e409e-db09-4527-978e-bed9b9275633", "sighting_of_ref": "indicator--69e77ab0-79e2-4be3-8fca-ce0ccd7a7399", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b26445-be0b-457f-a60a-c8bb404bf91e", "sighting_of_ref": "indicator--1575e6de-3281-43c2-9afa-02841fdaebaf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cc3b0a-abc2-4153-90db-c1bfe37284a0", "sighting_of_ref": "indicator--75845ca1-2992-4480-937e-4ff10703b967", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7243255f-bfcc-4652-8930-747b46a5b99d", "sighting_of_ref": "indicator--75dfa832-6331-47b4-8b96-7a635efd8044", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e454d47-e506-4e5e-8804-05bbee9d4c74", "sighting_of_ref": "indicator--face05ce-b19b-42cd-8e08-203116c13fa0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2c7c4a-338a-4971-9ff1-b018c3f51861", "sighting_of_ref": "indicator--560aee13-0cd2-4c2e-9ea3-8b3373b62a86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb9b65d-627c-4309-9f50-0331d20f90c6", "sighting_of_ref": "indicator--560aee13-0cd2-4c2e-9ea3-8b3373b62a86", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a456da-0176-472f-ae26-95e667926990", "sighting_of_ref": "indicator--8f02da3b-7554-4cd4-86df-dda2062f0ca3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2add75-3c31-4999-9de1-f28f0b35fefb", "sighting_of_ref": "indicator--ad601851-d4d0-447a-b1e6-0419b8b34ebf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed36a62-fa10-4406-932a-d1211a0dcc7a", "sighting_of_ref": "indicator--0447c710-14f8-49dd-a416-e70b2e35a0c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007ae749-7152-464b-967d-e2b5b34fc38e", "sighting_of_ref": "indicator--5cde2fc4-6bf6-4037-b0ec-ef26cae455e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62107ae5-d907-47af-8b2d-708ff515c01d", "sighting_of_ref": "indicator--6ae44bc6-9073-4b46-8e9e-36b4617e3b2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a481ec41-ca8b-4d2d-99be-7394afab4fe9", "sighting_of_ref": "indicator--b484f75e-fb52-4811-978f-696b31e71aff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1722707-9505-441a-8c2e-32a8836a2f00", "sighting_of_ref": "indicator--b37b6067-799b-4614-8569-fcf1fa9a7d5c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0f989d-49d1-438d-a26f-8d9a380dcd3d", "sighting_of_ref": "indicator--2365f881-ac76-4d07-a8e7-773515e10f72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30152ac-5062-4428-924c-b63a0dfc1e14", "sighting_of_ref": "indicator--c8fb3b36-4a3a-4640-a8e7-4cd44471675f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a1a580-d075-4d7f-ab80-378c03c760d1", "sighting_of_ref": "indicator--a52c5e6b-ff95-4a5f-b3dc-b123ac3157e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801f2b14-18fe-4f94-a1fe-36d38baa2ec0", "sighting_of_ref": "indicator--06d7b1ae-d34e-497c-976e-5bcf96c19a0d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f66b75-02a1-475d-80f4-4bab1ed18080", "sighting_of_ref": "indicator--1a44dae5-635d-467e-a4f4-95c4b7634b4e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51c3217-0551-4b0a-99a4-3e255220bd2a", "sighting_of_ref": "indicator--85c2c73d-1b48-4d85-a66c-3296859afdda", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff6712d-218b-4dea-a425-d2a4b2c77630", "sighting_of_ref": "indicator--c09d621c-e0b4-477b-a670-624a1332ad51", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af73afc-1f0d-4268-a086-98f9b06a72fb", "sighting_of_ref": "indicator--96e942b6-01e5-4ab7-a49c-680836c16c97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486da448-1e05-4f9c-8513-eb918dd7cab5", "sighting_of_ref": "indicator--3db0d3f9-2b70-44f1-892a-c8dff3bc0ef6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c860bfbe-43bf-4973-bf6d-b273d1ecd9a7", "sighting_of_ref": "indicator--b8ab8a81-9573-487d-bd39-d8e33c1ac097", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2414c5b0-5baa-4517-8e70-f9ef005e073b", "sighting_of_ref": "indicator--6d9e490e-060c-4505-9e79-6fb339d69260", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103a5433-2902-4ff6-bd5e-30dd552d9668", "sighting_of_ref": "indicator--682e94ec-7b7d-40f2-a1b0-119740ead874", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3c5ad8-ded4-4ad5-9ea7-052eb47be446", "sighting_of_ref": "indicator--396bd476-0f4c-453e-a0a7-42389dda406f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a2e4b4-f06d-47f2-a7a6-8f027a52e7f3", "sighting_of_ref": "indicator--9d9c431e-8d5f-42d4-9ada-a2fc581509db", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623a0e49-924c-4159-a2d3-73d435c96f1d", "sighting_of_ref": "indicator--253effd6-a8eb-4a88-8f4c-b14000b69261", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b329050-50aa-4d5f-8151-297352abd171", "sighting_of_ref": "indicator--73ede260-b790-4f22-8652-29ed7a249d71", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79703df2-007b-4e16-ac76-075fcb55e3d8", "sighting_of_ref": "indicator--cf8ed730-dc7f-4e8c-87e8-37414b52fd99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232b5359-8ff0-4877-b725-8397fba8d180", "sighting_of_ref": "indicator--e8605bbf-0c26-443d-8696-29bd7512cf11", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8e0c48-5d78-4a23-a922-1f3d8bd98850", "sighting_of_ref": "indicator--3ac8beb0-b07a-4557-b29e-39447f38d3f3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051da669-95ed-42e8-9433-afdf63821a2b", "sighting_of_ref": "indicator--8aecde24-a160-43c9-9768-c9034b7b7401", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c23e4b-19b1-4241-b465-b605c8d76954", "sighting_of_ref": "indicator--1a526159-d502-48df-8d8f-a8f61fd68627", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60511c5-5a24-4ea6-a44c-a84acaf21e09", "sighting_of_ref": "indicator--fb743beb-e780-4926-8fcc-f5b288b83edd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab18ac1-1c76-4cca-9d13-10d3f7e00af3", "sighting_of_ref": "indicator--d068818b-dd8e-49e8-a64b-4b10abd2b587", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b82584d-cdf6-4f3d-8be8-2a51f2f25830", "sighting_of_ref": "indicator--2a1d3de6-4101-401c-a9f4-fcdd3b5954e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d254bc8-fa8a-4eab-ac25-7db814a42ad7", "sighting_of_ref": "indicator--73ab3291-9f08-4582-80f4-38bc81543bb1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb5e550-a585-4edd-9be1-63502e1160ce", "sighting_of_ref": "indicator--b6c90d29-b723-4c8e-9bba-c5bc2b9e46b5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798c7f12-9164-4577-9b9b-653a300f544b", "sighting_of_ref": "indicator--fb03a7ad-c507-443e-8388-3ad421811b57", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fa02da-9bce-4058-a159-cf70ab8c3ea8", "sighting_of_ref": "indicator--777ecd2c-f7d4-420e-bad3-e0c71e25658a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4afb0ad-5120-480a-95ec-aa4d382554fc", "sighting_of_ref": "indicator--a2204003-7948-4101-8a30-b2c44fbbf914", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c5ed36-90cb-42c5-811a-f8ec12d41a3b", "sighting_of_ref": "indicator--8164c956-b882-4602-822c-218bdf27617e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9162c6b4-9fd3-44b9-888e-ad7e69cc460e", "sighting_of_ref": "indicator--aa2c1200-89e5-4504-9615-1622ca2f8eaf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc92f62-85a7-4cf0-816f-f41869e8b5a0", "sighting_of_ref": "indicator--4f9a7c55-ccc2-42cd-b4ee-347521e2d883", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29af84f8-fcc0-45af-93aa-46c857081922", "sighting_of_ref": "indicator--1f4a6611-6f69-48ca-9c82-8099ab9edeb0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222b3617-49d6-4693-ab8c-2ebc244fdbb7", "sighting_of_ref": "indicator--d8822655-706f-4f45-a646-e65b617ec53a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d268597-3d00-4299-8a14-bbff8a72af9b", "sighting_of_ref": "indicator--2616ab0c-88fd-4000-a747-9f2cc34bcb17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512a7a9a-083e-46ed-8e63-114ec9089af8", "sighting_of_ref": "indicator--1fb80e93-4a07-4486-961e-1ef6899dbbe8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8193d71-d9a0-4c3d-97a7-a97e79a5e8c9", "sighting_of_ref": "indicator--390fa44c-c636-46d1-b5a3-038544015ffd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5189e5fa-29b2-48ee-8a64-6cb721f946ae", "sighting_of_ref": "indicator--51b7533b-027c-414d-94fb-e4a345e56ab1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719d4f82-3175-40ab-b992-592831ebb46e", "sighting_of_ref": "indicator--32a17356-393e-4496-9c9b-41ab973acda1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ac1142-5985-47eb-9396-4d80fb279d29", "sighting_of_ref": "indicator--6528a23e-1a3e-4024-97af-24728567547b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81625e3-5070-4543-a63a-b304a03b316c", "sighting_of_ref": "indicator--ce77db44-97d1-4954-a3ac-396848d0501a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56cdfd2-aaae-4812-82ad-535c6a747d9f", "sighting_of_ref": "indicator--fd50fb6a-30c6-4e4c-b226-199315a6eb9e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f8e4d4-a67d-4c3d-90bc-c59f3ce1ac22", "sighting_of_ref": "indicator--33c9c540-0fd9-48dc-8ba8-b4c7a6e78a0e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c6331a-74e8-4f81-ab90-811a2b2b6e8d", "sighting_of_ref": "indicator--a1d10c67-07cc-43fd-9bce-be2f8da55b9e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1ebd26-9918-4b7a-b5af-fede10dfa055", "sighting_of_ref": "indicator--e7ee296b-9993-428f-b4b8-dfdc274d868c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0570daba-6ec8-4576-8d9e-81ebc0dfb8e7", "sighting_of_ref": "indicator--06308138-66a8-4b5b-9bbf-4c37cdf4a600", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0ba828-4c1a-4e0d-bd6b-5268d5cf3267", "sighting_of_ref": "indicator--f5b6bc5f-fbc5-419d-b124-1c1494a738d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92277a86-8bdf-4ce8-a3ed-e0e56d469140", "sighting_of_ref": "indicator--7d908e43-03e0-486c-95c0-42039749afae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9adc41-510d-40d7-a7bd-368a6bbc06e4", "sighting_of_ref": "indicator--60f719a3-afe9-43fb-b140-c92785a9c31b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b699aa87-7fab-4b88-86dd-e827692422aa", "sighting_of_ref": "indicator--a64ea27e-b543-4556-9fef-238a5f05facd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a86d9d-d71e-40cf-860b-2acbd5f28b69", "sighting_of_ref": "indicator--8ea7dbe8-a9a1-487b-a1a4-9a72563846cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9d2133-66ef-41c7-be90-4eb98fbc49a6", "sighting_of_ref": "indicator--a99114d2-3b57-4803-b79d-27c17c57962f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e056f3-cc49-4c94-9c2d-2e92c2501121", "sighting_of_ref": "indicator--61a541d8-6522-48e2-94f7-cb1ad49a70e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8d7df4-084a-4427-a523-f3213de8a67e", "sighting_of_ref": "indicator--9d84cd5b-7341-45ff-ae06-022d5e57c059", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd0d27e-3fbc-4648-9817-adecb89faec4", "sighting_of_ref": "indicator--0d9fa997-c5e1-4cfa-96eb-48a01196e49f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ae7bb0-c3d6-495c-9240-01b6b932c42b", "sighting_of_ref": "indicator--66a9e96d-e6a2-4afb-9306-32550f7c46a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beba3172-0255-4d44-ac69-f2706dbf3add", "sighting_of_ref": "indicator--d50b1a28-6462-47b4-9c53-ddf6dfe82f57", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588ebf7e-264c-4ffe-a5ba-ca661426111c", "sighting_of_ref": "indicator--29b1a73a-3c64-4540-9e7a-f275f8bc19fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfadcd9-a81c-4fae-9ca4-e7bb1d8ebe9f", "sighting_of_ref": "indicator--6bbc7455-9d42-4d35-bc50-7654259b7fea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63201de2-0bc0-4265-9972-3da83ee4eba8", "sighting_of_ref": "indicator--9208a8c3-4ccb-4e2b-a1e7-9970de2a80f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf3dd22-05b2-4f6a-87fa-6abe8ddf234d", "sighting_of_ref": "indicator--bc17986f-8bde-46c7-a566-7b52c2a90094", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453ea7d2-2971-486d-9267-da8c9e34268e", "sighting_of_ref": "indicator--6277dabe-8233-44c9-bfb4-d069168dea01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a17c9c8-66f9-41d9-bdf7-5984256a1348", "sighting_of_ref": "indicator--ed1fc8a0-f35a-4e51-be72-bb2bd86c9ad3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9e89fb-f547-4852-8b59-554ca3bb0b0b", "sighting_of_ref": "indicator--14722140-0b3b-4490-b644-d16961904426", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff3f5bc-6c5e-487f-be90-2a5701414af6", "sighting_of_ref": "indicator--6db0f7d4-8a25-4231-bfd5-cc3515757398", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00823225-2e92-4516-9068-dcbe6963a514", "sighting_of_ref": "indicator--c1ecd2e7-819c-4660-a467-17806cb00f1a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152ec539-46d2-42dd-b8d7-4c6e362f09ef", "sighting_of_ref": "indicator--09523f3a-89a2-4f48-9181-ca70af60d394", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3062150f-948c-4b18-9783-d4197e2f2604", "sighting_of_ref": "indicator--963cf7af-ac9c-4770-baf3-e6d537104312", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b7c5d8-17d7-4702-9bf1-111177d08376", "sighting_of_ref": "indicator--1a2760ce-754f-4cb2-9746-659b3264dfed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e3c1e7-76e4-4969-b902-b263d713cd6a", "sighting_of_ref": "indicator--be156f51-d7ba-473e-9db4-467527921f75", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2939cf31-bcc8-4f08-aefc-4d8f074ab853", "sighting_of_ref": "indicator--aad46c94-3dce-47e5-973e-ea0e4c9d1d4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7a2ff5-0064-4eaf-9179-a6f4e18cfc1c", "sighting_of_ref": "indicator--fbe477bc-47c9-4b43-8277-5f3b9e6cecc8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e69623-8ece-4a9a-a17c-2d11fa10690d", "sighting_of_ref": "indicator--d644fe45-7e46-4173-bb70-e625e3ebe2f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf2a7d8-1bac-4bfa-b23f-ad7049259226", "sighting_of_ref": "indicator--ba3a2b96-bb7f-4ce1-9837-c23c2d2c669f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31cf8a9-5520-4e96-a2a0-494a76c811d4", "sighting_of_ref": "indicator--c1b4a758-6010-4804-93b5-5c91ca0b807b", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fda82a0-9a47-4cda-8851-ee9dccb776e3", "sighting_of_ref": "indicator--e5e9558b-8439-43fb-8b2c-f8220b747347", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf36f70-29f5-4644-b26d-a276b240d0b1", "sighting_of_ref": "indicator--7fb12bba-bed2-4256-b790-c95e1da3d426", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed40012-1a26-4e49-af35-d2f8593c9163", "sighting_of_ref": "indicator--ce5aae08-1a63-4837-bd39-559146144513", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a66bb3a-8259-46cc-807b-f8f3dedfc8d6", "sighting_of_ref": "indicator--3b203060-71c5-45e1-8b91-28d38a9b22cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6829cc-555f-4790-a804-b79a3b492ad4", "sighting_of_ref": "indicator--af95b881-4960-4c56-80cd-30ff2e4011c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbfdf4e-4ce2-4410-8acc-559774e4d0bc", "sighting_of_ref": "indicator--9e6288e2-364f-4e64-ac38-684f41d2d0d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9401e472-86d5-47b8-bb6d-55bff692cc06", "sighting_of_ref": "indicator--a76780df-319c-461e-8f0c-aee045d225f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6befa8-2d02-47c6-b48b-926d6261e96f", "sighting_of_ref": "indicator--1f16c2ae-f045-4666-8da9-cac5dc351839", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1826bc-3afe-4630-9641-0c1ad443172a", "sighting_of_ref": "indicator--cc8b6de7-00f2-4ec7-9d22-8ee8e15b5f81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510c32f6-3c29-46c7-9170-f315505b33e4", "sighting_of_ref": "indicator--d02de518-5eee-4464-b61b-efcb689d48b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abbcff4-4f9c-4e3b-a463-e66e42dbac7a", "sighting_of_ref": "indicator--d02de518-5eee-4464-b61b-efcb689d48b0", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ebcb68-ac7e-4ad3-b245-1e32374a1c92", "sighting_of_ref": "indicator--d02de518-5eee-4464-b61b-efcb689d48b0", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f2493f-e6ba-4e80-bf8f-c87de731c575", "sighting_of_ref": "indicator--ba85ef96-80f9-4f0c-a7d5-659b8a057b42", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f453648-b72e-46d6-b8b2-170e3a1982f5", "sighting_of_ref": "indicator--ba85ef96-80f9-4f0c-a7d5-659b8a057b42", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3a0cb9-3767-4824-a9c4-52845524a521", "sighting_of_ref": "indicator--5eb20f8b-5fa3-498f-8d72-0004db15546a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01602e99-dd38-4c0e-b513-6c9f15142438", "sighting_of_ref": "indicator--9f61f913-4b71-4e26-962c-8f490935a633", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a876e766-4c9f-4ace-a6bf-5c10a88ae11a", "sighting_of_ref": "indicator--0b159eb7-8635-4201-9508-621608e671ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ce8ad5-226c-4922-82fa-27a1f78beb35", "sighting_of_ref": "indicator--4af8792f-777d-45b3-ac95-d98647f81cb2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efce19ac-657f-4000-9abb-a413579b6bcc", "sighting_of_ref": "indicator--72cea243-d314-451c-8ad7-1063b6bbb539", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d181bdb6-2e26-4a93-81e6-a7bba3b9c242", "sighting_of_ref": "indicator--5ef74b4b-10b5-44dc-b124-faa049b8d40a", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4e7723-0f09-441f-92ec-b1222d63f400", "sighting_of_ref": "indicator--dff79c6a-7e53-4837-b7db-229055d69390", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37af412d-5a2c-406a-b4ba-dcaaa18634f1", "sighting_of_ref": "indicator--835dad7b-f303-4615-8dde-da9a33043b0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf10ca9-9dc1-4192-8081-fd315170f19b", "sighting_of_ref": "indicator--8633082c-b306-46b2-b3c0-10b52f4ddf92", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7a1663-0f89-4b4b-86a3-8c0027c6d042", "sighting_of_ref": "indicator--ab237b33-e774-493d-adbc-f998c5504ec5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa017a8-3107-498e-b7bc-43580a50cf10", "sighting_of_ref": "indicator--3cb8126d-680e-493d-a19e-32de31d72527", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c9e5fb-a4e9-4b45-bc0c-856a1e9d07fa", "sighting_of_ref": "indicator--e6c15bec-d99f-4c68-b387-55ff75b23136", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94b4eb5-8f07-406a-b6f3-b150419ffbc9", "sighting_of_ref": "indicator--dcadfff2-afaf-4bee-93bc-25843b0282d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822fcb09-b559-4714-ba80-a4c291673005", "sighting_of_ref": "indicator--3c056c9d-5551-44da-82f1-e8d6580896ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f5c647-e279-4b62-b41b-8e79425c5d19", "sighting_of_ref": "indicator--885ea876-5bf7-4569-a672-6729aab25f1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30b7b5c-75fa-4501-8470-5682dc34ba8b", "sighting_of_ref": "indicator--2fe1881e-5335-422e-a81b-2dae3be76c9e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e02fdd-470a-434c-8849-50a10ded5181", "sighting_of_ref": "indicator--f8f04c34-ed95-4fcb-8171-97cb4406475e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee5c36b-b80a-49c5-ab06-5c5fa9654c9c", "sighting_of_ref": "indicator--9e8d36bd-f572-40a2-b5e5-c8cbc5ef48ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a16cf6f-fc1e-4323-b650-a7ee2f184006", "sighting_of_ref": "indicator--12e75595-6f28-4d1a-879d-8eb166d99cee", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412cd9cf-ac7f-4bbe-ada4-3c8019e7b27d", "sighting_of_ref": "indicator--c7c0235c-72d4-4e8c-a688-dd46df18eabe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff09a6d-f6fd-4d0d-89a0-fe4599b7ede6", "sighting_of_ref": "indicator--4a7c6704-6f40-4754-9bbc-69486f4e2c08", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689a17d7-98fe-4958-aaf7-3cde4217c067", "sighting_of_ref": "indicator--55f0d765-9df3-48d3-ad28-cc3bc9d9f259", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0c8fbf-24ab-4b46-a097-7f506ffe3815", "sighting_of_ref": "indicator--7d293bfd-0f94-4441-9381-c252c71f845c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be231ca0-94ae-4b6d-8abb-ac6584df749c", "sighting_of_ref": "indicator--73da6558-3df2-418f-8ba7-91cf22d44118", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3693293-d38c-4426-a5f2-67d5aab402df", "sighting_of_ref": "indicator--699e6514-86aa-4473-b72f-4d25b7f547cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461e7d5c-479b-4956-b79c-a8c168bb8534", "sighting_of_ref": "indicator--e226b569-9c7e-4254-9529-844b01ef9d39", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766c737c-6c94-4c4a-969c-a3c8550abf99", "sighting_of_ref": "indicator--e5678b90-12e7-4e71-9f5e-0e4528ce66e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804941b4-e62b-4b5d-9a39-c2d556639887", "sighting_of_ref": "indicator--010d2879-66c3-4f60-943c-a0f316093efe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb41a5b-f557-4698-878b-87420adf7bc1", "sighting_of_ref": "indicator--bc94b33e-ccdc-4714-a2ec-06b023f2451e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7693ec-8f51-47f0-b6f6-72f6d7a27cae", "sighting_of_ref": "indicator--f4247238-6608-4aac-a8f2-6d67031b4cbd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6c73c5-a2d4-4cf3-b437-380805ab93da", "sighting_of_ref": "indicator--42fed4bf-49b8-4612-aab8-42d2dafd7b76", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9e6d70-83c5-41b7-96d6-e981f4a7dd32", "sighting_of_ref": "indicator--ca4e7a1e-bf47-41e9-958f-d6f17ecb84ff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26aacd6-be8d-4db1-a633-67cd7300ad70", "sighting_of_ref": "indicator--2566eaa0-7d68-4e35-a477-65d8bbfb828f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51dd5b0-d025-4705-b9ba-d2e66b0f85f8", "sighting_of_ref": "indicator--f4f198a3-de5e-4f26-8c3d-d1eebeb7dcb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2eae40-b98d-4a95-b236-9b225c604338", "sighting_of_ref": "indicator--67b0781d-6876-4039-bcb6-c282417cee9d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddb93a1-7c1a-4e70-ac9f-6b2a42e591d0", "sighting_of_ref": "indicator--084580ba-5e9e-476d-b486-4393a3fd9017", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8dafbc-dca6-4aec-b6a2-30a4456b471e", "sighting_of_ref": "indicator--2f449949-7fc9-4a92-b918-9b732171e72b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65623142-1087-4fa4-aec7-21d906f4cf33", "sighting_of_ref": "indicator--f939ff4a-b1bd-4b9e-9105-411643aead44", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01493064-ca55-40a6-8b66-a07e4ff5921c", "sighting_of_ref": "indicator--397e19b3-9716-4cf3-8b61-4411eb3c78cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64185d83-25cd-4c20-8187-3335087c7a26", "sighting_of_ref": "indicator--84fbee7a-ad00-4fb1-a917-dd472ae08727", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233c993a-5d35-4bc9-8c4b-1bccf25c31e5", "sighting_of_ref": "indicator--eaa90b9a-7e0f-4276-a28c-2059c2dc6ba2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d0bf50-876c-4f7b-8651-995e6b9985f7", "sighting_of_ref": "indicator--7d2cc224-cd63-4756-b48b-4924d3b3dcd2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc5e3c2-84e0-4d4c-8c97-0cbf54b84c92", "sighting_of_ref": "indicator--57073108-a668-4e67-972f-6c28f00d31b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6247f77e-bd83-4692-bf62-cc0818fa9c8f", "sighting_of_ref": "indicator--1dd0ac1a-0e80-4361-8ed1-ca855cc5c531", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dc9586-773a-485e-b0cd-717e50aecd90", "sighting_of_ref": "indicator--4c403ebe-f5b6-4ee5-8eb3-9a30422c4cf3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42983ee1-58e1-40f4-9c85-bc5e951e9b9f", "sighting_of_ref": "indicator--f1364cdc-b724-46cd-967c-ea41aaf3df32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139c05f0-9643-48da-b38f-e6003506687f", "sighting_of_ref": "indicator--efe388e6-168c-43da-a3cf-4fca023c1fb1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce8f5d2-9092-4ba6-9a55-9447a619057b", "sighting_of_ref": "indicator--106a5ff2-1585-443a-8665-41d9344ae6f4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98434bfd-3d70-4075-980d-67243f9cb4cd", "sighting_of_ref": "indicator--36eb4c49-1ec2-4ef2-8bae-48773898672e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8daabe-eca0-4114-b633-620f7be1af4c", "sighting_of_ref": "indicator--11d8e91c-a1d4-4f59-b774-e921f31691ac", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781b37cc-95c4-4d89-aea1-b4e3d746a6a9", "sighting_of_ref": "indicator--85ae06de-7a8a-4a98-99da-f1227f72cc22", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e7579c-fc8b-409a-898d-4e8ffa9365ad", "sighting_of_ref": "indicator--3780c049-0892-4266-9be8-a09b87358b57", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c39ed9-c548-4bf3-99fe-fbabce1a6afe", "sighting_of_ref": "indicator--ec5a1d14-a56f-4128-b561-d79dc61cc370", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61e2889-c048-4999-adae-378a2ee74cf1", "sighting_of_ref": "indicator--f61f7db5-e4a6-4ef3-98fd-cc0e1888ecc4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa97e993-ff98-4ff2-80bc-4eff92206181", "sighting_of_ref": "indicator--4cf66707-8673-4ae2-85aa-7d42faa93868", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df6922c-3d57-4f84-95c2-6a5a2e0779e2", "sighting_of_ref": "indicator--cfb9a2a2-83ff-478f-8a1a-46e52138b431", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc190ff-916e-4ed2-88a0-2b4175ebc644", "sighting_of_ref": "indicator--4be316c5-0db7-405f-acae-820c94a93166", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863254a2-9ae2-4962-8724-f51d59e4d32e", "sighting_of_ref": "indicator--a443caf0-fd41-4a55-bcb3-6f9b38eee58c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368116ae-4d9e-4c9a-ba60-4e8fa9a9f6d9", "sighting_of_ref": "indicator--fbb46297-9d40-47f3-8a26-3101d6c5c7a6", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7185f8e3-6c3f-4038-a212-2f5b2f6fe596", "sighting_of_ref": "indicator--9c45d422-bd3c-46a1-87d1-5e27a939a14a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21db82bc-5a21-4d58-bcb1-550f70ef1c8c", "sighting_of_ref": "indicator--5fc3c241-cc54-4455-99ab-50cd3343bdf2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c876c8-2070-4e97-8499-437862c3893b", "sighting_of_ref": "indicator--a3275c81-6848-4017-a61f-785ec96c0a6c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92ef68d-4d3f-4b90-903f-0c723bfd9f0a", "sighting_of_ref": "indicator--10fbe179-19c8-442e-9077-a5d0f356b6ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1917a79a-3d94-488f-b9da-27644ff297a6", "sighting_of_ref": "indicator--ba736815-0b41-42fd-8f91-791af758091b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3538aa6a-5992-47f6-a7d3-d27315840146", "sighting_of_ref": "indicator--aaa83152-a6b5-4754-be7c-1b9bc0fc213a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ab4143-3ace-4c5b-a406-82cf309ff468", "sighting_of_ref": "indicator--8cfcdbc9-15c5-4732-9e59-cdfbc38e57ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64c759a-003c-438a-94dd-787393767705", "sighting_of_ref": "indicator--37e65fcf-2266-4ce8-9a88-25971e9d4384", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d93603a-0af8-4f83-832e-49cd7665ffb6", "sighting_of_ref": "indicator--cbd401b0-abfd-4698-82ff-59a3368df414", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3eda515-76b5-4ccb-8612-2b73bf07f120", "sighting_of_ref": "indicator--cd7e9661-4ade-422a-8d81-869c9ef3cb1a", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b3d438-5592-446b-92a2-c8a5ee4a7231", "sighting_of_ref": "indicator--f168e5e5-60fb-4d66-bbf9-6566c4007c18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06765f9a-d000-4ed5-bc51-40cec194ac62", "sighting_of_ref": "indicator--f4914092-4d9a-4f74-a8f6-dbc523913c90", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce60ecb-1272-4c70-b067-8e0517c49386", "sighting_of_ref": "indicator--7e462e6f-7141-4aea-97f3-a9a019c1e8d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baddd52-352e-426d-8516-c76da64405c2", "sighting_of_ref": "indicator--10b19cd3-4b78-4abb-bcb4-f435392e408c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b954be4b-7155-48b6-b82e-bfbb5a2bfeea", "sighting_of_ref": "indicator--8394c729-64af-49fc-ada7-a873415659b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60afb147-243a-459d-b59a-92a2e1e4eb36", "sighting_of_ref": "indicator--8394c729-64af-49fc-ada7-a873415659b7", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eda5fdc-17eb-40eb-8e76-d07794113d0e", "sighting_of_ref": "indicator--8394c729-64af-49fc-ada7-a873415659b7", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791b3862-2454-4e06-8fe1-354b59f00f48", "sighting_of_ref": "indicator--c807ede7-7cb5-4c12-8e39-c1ffbda381da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcd09d5-3138-42bb-83ab-3f6f347f8394", "sighting_of_ref": "indicator--9b1d6d5d-ce8f-48a5-ab02-4daeffc13b36", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b186f5b4-815c-48de-87a1-97af032bb6a7", "sighting_of_ref": "indicator--94de47b3-5661-46cc-af46-03d867d43d39", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c6a0c9-31c4-437e-b55b-572a2e3612ab", "sighting_of_ref": "indicator--57f7c783-7a96-4e1e-854b-849a026da4f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17c1324-d54f-4c04-831f-1655f6fa0122", "sighting_of_ref": "indicator--57f7c783-7a96-4e1e-854b-849a026da4f0", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81a8538-f106-42af-b2dc-3ac5a5cd6a1b", "sighting_of_ref": "indicator--bd26bca9-3235-4229-bc8a-54fc47115c4b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0074b31-9283-4047-a6e0-53b83587f253", "sighting_of_ref": "indicator--3328279d-83b3-45d1-9d6d-34fe6668a949", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8377985f-377f-4c13-b632-39340c999b6a", "sighting_of_ref": "indicator--52c06e57-50cf-414c-b8de-fb0be1f901d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8010ff1d-2f35-4ab9-9ab1-42b7e9066349", "sighting_of_ref": "indicator--3dcfc0b5-925a-4a10-b34a-ee45d5d29fb3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664ae5c2-aaff-43db-9061-bcfa8b4c2d7b", "sighting_of_ref": "indicator--08cb9e39-a3f5-48ba-a085-007221572f1f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de203cab-3d13-4299-8ef9-ed12beb13113", "sighting_of_ref": "indicator--cc0c0a6b-a180-4aa2-80d1-e91e80a8c6d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae907ea9-25a3-4f1b-aaaa-8bc4d6939d2f", "sighting_of_ref": "indicator--0a28c3b0-6ab9-4d7d-bf15-2daeb03377ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be5e16d-b645-4bbd-94a4-7d696ec999f5", "sighting_of_ref": "indicator--0a28c3b0-6ab9-4d7d-bf15-2daeb03377ba", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82751669-402d-49c4-97e1-81034e375972", "sighting_of_ref": "indicator--0a28c3b0-6ab9-4d7d-bf15-2daeb03377ba", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa371c7-7119-4038-ba34-d9ad3284c744", "sighting_of_ref": "indicator--0ed838e5-6e4d-4254-aad4-0a85d75e5369", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f527ed5-0c15-4326-b79d-ae03674ddf3c", "sighting_of_ref": "indicator--0ed838e5-6e4d-4254-aad4-0a85d75e5369", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ab0f95-197d-4c43-b079-6f71abe163bc", "sighting_of_ref": "indicator--0ed838e5-6e4d-4254-aad4-0a85d75e5369", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73a6643-9c7b-415f-8e0b-263cfbd5ffd9", "sighting_of_ref": "indicator--156fad28-928c-4759-880b-5f3cc338b575", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d31633b-7056-4047-b842-b222ea423aab", "sighting_of_ref": "indicator--f57f71b0-7414-43fc-a5e3-bb97bb02761f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eac917d-9e66-485f-a62e-8d97ad4e54fa", "sighting_of_ref": "indicator--0ccbf74b-4254-4958-acee-0d703839f907", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ce0579-13de-44c8-b61b-61bf706b9cac", "sighting_of_ref": "indicator--944635dd-1841-48c3-8ab7-4edcc0c05405", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3768b646-9ccb-4618-87bc-af72d0d80c20", "sighting_of_ref": "indicator--82c15201-46c3-47c8-9136-5f21850e55c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796fcd47-9f78-443d-b1f5-7efae42edf07", "sighting_of_ref": "indicator--14b0b3a9-bb94-4381-8121-e6389d703197", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef479d4d-1eb9-4368-94e6-51f5364ff959", "sighting_of_ref": "indicator--1b4c7df4-5e9e-4a46-952f-b8dda27db4a9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b15b8a-5fe1-4393-b2e2-c5cbb5154f08", "sighting_of_ref": "indicator--b063f399-89f3-4911-8d59-b0e00c28cc57", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a607f54-8f41-4366-8769-26eb4297a252", "sighting_of_ref": "indicator--6502ca1b-0c15-4566-9711-f33db7896664", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20c370a-2ea8-4206-9e80-9ec84a439559", "sighting_of_ref": "indicator--b931a73b-8e9f-45d2-ad30-5aff5f28f739", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f92017-74a8-4e25-92bb-51d0ce08c798", "sighting_of_ref": "indicator--9b0f634b-48d6-4d6f-8347-547b1544c986", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242793c1-da62-4a13-9703-c9e79cae19a3", "sighting_of_ref": "indicator--dea06608-a9ed-4c23-bb07-438accd5f307", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18376844-ac79-452b-a648-38a1f1bcf397", "sighting_of_ref": "indicator--419159d6-822c-4fb0-bd43-494e103ad8d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7fb6b8-5692-4a38-9e5c-52f398a3d93d", "sighting_of_ref": "indicator--22f39fe7-de6e-464a-9387-65a6c326573f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf1321e-cafd-4f3a-8487-bc4dfbfc80cd", "sighting_of_ref": "indicator--c0495567-5405-4172-a1cb-e3af79788c01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c1f990-2ec6-4cf9-9ecd-9a1c8c486e6b", "sighting_of_ref": "indicator--2f28310b-5819-4c61-88e5-04a0d87c89fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcd6888-47c7-4e1e-8538-eb317ff1f599", "sighting_of_ref": "indicator--a6715c48-d7e0-4918-9dd2-f5cd4fb6081f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b0eff9-04ec-4d90-8096-4c4241405c4c", "sighting_of_ref": "indicator--8fb46ae3-e10b-41a8-8f0a-7c49f1e3fa20", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73057d7-08d1-49f9-bf8e-d85538ce36b9", "sighting_of_ref": "indicator--2194c4e1-7eba-4250-9c46-d392ac551e32", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bd64f1-330d-4b88-a9c6-276a7962514f", "sighting_of_ref": "indicator--736f69ec-78c4-44e1-910e-ad1def76ac0e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaea5fd7-219b-4270-b75f-b78d1099bfcd", "sighting_of_ref": "indicator--aeb793b6-d866-4bed-be95-5cdbca0a1f85", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9009582e-379e-4e16-a710-a5dc76736eb0", "sighting_of_ref": "indicator--98076ce8-fd79-43e1-ad20-d7208feae235", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1142132-780f-4a27-926d-e2eb9cb980d8", "sighting_of_ref": "indicator--c3649722-1f55-47ef-b807-fa3ea0a1c5f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0205b26e-d776-41a2-8bd1-cbe8749ef47c", "sighting_of_ref": "indicator--5265b609-aacb-406b-9f45-847cf442962b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffab233c-e582-42c7-a181-03ecaf9b23e7", "sighting_of_ref": "indicator--8fd203de-a8f1-4722-993d-03ba4ad465ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d253c865-7746-4116-94a0-b32c21448350", "sighting_of_ref": "indicator--24c7bc0d-00a8-4d84-bfb0-b91d91df51bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27be32dd-882c-4c89-9d9b-fcddb16da6d5", "sighting_of_ref": "indicator--1a4509ad-da4d-4ec2-a318-1fb6816a138b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a24bbf-06e6-47a9-be5b-e81acc2197e8", "sighting_of_ref": "indicator--db07c0a9-f71a-4264-9312-0992c8cce35c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de43550-1ad9-4d68-a14a-87080dfeba14", "sighting_of_ref": "indicator--50de4eb8-fa0f-44dd-b722-c2be4ea803cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dd4f4a-4d87-4478-8823-78d36d7ebe5c", "sighting_of_ref": "indicator--011eaf91-c20e-418b-8374-01a2cde831e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6513f577-b107-4ae6-92d0-3373c218972b", "sighting_of_ref": "indicator--18d0be57-24b6-4be9-84f5-1b20f2798c4d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c5e079-2cdf-4bcd-8083-4e591bd207db", "sighting_of_ref": "indicator--eda1d6ce-867b-4f03-8987-f1c8504ee81a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec2995f-2aeb-46a9-b1d5-7282b4084e3d", "sighting_of_ref": "indicator--92352c7f-aca7-43f9-9150-fd672c5d04f4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17add56-1e83-42f7-987b-310055e09484", "sighting_of_ref": "indicator--e3a8c5af-fc9f-4436-a8b6-8cd950e0d3a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50470191-66b2-41cf-a91f-05e0d0b3ffee", "sighting_of_ref": "indicator--9f821f33-8566-4055-a187-b868a00a75eb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17019eb9-0ba3-4302-9f4c-6524cce38497", "sighting_of_ref": "indicator--bc9d6154-39a6-4c38-b7a8-8e87fe958a54", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8065184d-032e-4580-8e98-485b2547b361", "sighting_of_ref": "indicator--c9b67e0f-4938-42c6-8acd-f5a5e3cf516e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684e43b3-bd6a-4f5f-ad1f-1e0d192c9640", "sighting_of_ref": "indicator--712e328b-41e9-42b0-b7ed-b5f46eb0f80c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c23cee-39e8-4858-a50b-b21ec4e14112", "sighting_of_ref": "indicator--44fc5459-cf64-4489-a721-0df3f1444263", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b55b94-3803-466e-ac06-cdb04f54205f", "sighting_of_ref": "indicator--c6c2860a-28e0-479d-8039-a0d04b115f68", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd870b24-c2cb-49f9-b701-83984ed111b8", "sighting_of_ref": "indicator--aca8bed8-45e1-42e7-82dd-a99a0355c3da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92690b3b-45d9-4319-9441-d2a094eed273", "sighting_of_ref": "indicator--cce00f38-52dd-427e-936d-0fd697362d67", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce73e0e-71e9-4ff3-8156-f3a2a365e877", "sighting_of_ref": "indicator--69ae5cf1-76b6-49db-85d3-3f5df87052f4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5363e29d-719a-4af5-9ed8-f90e5533c134", "sighting_of_ref": "indicator--26ad6cfd-2d80-4f54-bf30-31a37b8c95c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ccbd78-3035-4e3e-b7c7-81346bb9fdc5", "sighting_of_ref": "indicator--c94edbf0-10ab-469b-b8bd-5e3d96680fe2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446be905-40c8-4cd6-b67a-37095e9eedfd", "sighting_of_ref": "indicator--3849d4b3-c5cd-4315-b5cf-5a912dcedb8d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f805c0-6ae1-41f0-acdb-3ef60f1900da", "sighting_of_ref": "indicator--1213fe1f-1b0e-4d45-a051-6849e00bc969", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed8a91f-c675-43ee-952a-bdab9fef069f", "sighting_of_ref": "indicator--912b10bb-084c-4ef8-837a-a090cc91222b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb38bf66-2575-4349-af4c-6d4ab10c6e51", "sighting_of_ref": "indicator--3534912b-baa0-4462-878f-c85049f6b3ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc0066d-4ced-4a50-a44b-f380687aa8ed", "sighting_of_ref": "indicator--78cef515-9043-4976-b8e8-c88f85c56fa0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a964a2b-45ff-48a7-b752-22ae1b76ec5b", "sighting_of_ref": "indicator--eee5d4eb-b84e-4d89-99aa-52724af4be98", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600dbb96-dd38-4003-9e02-7e10fa25f401", "sighting_of_ref": "indicator--6d6c4b84-d2d3-434a-aa26-62fff8a1944b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4092a05b-c765-44b6-b744-437c8e2a9868", "sighting_of_ref": "indicator--ad91c927-b0cd-4eb9-befb-bd43293bf71d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9e2037-a20a-4b2e-9560-f21edea72fb0", "sighting_of_ref": "indicator--dcd6d7bb-a0db-49c7-a2eb-dda68f7ce9ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debb392e-178c-40a2-830a-4f6ccd208c16", "sighting_of_ref": "indicator--5c6c9075-18f2-49f1-9a64-4aa1283436cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f499c3-d9a8-406b-bac1-1c5a7898601a", "sighting_of_ref": "indicator--71d2bb06-1605-4e05-adac-5eeb392862d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd4e06a-46b2-448c-93da-1d6784f717f1", "sighting_of_ref": "indicator--9a5705ec-8744-4776-b95e-1b880a6a14f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60036255-1770-4c27-9019-67b3e68bd4d9", "sighting_of_ref": "indicator--5497f6a5-b684-410a-8d00-b0c3f8d04299", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd29db7-e7d9-4160-bae9-7e899f5fa2cc", "sighting_of_ref": "indicator--d676d6ab-c034-443c-b671-a5ee38fc023c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b91d6b3-55e3-48ab-ad8b-80fb3ccfcb61", "sighting_of_ref": "indicator--98f5ee69-4491-4892-ade4-7b168fe0a85e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859b8c6c-bc48-4f63-98c5-ce1f68cd5e3b", "sighting_of_ref": "indicator--ae53894f-466a-4825-8b18-33ca7cf42fd2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33209e1f-096f-4cce-a1d8-3693e9e7f728", "sighting_of_ref": "indicator--33e5ea55-4334-4b5f-bfea-a5b10bd85498", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84d6bc3-e0a2-4795-a041-7d1e1429e3b5", "sighting_of_ref": "indicator--b693bc2e-0e7e-4476-99da-ed50b060abd7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bde8a5-1843-4a14-aa4a-32858afa153f", "sighting_of_ref": "indicator--7a6bdb4a-d4d4-49bd-b28f-187901c5eca9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720895b3-d5b0-468f-93d0-310aafc8d9f1", "sighting_of_ref": "indicator--be73794e-5146-4036-845c-f2553a0e86a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b29b50-9c8b-4eb2-b18e-f8f34423773e", "sighting_of_ref": "indicator--bed5bf99-d9de-4a35-8f17-bfc8bf669cea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3782b1-e6ac-4609-9070-f21b030f2227", "sighting_of_ref": "indicator--70f3bb27-f0a3-4147-8e65-c3f987dd841e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4572861b-2e5a-47f0-b520-b0f164558b21", "sighting_of_ref": "indicator--1139dc95-4c59-437f-9f66-09ebf5f8e6cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7985eb16-3e7f-4d34-afe1-63264f77754f", "sighting_of_ref": "indicator--05e5b16b-858d-4dd2-918b-caa8122808d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c340848c-8b36-4451-9584-8f1724f50a36", "sighting_of_ref": "indicator--ea65b09e-066a-4c3e-837a-68c7bbba7dcf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783ee78f-6b0d-41b0-923f-b9f9092dbb24", "sighting_of_ref": "indicator--ca7b6cff-f854-4871-8bc5-f72f2c17ed15", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f26c7c-2dd3-4013-bb12-51259fd147c3", "sighting_of_ref": "indicator--2a7296af-3bae-4cfd-839c-ea9efdcafa29", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d015df-4288-4f06-9a7b-654422aec1ca", "sighting_of_ref": "indicator--9945acf4-a266-4ae1-ab5d-62bb56c43f6c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586fa793-6c17-4a51-b9b6-95066c39de95", "sighting_of_ref": "indicator--3a8f177f-a257-47d1-b0c1-068f35531295", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f3cd1b-e652-446a-b6d6-47c4aa6aaf22", "sighting_of_ref": "indicator--946a12b8-84bf-47ff-bdc5-e1c88cd0403c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5004c348-2a65-4891-8655-2994978108ed", "sighting_of_ref": "indicator--68dc44a6-50fd-4cfc-9049-1fe9833c031c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ed5d06-5e15-44be-ab37-500c30b42abd", "sighting_of_ref": "indicator--e0d9f5a8-8fde-4e13-925a-8ef4a1bc389d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0d3923-c180-4d98-b301-e535ca217c65", "sighting_of_ref": "indicator--d04de5dd-05c5-45f3-af1b-c2c1f5f3786b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c315fc9-a92f-4a23-ba16-c345e9db7271", "sighting_of_ref": "indicator--9258646c-5d14-4e06-bc2b-3ca8e1e6105a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eba72fe-f67c-4a78-a436-7bc6063864cf", "sighting_of_ref": "indicator--9303bcf7-0d2c-42b2-9d11-e719a0807626", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed39b7a4-26b6-4bb3-8929-24ce923ea4b8", "sighting_of_ref": "indicator--54c6c364-2575-4b5e-892d-c5a7db2a9616", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8761b1d1-78b3-4870-ae2a-7273352c43f2", "sighting_of_ref": "indicator--961674a6-994a-463c-8b6c-a8b769839901", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bcd0f4-4aef-48b5-a34d-a9e7e9e1aafb", "sighting_of_ref": "indicator--08d78893-f0f1-46cb-95ca-d2dc6d98cdd4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2ebbe3-79f5-485c-b7c0-326e5cb98743", "sighting_of_ref": "indicator--a4b79ddb-ba65-4c3d-abdc-32b5c8794c0e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c47d611-d3e7-43e5-bd90-cf6d9a1806ac", "sighting_of_ref": "indicator--a7c25465-00aa-44d3-9916-9d6c5d04b0c5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c195df-d228-403b-8bb5-bd4df6ac4bed", "sighting_of_ref": "indicator--f280d804-4343-405d-a194-d46827e7636a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de033e9-9257-48f4-af94-ead6fbaa34f1", "sighting_of_ref": "indicator--8a8abda7-73b0-4bd0-8bd9-eeed164b2ef8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2ad0ed-983e-456b-86fc-fbc2af864405", "sighting_of_ref": "indicator--0eb183ba-5359-4d34-9478-0ad91c40381e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e9c60b-de19-4b84-96cf-a6946014daa1", "sighting_of_ref": "indicator--baedd4fc-a1ec-4f66-876e-6bf1544f3ece", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ec155a-e3df-4b97-b683-714990214e0a", "sighting_of_ref": "indicator--baedd4fc-a1ec-4f66-876e-6bf1544f3ece", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d53669-2812-42f1-9ed4-e1204f62665a", "sighting_of_ref": "indicator--baedd4fc-a1ec-4f66-876e-6bf1544f3ece", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40344d46-b6dd-44d5-8ed4-1e9c4f5f5b29", "sighting_of_ref": "indicator--480ed67e-9526-4a1c-888a-3e20699dfdf4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747fcfab-42fa-4ae2-96af-4b50c85967b1", "sighting_of_ref": "indicator--480ed67e-9526-4a1c-888a-3e20699dfdf4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22920bc7-5cac-473d-a913-1774c91ec682", "sighting_of_ref": "indicator--480ed67e-9526-4a1c-888a-3e20699dfdf4", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b0c24a-c0c8-4fb7-aa31-879e4aa9d20c", "sighting_of_ref": "indicator--534a25f9-8d90-490b-b652-46047854aaba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee64797-d710-4154-a993-1d938b40c07f", "sighting_of_ref": "indicator--534a25f9-8d90-490b-b652-46047854aaba", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1a2f06-a3d2-44a4-bc6f-67d0577a9332", "sighting_of_ref": "indicator--534a25f9-8d90-490b-b652-46047854aaba", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5428b19c-8cac-4837-9762-6dd131b7bee5", "sighting_of_ref": "indicator--ddf24d72-f8f5-4263-8389-5bc6b8e9cf75", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3cddb5-0d14-4baa-97e9-2eb84cd4f197", "sighting_of_ref": "indicator--ddf24d72-f8f5-4263-8389-5bc6b8e9cf75", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb045617-bd62-48ae-8904-f0bee3596775", "sighting_of_ref": "indicator--ddf24d72-f8f5-4263-8389-5bc6b8e9cf75", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c47a8bd-e809-4a77-b964-3c575792d908", "sighting_of_ref": "indicator--e7c1c679-3ec4-4e92-bd9a-5971ca4b9d43", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a812df6-9624-4c57-80e3-b5115f67dcba", "sighting_of_ref": "indicator--5bb07271-f035-4d4c-b0eb-332dce58e801", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2caeb4-fd4d-4ce3-b5db-05091f365fe4", "sighting_of_ref": "indicator--5bb07271-f035-4d4c-b0eb-332dce58e801", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7b158c-feef-4aca-b991-b9b7d0e66fb6", "sighting_of_ref": "indicator--5bb07271-f035-4d4c-b0eb-332dce58e801", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cf7339-08ac-4fd6-a740-c19ab4917d47", "sighting_of_ref": "indicator--e5703d50-9162-4d08-8c4f-0a96c4a2bad0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ffcba5-ca77-42a3-b78b-d5e9d6a901d1", "sighting_of_ref": "indicator--e5703d50-9162-4d08-8c4f-0a96c4a2bad0", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a071ae03-7f60-4457-ab2e-7e87af061653", "sighting_of_ref": "indicator--e5703d50-9162-4d08-8c4f-0a96c4a2bad0", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95952153-d9d5-47d1-882e-89c5b06bebe9", "sighting_of_ref": "indicator--ca61463b-13e3-4144-8560-88dcbcbae061", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d88540-d37c-4230-817e-fe4f14503e63", "sighting_of_ref": "indicator--ca61463b-13e3-4144-8560-88dcbcbae061", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcbc4fe-13d7-47bd-bbbe-cb384c060166", "sighting_of_ref": "indicator--ca61463b-13e3-4144-8560-88dcbcbae061", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1017216-583f-4b4d-99cc-99ec693a3b08", "sighting_of_ref": "indicator--edb8f14b-468c-43b3-bbac-1e348afee6c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d1da10-13f3-4d12-ad0a-c931dce6cd87", "sighting_of_ref": "indicator--edb8f14b-468c-43b3-bbac-1e348afee6c2", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d29c6df-e961-4f7f-aaef-154701bc753e", "sighting_of_ref": "indicator--edb8f14b-468c-43b3-bbac-1e348afee6c2", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06d6bfa-ba4a-4066-8183-71db31cd6a15", "sighting_of_ref": "indicator--de235216-ace1-482f-a9be-4d79c25c2f69", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f271ad-1078-40ec-ac40-14cd8bf28533", "sighting_of_ref": "indicator--de235216-ace1-482f-a9be-4d79c25c2f69", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c48d4e0-03c4-4e19-b946-ff9d567ae2fa", "sighting_of_ref": "indicator--de235216-ace1-482f-a9be-4d79c25c2f69", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a14c6a-7235-4fc5-adae-4c643edb012e", "sighting_of_ref": "indicator--4c60ec84-d111-4b8d-93b7-ac17de4df0cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0c0a84-1cc9-48e5-accd-1fa65e832c86", "sighting_of_ref": "indicator--4c60ec84-d111-4b8d-93b7-ac17de4df0cd", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1922a9-b7be-4f06-a529-44a5c238ee40", "sighting_of_ref": "indicator--4c60ec84-d111-4b8d-93b7-ac17de4df0cd", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854ea267-66e1-4d83-8451-3ed8eb0fac0e", "sighting_of_ref": "indicator--276fd00c-fc51-49ec-a3b5-125a4bd0bfae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfd8978-854f-46b1-bfd8-b31886d9b822", "sighting_of_ref": "indicator--276fd00c-fc51-49ec-a3b5-125a4bd0bfae", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96823db-0e63-4df9-a95a-f004b3bb9d19", "sighting_of_ref": "indicator--276fd00c-fc51-49ec-a3b5-125a4bd0bfae", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c80575-ecdc-48b4-a9ea-a00310df0565", "sighting_of_ref": "indicator--397d6590-457e-4bb2-bcf0-3c8a8664589c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a4b9cd-0a79-4d29-a2b6-6c2b812d4a40", "sighting_of_ref": "indicator--397d6590-457e-4bb2-bcf0-3c8a8664589c", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2edf541-4977-46e8-ace4-477c11a0ac92", "sighting_of_ref": "indicator--397d6590-457e-4bb2-bcf0-3c8a8664589c", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc264f0f-db8b-4c81-8096-b0b554b31d35", "sighting_of_ref": "indicator--624ffaa1-e8a0-4ab2-ae99-e9b12adbede3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c93001-9449-422f-ad51-acef2d0c4d59", "sighting_of_ref": "indicator--c7c64d5b-9051-4cfb-9799-d9064f27499e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b6f91d-dd5e-4a90-9e9e-3b339a0cd48c", "sighting_of_ref": "indicator--c53a6621-99b1-413f-9fe2-163592f08b38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446a3636-a510-4a35-9b2e-97259473a3f1", "sighting_of_ref": "indicator--9ad23b7e-4c54-466a-89fe-a9fa341e837e", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6d42a6-53d0-4e5e-94ff-68535c7e0c56", "sighting_of_ref": "indicator--0ce360dd-866b-4a0b-b36d-69cad85e59f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416a6825-adf4-458a-b1a3-7195078ff5b7", "sighting_of_ref": "indicator--e2716d43-65ca-4940-bf00-7ba668892caf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf6c2a4-74ee-48ce-bb06-eb7ed8187a36", "sighting_of_ref": "indicator--33f8a139-b741-4b6a-99e3-1ad65e0ff499", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33214775-8446-4afd-9424-a6223a7e58dd", "sighting_of_ref": "indicator--a8d9fd96-809d-45ef-907f-5dad856edfc7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fda039-8888-4526-906f-81ef32ea945b", "sighting_of_ref": "indicator--fbf2b803-9bf2-4085-b940-5a40fd6f4655", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7952ac6c-b3d0-473f-909e-da3c5eab8d63", "sighting_of_ref": "indicator--10a4e07a-e930-4408-bca3-b2c2b1fc6f9e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75af0f98-f48a-4c11-97a4-ed80a111d54b", "sighting_of_ref": "indicator--9c8e5bf2-99e4-40c9-9c83-181533e5d527", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e857bd-9e93-4e1e-b4d2-f3559f035a32", "sighting_of_ref": "indicator--64bce589-7406-46db-aafc-f2933ffabb00", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970f39ed-7501-491b-b50f-36b488adac8c", "sighting_of_ref": "indicator--180853ae-98b3-40d0-8540-c7096e59a58e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e81fc7a-afc6-4c60-b6a8-36bb27d3a273", "sighting_of_ref": "indicator--5308dd47-878f-406c-ab7d-b0dc70fbdac5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e402a20-b57c-46e6-8e79-fd6006284e56", "sighting_of_ref": "indicator--e04780fe-b1cd-41f9-b828-cafde443704f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8037046a-2c6d-4c55-a8c2-7916951a276f", "sighting_of_ref": "indicator--e81ddead-3095-42c4-9550-fa3627549a2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2865e1eb-2382-489a-a7fe-43ca7e1b1a3a", "sighting_of_ref": "indicator--9fb7f124-e401-4078-8ed7-ed0865d80885", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a202c24-e6fa-4ddb-a3e3-3baf1b13c728", "sighting_of_ref": "indicator--92c5fa91-a5df-4f47-a569-968460d8df5f", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d43eb9-d69d-4fb1-9357-4123773883d4", "sighting_of_ref": "indicator--56900058-fe1e-4c54-82b7-13d1daf8c42c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa281922-5d3f-434a-9928-5970385aa0c6", "sighting_of_ref": "indicator--fc5189b4-0e89-40d6-9429-1f3196489913", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8f9adb-5cd0-4e4c-a43a-65c4c3adf6b9", "sighting_of_ref": "indicator--683f5fe1-1763-4103-bbad-3396d2d2ab6e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ff2a66-a402-4e2f-875e-cd8341451185", "sighting_of_ref": "indicator--5a9dfa80-8f95-49dc-8983-07eee72cb2a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654154e1-2d42-428c-864c-1c554f14c77e", "sighting_of_ref": "indicator--fc82790a-1fda-4c4e-ad0e-eb7c4f8a06e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110d3089-e1a2-4dbf-acec-0e26a5d7538c", "sighting_of_ref": "indicator--0bb16107-bf97-47e6-8495-cd8044571209", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd4ecb9-905a-4a64-8e41-0bb952d0e0a1", "sighting_of_ref": "indicator--fc6d842d-875f-42aa-beda-76b3883fc617", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f97b863-78a0-4257-94b4-cedbaac1267f", "sighting_of_ref": "indicator--dc70e6ae-dcb3-40a0-99a2-10b998378f6a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969cb3d1-8af6-4ccf-b79c-8121bddd5c13", "sighting_of_ref": "indicator--be276e75-4d4f-48c9-b44b-9680b55318fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada38a54-bef0-4291-bc9e-9a98829c16ec", "sighting_of_ref": "indicator--f7e18313-aeb1-4950-84f0-9cf5a40948bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee75b1f-f8f3-40de-901d-a40d94d2796c", "sighting_of_ref": "indicator--3e22274c-f813-47af-a0db-aebfd0198452", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4860c5f-f9b8-474b-8f2d-68d8bd9df812", "sighting_of_ref": "indicator--e6bb146f-73f5-4cd8-b9cc-891643b5e67e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd9b401-4e68-48bf-909f-547d4f7d9d3f", "sighting_of_ref": "indicator--27f44cdf-555c-46d1-b012-6dcccf73adad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7cf5b4-afd0-4e05-ba58-8d6eeb836658", "sighting_of_ref": "indicator--1d40c609-e937-49ea-afea-b4d89c600ab7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f57fc52-138c-4283-9ddd-b24a01c7aad4", "sighting_of_ref": "indicator--a79b677a-af68-4c08-866d-033a89742bfa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dc9c02-f08c-4847-933e-bd7d77244798", "sighting_of_ref": "indicator--1bb60192-7dcb-4138-ad57-24aed57eccb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e19c817-cf92-4a85-903c-7e315c70c5b3", "sighting_of_ref": "indicator--0cf95698-b880-4201-9728-5394f1f993d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53c2738-339c-4aff-9d53-c016bdaaabcb", "sighting_of_ref": "indicator--9fd0f15e-f540-4296-89ed-edc086b15c98", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67a789e-66c0-4ff5-8a3e-6723840ce5d3", "sighting_of_ref": "indicator--714862d7-03aa-45e2-8bca-b69e5d3a9c19", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b39977f-2263-44e7-95f6-701866bfccc4", "sighting_of_ref": "indicator--700b8906-97bd-4b0c-a53f-3e0ded209c9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7272bee6-71c7-44bc-90f3-242c9df72744", "sighting_of_ref": "indicator--62de84d9-8318-4064-9c0b-4378ac914ede", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d27b6c0-197e-4a72-8410-7815faaaaba4", "sighting_of_ref": "indicator--6d8dbe79-5623-42f8-8204-e1210d6ac04a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2609ca1d-2acd-4fe5-b086-55f2b5d6766f", "sighting_of_ref": "indicator--22de868b-0b2a-432a-90d3-ac7c3ec142ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e10f45e-5828-48e4-a7d9-e92bfe481261", "sighting_of_ref": "indicator--eccb093e-017c-4438-99b4-a4ddab069666", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cc6753-bb97-44a6-87e7-ac4a1141eefa", "sighting_of_ref": "indicator--db1560b9-e6ed-4353-9c77-75ed25122007", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd74633-1c7d-405e-8889-9bff02760c1f", "sighting_of_ref": "indicator--da0eb892-25a6-4ba8-b98b-41eb6a453772", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac24662-44bd-4fe5-b91d-494db1cd7584", "sighting_of_ref": "indicator--2b2af930-450c-4e5a-a666-5241b1d0f491", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe529e5-d042-48b6-9006-bbf35ea29480", "sighting_of_ref": "indicator--3f3e180d-9193-46fd-9290-471a3764b001", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97033fa3-b30c-4c84-80c9-a6c80d2cfb8b", "sighting_of_ref": "indicator--86ea1d3a-ec32-4193-8fa2-ff7774fc6275", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce66413-ac76-4273-a31a-1ff6eb097414", "sighting_of_ref": "indicator--4eefbb58-21ce-4ae9-8964-1f7185b6e030", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da181371-81c3-42cc-aafe-3cbbc968c693", "sighting_of_ref": "indicator--ba4163cb-1169-4b7b-a527-1bc5d92fd065", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a54efa-7b10-4079-9833-31df2ee2be92", "sighting_of_ref": "indicator--784a7873-5290-4731-9466-e3f16459509b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d86d3f-88df-47d1-b0c2-5e28d12f2c91", "sighting_of_ref": "indicator--d7f3e86b-6afc-42ac-bf34-5110f0f1169d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7388865-d7d6-410b-af07-a4ce8b663387", "sighting_of_ref": "indicator--4f23a3b9-f95b-40dd-974d-0d79fb7e8eef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37f0418-5727-49da-b86d-909d3139b04e", "sighting_of_ref": "indicator--8f67d485-86a5-486a-a4ca-f18ee6049630", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3438f6c-fe3c-40fe-a1f9-e37bb97f50fa", "sighting_of_ref": "indicator--061934b5-3bba-4c1c-8aaa-279a0b74e757", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353e382c-5a76-4752-ab5e-e578fc2ad9f4", "sighting_of_ref": "indicator--04afa5d2-1f71-4a1c-a8f7-db66812032a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f047cd85-bc38-49c6-84d4-b1b01c044642", "sighting_of_ref": "indicator--8eb2c0c0-2efa-43c9-af46-668fa711d338", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed0ce6d-faf2-4ba3-9d5c-7341d495e06d", "sighting_of_ref": "indicator--401be111-c7a0-46c3-b231-4c3039f30afc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffb0ebb-cd8f-43d3-9bed-ee4316496b5a", "sighting_of_ref": "indicator--6ae44da2-28e4-4b59-a809-fe6d9b0a3a33", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3eec74-3b67-4303-8539-bcd56c340023", "sighting_of_ref": "indicator--14e135e9-e1c9-47fe-9823-efec4db89ada", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68773ec-358d-4bec-a3e9-beb6e733e7c1", "sighting_of_ref": "indicator--0290c0eb-0209-41bb-a55a-c208341395a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9204be-651d-4bb0-9e87-4fb075c578b9", "sighting_of_ref": "indicator--85a222d5-9fd7-4b98-8803-9249eabb2fc5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757c700d-da4d-4ec2-87ee-f19522a7be3d", "sighting_of_ref": "indicator--311f3f3f-c08e-48bc-9873-2078d70e0bee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8087de2-f160-4ce8-9b61-ca00aff173c7", "sighting_of_ref": "indicator--96e551f2-a995-4e39-af0c-6e456384c6e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df538b3e-ff4a-4f9c-aec0-274dc02b5664", "sighting_of_ref": "indicator--78e7a437-8b39-4065-a5b9-65aa75c09670", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27a596b-6a14-4e5f-9760-3571741c7013", "sighting_of_ref": "indicator--64f01390-38d6-498d-908e-72f2977658a9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb6f4e6-4452-4071-9766-d9671d1a5d52", "sighting_of_ref": "indicator--02b54eb0-afb1-45dd-be8a-ddd1b2232b29", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28107d66-b48a-457a-9e6d-d1be0016e476", "sighting_of_ref": "indicator--f6464c04-61df-4ff0-a45f-c2dc41aaa66a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062dd77d-60aa-431b-b1f8-d977cee2eb02", "sighting_of_ref": "indicator--0dcdc041-b271-44ae-9855-ba9172a57ca8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32def8d1-f43b-43c9-aef8-e84eafcb9b11", "sighting_of_ref": "indicator--1a71277c-7b17-4c63-b312-8924b7cef5f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5fcf03-aa5a-448d-9e33-a7dbdd914ecb", "sighting_of_ref": "indicator--b07ddd48-af65-4c53-a011-101f0e89f39c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb338db-ced5-4fd0-884f-bf01c2289a32", "sighting_of_ref": "indicator--c3e21e1b-a1e7-45c6-98df-f9aa8611386a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be353320-3fd1-4133-ab2d-1de4404e6edb", "sighting_of_ref": "indicator--d4355b75-3a62-4a56-8595-5a026096c949", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798a3b49-e75d-470d-9fcd-aeecc6a5483c", "sighting_of_ref": "indicator--0c2ed9d3-6a55-49e3-994d-ca2921191af4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a906f72-990a-4cbe-8048-db3e5ec43bea", "sighting_of_ref": "indicator--88bec482-0f27-40d8-9a56-df9aabe5ce81", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6078f420-2d7b-4632-83ae-41363ee4c2c7", "sighting_of_ref": "indicator--783d9cb5-783d-4752-927d-3de39d39cc59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8315bb98-98b3-4777-82e7-177e445736d8", "sighting_of_ref": "indicator--56dc8ba5-40d7-44e9-b907-b543c01837e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764cec7b-49d7-4ac5-bdb5-8873577b8a21", "sighting_of_ref": "indicator--678fd1a6-98f0-47bc-a7df-b2742fecbcda", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7a6405-2ad8-4636-b10f-5b0d5a822f26", "sighting_of_ref": "indicator--d08744a3-d752-43ed-b440-b3944071d639", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1224d03a-f185-4fac-97f5-e4ce341fc52c", "sighting_of_ref": "indicator--ebb6f34b-4061-41e6-8035-caf94bdee718", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1716a446-1aa1-4360-8dfd-249a1ecde8b4", "sighting_of_ref": "indicator--446b03ec-3db6-4a2e-8397-ae71b8c58e1f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100b8662-8c5c-466a-a580-a1eded10177d", "sighting_of_ref": "indicator--12aa68c0-e7a4-4459-80c0-e731f1863a94", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db13286e-1d4c-4a5a-8871-05b649e9adca", "sighting_of_ref": "indicator--11ff3c02-86fe-4eac-a8a7-0cf5d61e8916", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ee86c7-b308-4602-9529-d3e28fb5bb83", "sighting_of_ref": "indicator--38b81bb4-0718-4b7a-8b4f-e6ac0c4fff6f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc35d24-dcbd-405d-b4cf-a48c10d9159e", "sighting_of_ref": "indicator--3a60626f-0e02-4650-bd4b-6e20ec30c007", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb68cc7-9d17-40fc-9dd2-e5d87eb5f50a", "sighting_of_ref": "indicator--bc5bc2cd-15b8-4eac-844c-84f1af29b552", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9a9c6c-d870-4b42-9bc4-949722f38728", "sighting_of_ref": "indicator--135450cf-9019-4acd-991f-68e4ac1f7382", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17a6134-cd01-4cf4-9cd0-73bae196e984", "sighting_of_ref": "indicator--53fa935d-e04b-488f-bb2b-bd06f0cf8218", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1346c88-5728-44d4-9cc6-c14316689271", "sighting_of_ref": "indicator--02c6e49b-868b-4a1a-82ee-a03e9a000aa0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f00602-d8d4-4599-8f89-34db2684ef8b", "sighting_of_ref": "indicator--df0248ee-62f0-44cc-840d-991cd73f6a48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fab5b75-f81b-4336-9e9a-0eadbbba4dbf", "sighting_of_ref": "indicator--ddc9168b-9a79-4d12-87b4-dff9a38692bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee56c24-6ff7-4279-9b16-23da8c1c8298", "sighting_of_ref": "indicator--e2b6e070-4e51-4f12-bce4-5f701d201cad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b86d19-e673-4108-87eb-785688f63b1b", "sighting_of_ref": "indicator--19e0a6b4-2bab-4f23-8684-c13721cfe36a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e92354e-10ba-45fc-8346-91ec7c9e241e", "sighting_of_ref": "indicator--772b1219-fb29-458a-8e10-c8ffc542e8dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff096b6-4d7c-4e81-a165-75582afbb617", "sighting_of_ref": "indicator--f40e0a77-a56e-4ee3-8829-c989e5062db5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403f1ac2-baa3-4142-9bf2-f543b53202e9", "sighting_of_ref": "indicator--4937d5d9-1292-458b-8227-413d2f2d95d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0803a3a9-1738-4b73-87b3-8cf25a0aba8c", "sighting_of_ref": "indicator--3f2d6543-4013-42dd-8bad-ef1bb3de42da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7965321e-6894-40a7-b528-1e8b7bc9b5f1", "sighting_of_ref": "indicator--4206d8a2-d24b-4e7f-9635-865f27d36994", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a56e69-fe9a-4d77-a3a3-8e3440137e39", "sighting_of_ref": "indicator--f03c2822-f2ae-4611-91e2-2c52c3bf1da8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09bf4b3-7a82-4272-9a00-1c7e48e6267c", "sighting_of_ref": "indicator--280f4e0e-467e-4251-82d0-89110985c508", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c610b04-063d-4103-a217-5d93f8e4d24f", "sighting_of_ref": "indicator--b3687031-ae92-402b-9d68-1d69dbac0cb6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb11096-89e1-4812-a319-ff3563ae7e3b", "sighting_of_ref": "indicator--a6e6a4b2-2fcb-4372-a94e-47cdb4d8ed54", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1fb8d6-934f-4241-b8a3-6859bc524d90", "sighting_of_ref": "indicator--459c9496-c9c2-4619-8440-1083eb909967", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccaf349-cc86-45cd-8f5f-18f612555de8", "sighting_of_ref": "indicator--e8ff867e-09ba-48de-b50e-0b98c2220f86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbd5184-b412-40a0-880f-fa485de2f0d4", "sighting_of_ref": "indicator--74add943-dbe5-426c-ab1d-789d5738614e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993aae7e-7d69-45c7-b315-b0f81152e2ef", "sighting_of_ref": "indicator--0e36f2a9-2dae-4bab-a0a3-fe02edc57f16", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275cd9d4-abb7-4be6-a755-d964dd74480d", "sighting_of_ref": "indicator--c42ba9c1-5a28-452c-8b0c-eb6adfdbd1f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba8eebe-4415-4095-9fb8-60b139db3133", "sighting_of_ref": "indicator--1b883921-d2bb-4a30-a3e7-4bade2522577", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab28f9c2-955d-43d6-acc4-fe0ca7f2d045", "sighting_of_ref": "indicator--51caec79-83a0-41bb-953c-e25797de009d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1c8800-71d6-456e-beaa-bc9f11e9686a", "sighting_of_ref": "indicator--68518494-ca9d-4b07-9d7c-2e49c263ee50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6c71bf-bcd4-4d86-92c0-f3ddf874e614", "sighting_of_ref": "indicator--be89650c-7541-45a2-b1b9-50dde1390f5d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca575e3-59be-429e-a6e0-e5d28557f6e7", "sighting_of_ref": "indicator--dd4e066a-2d09-4f80-8db9-0799adb01181", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed47e208-a952-4c60-b779-bab331e6b91d", "sighting_of_ref": "indicator--fd20783f-047b-4df7-90c8-8912727fcb11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1b1f3a-330d-450c-90f2-a74324600d9e", "sighting_of_ref": "indicator--0d84c91d-12c5-465f-83cc-13fe2c431ca2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693f7b4d-3069-46cd-bb58-58738bdce8be", "sighting_of_ref": "indicator--7ecbddd9-1644-429e-8138-9d8538c5201b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5484c624-d4d5-49fb-a21f-5e027bffdfd3", "sighting_of_ref": "indicator--207e9b8d-e370-4b4a-9af8-54eaf7c859e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e075ca-6341-4586-a689-d435d7882dd3", "sighting_of_ref": "indicator--8e5f0fbe-1c2f-440b-990e-460bd438a443", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129d73b0-99d0-4647-a0b3-8b8f2b82f049", "sighting_of_ref": "indicator--6eadc4bf-8885-44af-99b4-310186687694", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c63767-161e-49e5-97a7-90533c460c14", "sighting_of_ref": "indicator--1c4644e2-e6ff-4dfd-91bb-225dfe2b7999", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f39e17-3c85-4bea-99be-227b1eb4e93f", "sighting_of_ref": "indicator--5c131b40-4cd2-49fa-b882-d38a255427a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228c7b48-a2bd-4636-8028-2ce76606b695", "sighting_of_ref": "indicator--85449b0b-2700-4816-a54d-a484223f7adf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99be140c-6352-40ae-bf88-57065ca5f280", "sighting_of_ref": "indicator--f1e4d5af-74ef-4d63-8c5d-5c63d5a8e070", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69e0895-eedc-45a4-aed5-dfb63ad52302", "sighting_of_ref": "indicator--61c79e32-0747-4654-9747-fcd9dae424c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c473be-68d9-4ff2-bc3f-3a5400c9b1cd", "sighting_of_ref": "indicator--3b99afda-68d7-4e4e-b9ec-b2b17f827744", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062f8d49-82c3-40a5-9a9f-651af14190dd", "sighting_of_ref": "indicator--a5bbd4d9-20e3-4f37-9337-ded2b8d50db1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea495145-2555-4c8f-bce9-427429c446e1", "sighting_of_ref": "indicator--d40ff18d-8664-4d92-a1e2-f6792dfd50d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ca9796-0bc7-4349-b273-5130c9bc1f94", "sighting_of_ref": "indicator--01e53643-13fc-4a94-b582-7930703851ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760f4cae-b5f2-4436-9423-fa4a9a4ddd8f", "sighting_of_ref": "indicator--fc0592dd-5e22-4bb4-b9c2-f5f2922d4b72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0011b3a-3507-4e07-9670-28418f44c6a4", "sighting_of_ref": "indicator--9a5aabc9-dfb6-4432-a01d-b909ee6f2c1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040d8bf1-bc9e-4165-a4ff-7fec6fd370b9", "sighting_of_ref": "indicator--ee052a09-f41b-425e-91c5-cf2725811c2d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3efe97-2460-44ff-ab5e-4ab76bdb3511", "sighting_of_ref": "indicator--e0ba09b1-925d-4897-b455-15b1237978f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceee214e-a44b-4e3a-a45f-29250d28d9d0", "sighting_of_ref": "indicator--6bf6ec4c-cd1a-4385-82a0-c531b15e69ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20cfa04-5f34-4da0-9ed2-00b4c78f5abe", "sighting_of_ref": "indicator--a8f809ff-f760-40e6-bfd3-2adbfb530d8e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f29fe0-f286-4213-8745-679b26ec5316", "sighting_of_ref": "indicator--efcd20e4-9382-4834-a522-33c1c7dfce73", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f65f064-f92a-4752-90ba-d8ee25a4bac7", "sighting_of_ref": "indicator--48e2466c-8825-4c35-94fd-1fabf2c36be7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4a5fb1-ad6d-4f20-b101-8492356c6997", "sighting_of_ref": "indicator--c783cdd5-8968-42ee-9353-5e2ff0497511", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb5b491-3b7e-4841-87a5-3b19c161ee20", "sighting_of_ref": "indicator--b4ae9499-3c82-4fa9-b2d2-1299f9e93860", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff1a118-f355-4f35-9166-333bc01fbeb7", "sighting_of_ref": "indicator--ab0f2a32-66b4-4dbc-a945-4a2a4590bd4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1222af-19f6-4188-9f16-051634fe1873", "sighting_of_ref": "indicator--f0874573-480a-41f2-974f-b880185353bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c37cc3-4685-493f-8a8b-c875da5e0c4f", "sighting_of_ref": "indicator--759c3aa7-a256-4dde-a61d-52fd9106f173", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac0b092-c260-4068-ab00-485064d85d9d", "sighting_of_ref": "indicator--15726adb-dc9b-4064-9a43-1f9a5d80ffcc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15d6a39-a411-496d-8604-d716bbb90cd0", "sighting_of_ref": "indicator--d5904d55-821f-4dde-8bae-5129073effa2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3fb1f3-12d2-4aeb-8e9d-baf62edfaee3", "sighting_of_ref": "indicator--1efa6d1e-4938-4c23-85ca-fc954e4dc328", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa353106-c849-4e3c-8f1c-f6589c17501c", "sighting_of_ref": "indicator--11105907-aafd-40e7-8eb0-d3de8c756a07", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb38b69-bdd2-4ae3-a0b2-d268efc9c1ab", "sighting_of_ref": "indicator--3952e177-5368-4fdc-a5f5-d777dd50d64d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b741df67-a63a-4456-8030-088469e1694f", "sighting_of_ref": "indicator--6dbd06b9-654e-4593-81f4-a9724ac0272c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3de03e-1faf-442b-ad42-4771b5092922", "sighting_of_ref": "indicator--b808431a-12c0-4a70-a975-c51ff5454de4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893eaab2-37ef-47e0-a2be-6eef0b340a2c", "sighting_of_ref": "indicator--da50db6a-7160-4a74-a1b7-6ed6abbe3283", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b81674-977d-4999-a471-2953ddebd6fd", "sighting_of_ref": "indicator--3d30bbf9-6677-4775-b5fd-6defa771bd39", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7991f349-e7d0-4a99-8931-9e81654a7278", "sighting_of_ref": "indicator--9ef89e08-b2bf-4554-8bee-c0441adb5789", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a94bab2-faf2-4cd0-a00a-4953cb9b4bd5", "sighting_of_ref": "indicator--4366d8ff-747b-4930-875b-56a00b33ea5f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9d682b-75c7-486c-8263-87c1dbfdf835", "sighting_of_ref": "indicator--0eccbbf0-485e-4baa-872c-123932354a5d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b3cb3d-91c7-4a56-81b0-d3594a382795", "sighting_of_ref": "indicator--a66e63fa-3d4f-48b3-87c1-744820c4ad18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0014b7aa-8b4d-415c-8912-efe53db6319c", "sighting_of_ref": "indicator--fe868348-2abb-4b41-8a20-29e50568f01a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bc3d7d-700d-4503-953e-ccd7e1d27a01", "sighting_of_ref": "indicator--cc00bf49-2d7d-440c-9516-21c5dd13c639", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb56c92-509a-4a03-9d3d-143580e7c6be", "sighting_of_ref": "indicator--c18f15f2-a2d2-408b-a445-8bdb644bab7d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901cfd91-0349-4e21-af4c-f3d1f67298a8", "sighting_of_ref": "indicator--ceb6cb71-39b8-4514-b76e-3fdfc31f46ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8a0a91-a531-43dc-a3b2-16e3a00a4968", "sighting_of_ref": "indicator--ac0e4a54-9c45-439f-a029-e9ad61b65934", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cb318d-4fd5-4120-926d-8f8203045c9c", "sighting_of_ref": "indicator--cb215633-4303-4e9c-a725-a8d072966a64", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18894935-c322-4b08-960d-7dcac1903dcb", "sighting_of_ref": "indicator--30c647e9-71c5-4599-8a7c-42d16d8993ff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed7f6d9-765c-4dac-a938-1a5fadd46799", "sighting_of_ref": "indicator--4b015ad8-5127-4a7a-a9b4-198899fdfe63", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69583c2e-520e-4500-bcf3-84b341ba6058", "sighting_of_ref": "indicator--900ce5a7-6713-4b94-abbc-81a75e28fc4d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1121a7b6-6e20-4515-920e-9e6ca0dbdab0", "sighting_of_ref": "indicator--802060fa-49e7-48e6-8fab-2077c911dc82", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c10c4f3-de40-4f1b-8ae6-0ce10ce35f18", "sighting_of_ref": "indicator--46d820d1-aa27-4c84-9596-9ebb3fc70efb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d610e5-8b9a-4984-b60b-e3b4dfe70e52", "sighting_of_ref": "indicator--75fa0b39-3c8a-463a-b923-b27cc29002bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f259b9-d32e-4afc-8efa-dcb176422dd2", "sighting_of_ref": "indicator--fdec73f8-8ff8-4392-b596-78be2117e56f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01da38c-7ca6-48c4-8499-429a7c11d0fb", "sighting_of_ref": "indicator--26bc6308-4b30-4d12-81d9-ac9b9c621769", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfde0190-65c0-4702-b0d0-080142070db9", "sighting_of_ref": "indicator--70403c6f-a4d3-447b-a0b2-895282e2866b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3d534a-9b19-435c-8c94-6237a85e84f1", "sighting_of_ref": "indicator--5526dfa0-9dfb-445b-ac98-b5fccdf19f75", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c32447-6219-42d0-ae54-123c8fb1c7a7", "sighting_of_ref": "indicator--8df536c5-966b-4842-a053-fcdff41ed45f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a155ef3f-b144-4cbf-8fe7-4732405f5d93", "sighting_of_ref": "indicator--12044589-6b9d-4e53-bf5a-488af2b8dddc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4d0a42-0040-489d-9d8d-31bf2910d630", "sighting_of_ref": "indicator--09887105-9817-4ae9-8e01-4c6b9d29feff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311966d8-ac99-46e4-ba45-19081052349f", "sighting_of_ref": "indicator--0511898d-0366-462f-b150-5194f268aea7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d52bc6-99e4-47e5-851f-3080292cea9d", "sighting_of_ref": "indicator--eaff428e-881a-4d81-8bae-8cb9810c5008", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f51da9-0f37-4c86-bb30-1a2615d412f8", "sighting_of_ref": "indicator--5d58fa4e-d7da-40ee-ba0d-acfc7fd47ebb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78044094-b486-49d9-8cd5-acd623ec5d07", "sighting_of_ref": "indicator--d1414b30-545a-474a-a4dc-f49aa99fc047", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b110eda-7d47-4431-957e-37feca0d0c0c", "sighting_of_ref": "indicator--27bb736d-7547-4681-a1f1-45aeaac8b421", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7c9638-85e2-451b-be67-b8724ee6a7ac", "sighting_of_ref": "indicator--3c064193-b5e9-48c2-926c-ff864473e454", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ebbad0-7f94-4222-9f4f-4b93d9945de2", "sighting_of_ref": "indicator--32b516c0-c380-4793-a910-1f250bd5571f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e98606-6629-455c-9145-e2862b56d9e7", "sighting_of_ref": "indicator--ee83a4fd-0520-40bc-9078-e6f24fd2a71d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197b95c2-00d5-4042-822d-3f29c4afbba7", "sighting_of_ref": "indicator--8b1478e2-6bec-42da-870c-c69dd6ea4de3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c8dd36-c925-44ea-85f8-6f8f0565b6a8", "sighting_of_ref": "indicator--717fd9db-7ed2-4019-b3a0-70c1c635f18f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45132c2a-5a50-4794-9895-8f0c6d67db33", "sighting_of_ref": "indicator--2ce32515-17a1-434a-8b71-b035d4aadfa9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd36ba65-b5cf-4384-8852-c95509ba7858", "sighting_of_ref": "indicator--8ed3d9de-2eb2-4785-9dfb-dc1a8278c196", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a646308-cebb-4611-b60e-f3705a725635", "sighting_of_ref": "indicator--fc65a92d-08f1-4605-9e02-5ba0f53d9f79", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97b0cb0-16e9-4720-9c7c-98d05854f848", "sighting_of_ref": "indicator--25190df7-c543-43e1-bb1b-6bb0be591c44", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f39056-dcf0-41a5-95b1-4f2329879271", "sighting_of_ref": "indicator--066767fe-a9bc-4def-abeb-6d0af336b623", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116032a9-3563-4763-b0d6-0e022badfd2b", "sighting_of_ref": "indicator--f76d42f2-2ff8-4334-8da0-43b3223c5971", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd57c9f-10aa-49a9-88cb-37e94059e132", "sighting_of_ref": "indicator--466f7854-0985-4e8f-bfcb-be0434d5adaa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a61cbab-dea0-4b94-ba79-9529d6bc02fd", "sighting_of_ref": "indicator--86e4d208-74bc-457a-9ea9-74c7f14e33c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65caa1d-a62c-4b69-84df-4ee4199dc364", "sighting_of_ref": "indicator--1e05cdb3-a0fc-4cbf-aada-24c27080a977", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6b25fc-2fc7-4046-b3a0-82a3cf51472e", "sighting_of_ref": "indicator--e18f6ad0-c045-4188-8970-224cca4a98fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79490192-8905-43e0-8b6e-c80348eb8721", "sighting_of_ref": "indicator--79b7ca2c-5ca3-4a51-b972-d60400d54e6a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de84b29-5483-419c-91b7-8c85365ed6cf", "sighting_of_ref": "indicator--6d5e8cab-a2b8-4b0b-b8e5-dfaef7eb79df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3912983e-3156-4dca-a57e-b88917726389", "sighting_of_ref": "indicator--5e8b0146-1cd6-4224-ad17-1ff1de679164", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974c7d52-7fde-48ae-8b40-f28dbc0ad525", "sighting_of_ref": "indicator--c0fbaeea-1360-4fe0-9e22-8f49407185b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad84c7e7-d9a0-4dac-b13b-b8883c987a66", "sighting_of_ref": "indicator--332b5cab-bb12-4eee-b252-eb04d9247a98", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbe7abd-49fb-4119-99c4-509f7a74f760", "sighting_of_ref": "indicator--74838ebe-1e6e-4379-8b72-29f5bfe54488", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b749975-0376-49f0-942a-2af1ab347fbd", "sighting_of_ref": "indicator--599bb8ef-7852-4bd7-b7a7-cfbae5ab846b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c045d83b-7495-405c-a0f7-97171ffa5e5c", "sighting_of_ref": "indicator--388cc03f-5cad-4401-9f45-9949f81b17a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4b7c75-df28-443a-8b41-b10fdde3a42e", "sighting_of_ref": "indicator--45d8a98b-79a6-4a55-b658-370e31b75ab5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eabb5b4-0b16-4a9a-b94c-1bb0d05b03fb", "sighting_of_ref": "indicator--64398940-a020-4777-8fbf-f5aeb40e372c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5536687-fd44-4c1d-9ab8-dec3516acce7", "sighting_of_ref": "indicator--622cf296-c58f-480c-968f-26807f2d8e1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee71544-d44b-4a83-8826-d4466762f3d1", "sighting_of_ref": "indicator--855fa69f-9a41-4dd6-97c2-264b0e132039", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778f8424-9f64-44b3-bdce-d0431add574b", "sighting_of_ref": "indicator--e21e3ca5-cc1a-42f5-8ed1-b8deba49a69f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c866fad-7969-477d-a052-ee955b5bd33d", "sighting_of_ref": "indicator--9471707b-78a8-441d-80e0-7d0fe051e4bc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5b659a-2bfe-4896-a912-612230107fc3", "sighting_of_ref": "indicator--ded52bb5-6256-49ac-b7cb-2e7d9272b001", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8f67c8-ea15-4a6f-bb65-b5cfc71843c3", "sighting_of_ref": "indicator--51f0b82d-6ca8-4695-b35d-b475a1a1cbd7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22137719-0646-4b20-9ac4-60cc217d638a", "sighting_of_ref": "indicator--167efef1-d865-4249-a3fb-79a03b779dce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04fb072-be67-44cd-bf0d-286264e07c75", "sighting_of_ref": "indicator--f2a1a94d-0aa1-4cf8-a775-db80a4d3fa87", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b099cba-1a93-4f57-abc5-2b2ff4b3046b", "sighting_of_ref": "indicator--4b8f1a8c-8ebf-4907-915d-2ec1455e4789", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1a849e-6911-4715-8aba-52a073d47513", "sighting_of_ref": "indicator--fdb86ff9-e415-4998-bca6-22497993f0e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd55cd7a-f7d6-484f-906c-0b4a36cfd22d", "sighting_of_ref": "indicator--2ceeaf15-334c-4ac0-a1ab-a2213960f4e2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc68439-dcea-4ce3-aa2f-07035150ab92", "sighting_of_ref": "indicator--438428ef-52c1-4e31-9612-bbb3908ef103", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755ea308-012a-4bb5-9531-8e8cfe5f36c2", "sighting_of_ref": "indicator--42be0cbf-6ebc-46da-b202-da79d5accc4b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679873a6-929d-4a91-92c6-aadf6b3c0d8a", "sighting_of_ref": "indicator--9ab5bc12-b0af-43c9-af21-0fb51f92f8c7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7057cfd6-fb1f-48e5-ada4-3fd00f6b4078", "sighting_of_ref": "indicator--b0ca16f7-5b03-4a3d-93b2-98c0d7b1bf28", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b063975c-aa30-4296-9450-56055d035ece", "sighting_of_ref": "indicator--7b7ba10e-a676-4361-9f13-fa60482f76da", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0a8d58-6901-4dc0-b61b-a11f843735c1", "sighting_of_ref": "indicator--eb38bedc-7ea5-4e03-a952-d53a71b48c39", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b311b1-3bb1-465d-ad5a-6cfe7a6359fd", "sighting_of_ref": "indicator--f05945c1-8cca-410c-ba1d-79411a6434fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc0a999-bd18-41c4-ab1b-5c0450852298", "sighting_of_ref": "indicator--30f9335f-1ac0-4498-8c22-99a1496eb85a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aced390-b018-4f91-b3e7-9325fc3ed565", "sighting_of_ref": "indicator--c0e6296d-d7f5-4a09-b9a9-138172aea3a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b949c713-a361-4071-9429-71e194a0bdbc", "sighting_of_ref": "indicator--53c5f7c8-a358-47da-b42d-1fbb2f5221ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac92e8ab-70be-4683-9ccf-d8aaa52f1076", "sighting_of_ref": "indicator--b64fbd55-a9fb-4c41-92d1-4b7aed4fdc82", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894be079-76ef-41b8-863e-d72254d2ac48", "sighting_of_ref": "indicator--91d4349d-a2cc-4aef-ba51-0c8f4c1343b8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab3dd89-7543-4805-a895-ba9568fddfde", "sighting_of_ref": "indicator--3e60f83a-738b-4e7a-a2c0-73f3ecfeee2b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add86e6b-d8aa-4f56-b5f8-89bc0dfa6994", "sighting_of_ref": "indicator--75fbe642-92e6-47f9-9529-2da0cbbbd427", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b84e318-44bb-4061-99f0-f9129865519f", "sighting_of_ref": "indicator--ec2bd5ec-ace6-43d8-8c89-952af5dbcfe3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4f6edf-8e7b-404c-a3e6-0bc021dafd0f", "sighting_of_ref": "indicator--39dca561-950e-457c-895e-905a702c44dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97b397e-f532-4f73-822e-b1093b4aa1bb", "sighting_of_ref": "indicator--0ff95352-fb11-4071-809e-addb8a578898", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7534be9-cc21-4f33-85c0-ca43c9fe5724", "sighting_of_ref": "indicator--16acafcb-03cb-4e9b-95d4-b20e1cc4f3ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f26ac67-a2fc-4ebb-96fd-2eeda046bd13", "sighting_of_ref": "indicator--1d10f932-ba1b-4dee-bd3a-e80bd2a2bf06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3844615-ab7b-4b18-ace0-3171aa7ac383", "sighting_of_ref": "indicator--f6ad158b-3dbb-43b5-a169-1710e8ebddd9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c2dbfb-02e7-46b9-acb9-65edead7b899", "sighting_of_ref": "indicator--fdcb43f2-50bd-4b84-906b-a3259de44551", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45d4927-9f4d-47b2-89aa-28b69ce5a253", "sighting_of_ref": "indicator--be73137a-5ed9-4578-9de1-d67611b02404", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18296bc4-fb6e-4041-b45f-ce476e285649", "sighting_of_ref": "indicator--c12fbce7-abf0-4a22-ae98-e42f9f6d85d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3d67c9-2379-482e-8a85-88e302a07787", "sighting_of_ref": "indicator--c42b8259-64a3-42ca-be8a-24e9ad11c04e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8a2b52-6d92-42f9-a858-58e3b9bfe6a1", "sighting_of_ref": "indicator--e921d116-f57b-49e7-8962-5895aded9f48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371025df-f71a-4776-af04-c3f46837dcbc", "sighting_of_ref": "indicator--8fa7370e-2b83-46c0-9639-cab68418e31a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1c9633-0edf-4ef4-8f9c-d2e79d47f3b1", "sighting_of_ref": "indicator--fe363a66-b4b8-48ca-802f-e1d86019c436", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10e98d0-c115-4e30-b5ea-a8b062b7ddd6", "sighting_of_ref": "indicator--d3f0ee61-06b8-4882-9d66-517bdb2662b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4900029a-9789-4e4e-8c2e-e13e467f0639", "sighting_of_ref": "indicator--d85712d4-8282-4f9f-a4d9-65d10113f3bc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a0e7c7-a445-40a0-9e7e-aea434d432a3", "sighting_of_ref": "indicator--a3ec8821-ef87-412d-9e7f-3cf72dd1f882", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c42c32-6066-4994-b6a7-920a977e1e59", "sighting_of_ref": "indicator--0596e3b9-d73b-44ea-9beb-b4d1db6388ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2caf48-5cc0-4f3a-bb95-8c737b9589ba", "sighting_of_ref": "indicator--056fbda0-aea3-4142-bc4a-b783fc59155c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3913442-fd0f-41fa-aea2-03e0cfbe1a50", "sighting_of_ref": "indicator--744be07e-a9f7-49f9-a671-832de827a672", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc7613d-bd5d-48d2-a68c-4345ae682813", "sighting_of_ref": "indicator--2c416e34-42b7-45c7-9b6b-1ad0b9a060f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbda80bc-86be-41f0-9876-0bee6206b3b9", "sighting_of_ref": "indicator--2c08c6d3-ce9d-4326-8bef-b37032d0155b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bb625e-0c50-46a8-96ce-2e50b757546e", "sighting_of_ref": "indicator--520c757b-f843-490a-ae40-a416cdc54577", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2393c9-ff1d-4e40-9574-e742524355e1", "sighting_of_ref": "indicator--520c757b-f843-490a-ae40-a416cdc54577", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38d289d-08fb-47ea-afd1-a1d4c875a8f2", "sighting_of_ref": "indicator--520c757b-f843-490a-ae40-a416cdc54577", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f6acea-357a-45f5-9bd5-45d8f42a21c7", "sighting_of_ref": "indicator--53ca366e-afc3-4582-955a-98050f97fd99", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8538a9bf-e9a2-4a6d-9883-f2c32136c140", "sighting_of_ref": "indicator--1daa91ab-2d0d-47a8-8097-b43d5b0335a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b970185e-0277-4b5c-a960-c16bc4e56ff9", "sighting_of_ref": "indicator--686e8439-0136-40e8-a173-87af6b7174af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfec5b81-f282-4fcc-8737-e839729e7880", "sighting_of_ref": "indicator--7d5a4760-9f41-49f0-af37-88b5d8fe5ee0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072c202e-abf8-48de-ac98-e3f270cf3f25", "sighting_of_ref": "indicator--1b02d3e2-4f44-42f4-8937-5682e99dcdc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1821d3-aeef-427b-94ef-40af3281651a", "sighting_of_ref": "indicator--f6d0c533-a8da-4da5-982e-26dc5bb9f1fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8f10d0-2605-4619-ac59-6c4b65040477", "sighting_of_ref": "indicator--1e0ea051-23a6-4638-bd8f-aad426fd9c2d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed6bb91-ace8-4ad9-9cf6-c06569808ccf", "sighting_of_ref": "indicator--1daeb283-37f0-46fc-8f8b-b6a2f19ee8e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ce7ff9-a54d-4048-ad3e-afe0ffae2d6a", "sighting_of_ref": "indicator--7f097e61-5727-4c58-bb6a-5a1804f8caf5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5d0f9c-9414-46ec-8a3f-730540bb55d0", "sighting_of_ref": "indicator--c30c81c0-5080-44d3-b629-27b6ae95144e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02bf86e-e6e3-4a24-8d91-1defc109bf6b", "sighting_of_ref": "indicator--67f32e64-0e23-4e01-a884-ed484d51963d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b59eed4-7cc4-46cd-b785-64dedff2f414", "sighting_of_ref": "indicator--ae53fb1d-3e7b-4f4b-b116-9a1bd942e180", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a277b3b2-8ba5-45bd-9733-11ca0fbe754c", "sighting_of_ref": "indicator--07293d9d-eff3-4203-91ec-14d9627b8110", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19c4c45-fcd0-4808-b1e5-10b83c619f4e", "sighting_of_ref": "indicator--3cfc2896-3c6a-4ef9-a781-c8b55463ec46", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbb4856-11ae-4cf5-9d5e-842306da9c71", "sighting_of_ref": "indicator--970367ea-2d84-4ff1-925c-ed31a84d3a78", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad92c482-e929-45c8-99f4-f57819c58d75", "sighting_of_ref": "indicator--c1d07b4e-5909-42c8-bb5a-555f48819855", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c020cba4-c326-4f33-8be2-2082d9283eeb", "sighting_of_ref": "indicator--fad801fb-db77-48c3-9970-60482e6f2147", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d658c3-6d0b-4d75-9550-9cf36a40bfec", "sighting_of_ref": "indicator--bfaeadbe-8991-4315-8adc-228ccf7193da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fe01c7-3b4a-43f2-8dde-b0ab92803720", "sighting_of_ref": "indicator--cd65cba9-48b4-4ed0-bf32-06129857598f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4842e57a-00b9-41ec-acbc-f5d1a2257680", "sighting_of_ref": "indicator--1de29ef0-8834-47c0-8512-dd87619a4f8b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0db559a-bb64-4c41-9bad-31f618c40c22", "sighting_of_ref": "indicator--8ef9533f-1e7b-4de2-ad67-43d09e83c05b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c7b817-b925-49ad-9fc3-8a649b9cbdce", "sighting_of_ref": "indicator--62726b13-b1e7-49c5-b26b-b9f5c3c26d4e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0040f815-2f2d-49cf-b37c-0d46e6fd429b", "sighting_of_ref": "indicator--5465052c-3214-4f7f-b519-0be9224cb422", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7712ae6e-0fc6-46ed-92ae-9406b8dcfc88", "sighting_of_ref": "indicator--d45933ab-4e9c-47a7-9415-c667522742d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962a617f-3edb-4831-b814-9aff53f92d40", "sighting_of_ref": "indicator--2220f0e9-62ef-4026-bbb6-7e7dfdc15a99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f1e79e-5ec4-4ade-9c81-1afe19faa930", "sighting_of_ref": "indicator--8bbcf531-b8b3-497b-8272-5da2cc056532", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befd0fdd-d721-411f-8037-762587f8c7d1", "sighting_of_ref": "indicator--e86888ae-2465-4ddb-aa82-d134933dbdb1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a73870-642c-47ff-a561-f9390860da4a", "sighting_of_ref": "indicator--1789286b-4339-45f5-aaf8-e9b8574a04c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c9122f-ddd1-4c04-983a-4aa6824d4f68", "sighting_of_ref": "indicator--cd9178d7-d5df-4f9c-9b3d-39f9d4235919", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8afc30-f8cc-437d-ae18-cb74683adad0", "sighting_of_ref": "indicator--c130fe0c-1672-4f8c-8fa6-1df429f24b9c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0199a11-b8a5-4ddb-832f-b5f708c448d2", "sighting_of_ref": "indicator--15ec2bd1-499c-433f-974c-bdd1f8d911ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9343b406-dc99-44a0-871a-657f0731deba", "sighting_of_ref": "indicator--7bd330dd-11e1-461f-919b-ccc1430a31b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31b37d6-812c-4cf9-b2d9-2ec9a4b0bed4", "sighting_of_ref": "indicator--3b753065-1cb3-4101-8895-15244b946cba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8764fc33-09e0-4696-a2b3-68c03afb262d", "sighting_of_ref": "indicator--cf8cc1af-0e4f-4629-8994-9eca6eb9184e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ff0497-b154-4289-8372-0a637142beea", "sighting_of_ref": "indicator--204d2429-a0d9-408c-b0a1-49a6f28d8942", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325d873d-67d8-4b05-9d27-9c4b5132b0ae", "sighting_of_ref": "indicator--94a6349a-81e1-4b9f-a77c-97032f4f84f6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13ee042-f239-4e8b-b12e-dc5a08d7de34", "sighting_of_ref": "indicator--b67cfd33-0ab6-4dde-92e9-8ab1f4612aa0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec612a53-6224-4045-b32e-dacfbe3f1016", "sighting_of_ref": "indicator--6ad2db36-25f7-4724-80f1-f1f9352bf365", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da12954e-7e1d-46b5-b289-ac76afc5a007", "sighting_of_ref": "indicator--3872a690-d42d-4062-9532-652293f151f3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4443c2b0-edd3-4729-b2b3-63f7b387a1bc", "sighting_of_ref": "indicator--b75634b1-eeff-465e-ae77-a75d268e289d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333084cf-5744-4f2a-939e-13d654ba7ea8", "sighting_of_ref": "indicator--dfccea4d-571f-4518-9e75-d301c940e12a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7f7040-095e-40fe-95ba-d9f173d945e2", "sighting_of_ref": "indicator--d8bc4c17-158a-4352-82c3-516a6733d7f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37571932-4f3e-4f60-8872-d8636f5bca11", "sighting_of_ref": "indicator--c3359f83-f6a0-4354-acbc-baee5c024a6c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7556bbfe-7904-4eec-bfe7-8e712de3bb9d", "sighting_of_ref": "indicator--af145065-cc67-4e72-8e91-fe14bf585c1d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fea593-019d-46f8-94a0-deddc04c8f26", "sighting_of_ref": "indicator--81e2a006-0861-408e-802a-a0d4cc9c8d9d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba595e42-5fb7-42c6-b94e-5531e3c9c3c6", "sighting_of_ref": "indicator--5d0cd0e2-63aa-435f-8cc7-cb66e123a577", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a72fc4-cf68-415a-b0e5-fd1e75945e60", "sighting_of_ref": "indicator--a7629c6e-4d4f-4435-9bd0-1103c0e0589f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b943b93-2f63-4a7f-a904-39c51aea0039", "sighting_of_ref": "indicator--513d30db-9856-4751-b3a5-309029f0e40b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47297b4-a9f7-417b-bf47-17ec50f8a28d", "sighting_of_ref": "indicator--e70d42bc-8581-4699-8cc3-7670825f703d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948a6244-db0a-4c89-97b0-0558b2a54ded", "sighting_of_ref": "indicator--7dc62d22-cc17-4ae7-bca8-8a1e7bb5601c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0ea27e-4753-4006-8a62-7ff031084750", "sighting_of_ref": "indicator--86135773-7728-4d9f-bf74-5b423f9a07a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f309a086-5903-407e-840b-50ca9c77741e", "sighting_of_ref": "indicator--bb6ed15f-5de7-4c7f-a879-acec2a753b9e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03634a7-1c0e-4ff6-9041-12d4cd1ba637", "sighting_of_ref": "indicator--387dba66-13c2-4ba3-b03a-2b9e59dfff2e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac90780-dd7a-42ae-abd0-a2161d4979c8", "sighting_of_ref": "indicator--3a5204b8-0e5e-47b0-aa2c-505d5cb72444", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cfa5c4-1540-4038-8117-65b905f147d4", "sighting_of_ref": "indicator--93cda032-d093-40b7-b68e-6ee5faf0083a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7755a20a-0fc3-4146-9ef7-5b152be53db9", "sighting_of_ref": "indicator--b3b63e10-1fe0-4666-a6d4-9a6c56bc67ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c427f264-396c-4f12-8f97-78380e460b1d", "sighting_of_ref": "indicator--16e6c0e1-ff5b-4e81-adfb-27f0181a9de4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2ef69e-39e5-4d8f-a050-2c815f7e0528", "sighting_of_ref": "indicator--2515beb4-cb71-461b-b199-f1efbefd57c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38f8098-a808-4da6-b761-27f646f89955", "sighting_of_ref": "indicator--6a833a7d-592b-4d09-bf5a-0d3a06c931b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6474d653-73b4-486d-b415-34fdd1bea442", "sighting_of_ref": "indicator--ae2c2ad0-64a1-4fa5-ae9d-2f7529011d83", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d510ab6f-dd79-45fc-8d6f-08ed9cdfddbd", "sighting_of_ref": "indicator--b01d0bba-a7f4-4611-b53c-48a5c09f40bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2ce7b8-eda8-4df1-ae6d-3780fed54683", "sighting_of_ref": "indicator--10838f84-6845-40af-8a49-d8fe80f5a82b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2978a2a3-9a7b-4e73-b05d-a87024e25b04", "sighting_of_ref": "indicator--1da69b98-f3f4-480a-8cfc-f5253e343366", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a35a218-7db6-4e15-b3ec-7cfa1069105f", "sighting_of_ref": "indicator--cacf82b0-9ee0-49b3-9559-beb424f6ea40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f3a260-2297-4ffa-8379-eded8e293776", "sighting_of_ref": "indicator--cce4239e-9351-44c7-ae34-050d01a484dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876df128-5da3-420b-bfed-a65c3651723a", "sighting_of_ref": "indicator--3d2f9e8e-d809-4be6-a1e7-a05383c753df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79080337-af89-4df9-9e6c-c71fb70c426f", "sighting_of_ref": "indicator--655f7f7d-f7af-4430-bc81-067643e57ce3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7c3fd0-925b-4323-a476-4019ed628beb", "sighting_of_ref": "indicator--ca8cdb2d-5a2f-4852-a176-32a78550811b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cc8929-9a05-48fa-b90e-1b04a92c7d17", "sighting_of_ref": "indicator--ae4d7010-1252-4dd2-9f9c-c83b2507e0b1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66929ab-35c3-4724-8b63-c4e4286dec56", "sighting_of_ref": "indicator--4f83d895-3422-4df8-ad79-fed14c92a91a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e2669b-9cf6-4809-8b6e-e399cdb7c6b4", "sighting_of_ref": "indicator--483d84b2-f6ea-4aec-9e92-be6477ac1ce0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb34399a-1268-46a9-9ecb-37d56a928042", "sighting_of_ref": "indicator--4a8ab530-a602-4f00-a738-88eb40902133", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65805e6e-f1f0-4596-beb3-a04e93a2a66a", "sighting_of_ref": "indicator--31ec3aa7-e8ae-45b6-9642-66b30e05c9c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e38b863-808e-4755-948a-f8346312a82b", "sighting_of_ref": "indicator--6c6e3b6a-e46e-4397-9c96-ef9beed1e2c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69933ee7-c3a8-4822-a7e1-772ece2b5a78", "sighting_of_ref": "indicator--ce6f07d7-d9b0-42ae-9a23-a3cf15e9b208", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579c2808-a681-4c88-bd80-64be12a7a37d", "sighting_of_ref": "indicator--3581789b-fef6-4196-8d7a-2a49ee3caa33", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6662b4dc-365a-400b-827f-6d5e82e1250f", "sighting_of_ref": "indicator--784267b6-6f58-45a4-9a5c-55c24506c7fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb2587b-08ec-418c-8f87-7270f45bdf69", "sighting_of_ref": "indicator--06126c52-bc04-4495-9a8f-94488130468b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca1fd69-dacb-479c-b0be-05002b579cfc", "sighting_of_ref": "indicator--6fab956a-9a2a-4c10-8ac4-7ba915dbae51", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534683c3-1464-4772-b485-b1647d31a1e2", "sighting_of_ref": "indicator--98b2fcf5-bff3-4d77-9c82-1ae3760cb6a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038b0fbd-a489-49f0-a01d-b5b9b0fd47c9", "sighting_of_ref": "indicator--d290eced-5b14-4da6-81f8-1755f2dd1176", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e102a5e0-d7fd-4c20-8b9d-f15ade870db0", "sighting_of_ref": "indicator--b97c57cc-f469-4305-9ffa-e7b0e2bb3c23", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18842ddb-1af2-4136-89db-23a63cd7c0fa", "sighting_of_ref": "indicator--fae67d56-6bf6-449b-8dbe-d12f51534544", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a205ecf-498b-441d-98c4-0fca0d933bb0", "sighting_of_ref": "indicator--b24ec068-f24d-4842-aae8-1854df11e932", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37913678-bbf7-40da-9a51-e9966d2fc8b5", "sighting_of_ref": "indicator--5696bc17-2075-4b73-beaa-438acb55a793", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa617cc0-9c95-49c7-bb64-06e9d2b4def9", "sighting_of_ref": "indicator--a67dc0e1-3b19-4bd2-a732-bc32b7bc8031", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ddde9d-56b5-4c44-890e-40be6f26d5f9", "sighting_of_ref": "indicator--4883d347-8c9a-46bd-80df-bb27568cab21", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a89d055-604c-4b7c-a898-4fa654df5b19", "sighting_of_ref": "indicator--bce5345a-bff0-49ee-ae10-a5850208d1d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2016d27c-cbae-48bf-8112-a6388d66cd94", "sighting_of_ref": "indicator--f251e2d4-ddcb-4902-bd70-7ec690a3dacc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d026c9-0bb1-42b8-964a-3f39166c3d80", "sighting_of_ref": "indicator--41d21194-899a-4ab6-bb9b-99e1fdbb1f35", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371d49ac-8f9e-44b5-afb2-2881f148ac3f", "sighting_of_ref": "indicator--faba924e-2bd1-47da-95c6-9075e8f53bea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802babce-9d14-4558-a3c3-a8ab31418cce", "sighting_of_ref": "indicator--fd1ae015-262c-4c64-838c-af2841b31d13", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa1889d-f6c3-4c4a-a3ac-897a9d87c98c", "sighting_of_ref": "indicator--0d32e68d-5ffd-4f8d-82f0-08252cd8fb6c", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836186eb-7b63-47ed-b7ab-ccb9fbb96c29", "sighting_of_ref": "indicator--1935faed-d9d2-414d-a1e9-55d43ad77cf4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffad594-e8e3-4021-9c3c-abedf962c770", "sighting_of_ref": "indicator--02f09ddc-cc97-45ed-8a79-4b183a3acd96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f810cf1-0fc8-4222-9b8d-a39c284ea727", "sighting_of_ref": "indicator--4b83cf95-231c-4543-b79b-64ed39d0d07d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f9d602-300a-4e23-9703-116684f099b8", "sighting_of_ref": "indicator--21739bd5-2dff-4ae1-a069-4c76d8b85f23", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fde7f1d-55d7-476a-8714-9511d30202cd", "sighting_of_ref": "indicator--0778c977-d355-44f4-827c-bc9ca9f28ce0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6e93f6-bbc5-41b3-922c-07523765d16d", "sighting_of_ref": "indicator--a98da5b5-bd48-423b-a13f-336d77617c05", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9da1e8-7632-47ca-a321-3580c4d30ecb", "sighting_of_ref": "indicator--a966a40a-c57f-4c1b-bcdc-da97e12cd06c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbfd5ba-be0f-413c-9d96-801074402431", "sighting_of_ref": "indicator--b401cb50-c8fc-4440-96e4-e7e43061ba02", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8237605-61d7-4ec4-89c8-cbdbf9eeae6b", "sighting_of_ref": "indicator--063b48c8-feb8-4d29-999d-d5de62efe4e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c17551-37b3-4811-9b93-924ffc91dd34", "sighting_of_ref": "indicator--fa8e74f8-9659-475b-9462-6e72269867e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86bf5ab-3740-43c8-9698-86083c962dca", "sighting_of_ref": "indicator--ca79406e-cc04-46e0-b5cc-8b480dcc1e68", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3d7d27-28ed-4348-bade-ec4a99e21186", "sighting_of_ref": "indicator--833e8e4c-d683-401a-8e74-af0f932c45c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ae5ece-fa4f-47fb-bfd7-dff11fda1ae8", "sighting_of_ref": "indicator--a8e368bb-b718-4e72-91a2-e27585f136b8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b331bd8-1d89-4dc7-9701-1cd0ea1f42ab", "sighting_of_ref": "indicator--daceb47e-e468-4efd-9c13-7cc243510a56", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb281b8b-bbd0-4f8a-a174-d49b2482f89b", "sighting_of_ref": "indicator--10193583-a37c-46ee-b0ab-2048f22562cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1ec2cc-1d38-4607-80dc-0370fea171f9", "sighting_of_ref": "indicator--cc174199-df7d-448c-83eb-d5b5dccdd55f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe9d974-a2f6-4538-8137-92c92c43fbd6", "sighting_of_ref": "indicator--11245326-0418-4cb3-b792-8554ac707970", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd07e94-d365-4f8e-b3ae-b7271098efd0", "sighting_of_ref": "indicator--19318d78-931a-429b-8160-9e2cd98206cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e7e216-d415-4f35-9c89-b18e278d4b8b", "sighting_of_ref": "indicator--1484c8b5-ab2f-48f1-b5b6-8e1a3aa73dd2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888fdc90-602d-4da7-9850-353e8aa096f6", "sighting_of_ref": "indicator--b0cbde97-dfb2-4308-bbc0-2a55a3164c48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d21f494-1973-4d9a-aff4-cfadcd87359c", "sighting_of_ref": "indicator--253a15a2-d943-469b-9933-568fc365ebd8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697be541-e868-4b2e-8ae5-5bc834fc98be", "sighting_of_ref": "indicator--03dabbc7-1268-4c8f-b992-8737db490087", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff3a824-0591-4599-b873-261225a4b476", "sighting_of_ref": "indicator--adfa6285-c1c7-473f-95da-d8c8289c7238", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93d5313-a2eb-4927-9a19-e3a9d7a3afdb", "sighting_of_ref": "indicator--2b21b340-89f3-4670-8436-4a20fa64ea01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ddac43-26f9-49dd-a3b9-48154c22ca8c", "sighting_of_ref": "indicator--8f9c77c9-95cb-4c49-b0d6-bdc56e7f483b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f109110-688e-4c6a-beff-971b06f91154", "sighting_of_ref": "indicator--a0b62dfd-7d27-424c-a9e3-2adb1bd23f1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c20ad7-26ab-4966-b654-f816cb7cf6cc", "sighting_of_ref": "indicator--9916eae3-9f38-41d1-abbe-39923be2ffa9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8504d331-2a43-4505-b391-adbb3704e0a4", "sighting_of_ref": "indicator--54f7c434-e79d-45c3-a90a-f21548332285", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3d5a7d-a508-449e-b8e7-3a40e4905fce", "sighting_of_ref": "indicator--a0b0a895-dbc8-45cc-be84-e193e917b8d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26967687-4e1f-42b1-a130-b4a772d1202a", "sighting_of_ref": "indicator--5a4d8bf7-a774-45ab-80fd-3c66d04cb313", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7622cc-379c-43c1-8368-7275a4406ec1", "sighting_of_ref": "indicator--963d8f5c-9537-4b69-8206-089dc525f63f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c990683c-2873-454b-ac34-f20b46fbb085", "sighting_of_ref": "indicator--83225378-e4ca-4a2c-85a8-3ce6107cf544", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5bdec3-a96d-452a-be16-70e7982ed1a8", "sighting_of_ref": "indicator--3e2cf61a-a2fa-432b-b6d4-1dec4c6c6501", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bf2c06-b88e-4541-bff6-64df87dfc214", "sighting_of_ref": "indicator--2869d0ea-75f9-40ee-bdb2-444becaccf95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbe2b8d-ffd5-4976-af3d-26466be9fa4d", "sighting_of_ref": "indicator--e0e33703-a33b-47f9-bc09-26ba4a042564", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4dd4a4-5133-4c64-8a8b-93b12c63c053", "sighting_of_ref": "indicator--4bf4bc8f-9cd9-4ca9-993a-c64b45691f6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad55fdcd-df63-4f73-af2b-8d2e08a3e6d3", "sighting_of_ref": "indicator--8281f172-c23a-4051-9788-71b251063527", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3586020-af03-4cbc-b0da-3df0cdc7139f", "sighting_of_ref": "indicator--2d5be269-df55-4459-865e-d4155058748a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b82e6d-60f4-4a21-919a-9b45ae83406b", "sighting_of_ref": "indicator--adace7f8-2adb-4189-ba40-803714a4ccf1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7b8c4b-0116-4e36-8181-6bf342fc349f", "sighting_of_ref": "indicator--1dec5136-adc2-49d9-bbb8-9b6ffc930dd1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f70ba6-720e-4773-8d9d-7c39635158f8", "sighting_of_ref": "indicator--c82527a0-ac4d-4533-9e92-4aa931dbe62e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2572cce-e331-409a-b174-fcae439e6866", "sighting_of_ref": "indicator--e0abf440-4691-4f8b-b173-19e0c381c2fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099b5167-00fb-4c9a-bf24-a9696d9babac", "sighting_of_ref": "indicator--8f6a8ea7-c0e3-48f6-879e-ad990d922cc3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff75c78-fadb-4ce4-b6aa-01fe965395f3", "sighting_of_ref": "indicator--177be103-39f7-4d4c-9e18-88e2b46a43c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c59c2f2-d9bf-4c0c-8b95-ebd04681226d", "sighting_of_ref": "indicator--c32d7863-5b73-4499-911e-3c80a98c20cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece61d46-4186-489f-9d24-0e71129f879f", "sighting_of_ref": "indicator--d04f1a7f-617d-4c96-b75e-76bfefacfc60", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0da54b-b6a4-49fc-a5c8-b90773ac9bf5", "sighting_of_ref": "indicator--1cf51f86-871e-46ab-bbeb-6e2607711440", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db69f4a-6958-4f57-999f-d83e6e97ce39", "sighting_of_ref": "indicator--1a8e047e-bc15-4450-816b-f8cd8071442e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808e25f8-3c4c-490d-a73c-b0098e21a555", "sighting_of_ref": "indicator--c2e906a1-98f5-4bc0-9aa3-6644f5fa2d1f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bdc344-d610-4c75-b7a2-4bb33d8d0a7a", "sighting_of_ref": "indicator--e8297780-ec65-4b35-b2b2-f3b337d244f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6577fca-3360-4b6f-8e53-56494ef3d243", "sighting_of_ref": "indicator--15d0768f-b6ba-46a5-8ae0-8587a905ee10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462404b7-3652-4d69-9af2-fc1143553695", "sighting_of_ref": "indicator--040e100e-801a-457f-9d09-7f444fde55ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3312a1fb-0a95-409b-ad68-c380943347d5", "sighting_of_ref": "indicator--9218937f-2359-4b4c-b41a-cbab9eab89b6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c5cce2-1e3d-4dac-8ee1-00d48f057202", "sighting_of_ref": "indicator--e1c3269f-2089-4f29-bc18-20d0a2e2d7fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7278ae90-43e8-44a8-83f9-e011ca9ff80f", "sighting_of_ref": "indicator--64d63a93-c39e-4239-a45f-39ddcfebcf98", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c58aaef-2c45-4128-a49d-dd495c573ac9", "sighting_of_ref": "indicator--d9ecc703-200f-46d8-b89a-33c9f68aadd0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750437a8-f267-4a1b-ba2d-cf58ee797a73", "sighting_of_ref": "indicator--c703155b-0dfc-4c20-8afb-ae3548a36fa6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8d80f9-9eda-4c6b-b3cf-3ae892734d2f", "sighting_of_ref": "indicator--31da962b-7984-4ebd-9eee-bf2e243c740d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62249e5c-7543-4a91-867a-7efaf4963c14", "sighting_of_ref": "indicator--bbcbf710-6c94-45bc-9237-223b73364c2d", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcbac49-5dcb-4aad-a205-f3342b5c982e", "sighting_of_ref": "indicator--0e709414-9cde-4d57-8947-a66de718a7a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e404d138-f302-42d2-8b80-0feee004112a", "sighting_of_ref": "indicator--4a2a0b66-8683-4fda-8873-1ac560d1813f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710a6b8d-05cb-4c59-8e11-9ad0b83492ff", "sighting_of_ref": "indicator--b6ac1485-7831-46c8-955e-06ce30a73d48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810b8eb8-d5ef-456a-92da-c146b3786590", "sighting_of_ref": "indicator--a719ab6d-3a6c-4950-a3e6-66b9197a3870", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7254ce2e-75f9-438e-9aa5-f52af41cf384", "sighting_of_ref": "indicator--a7c41fad-ced2-4ca4-96f7-25efd038bac3", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecbfb68-309e-40be-8c8b-466126f5f7b8", "sighting_of_ref": "indicator--9bff4a5b-0377-4540-8d46-995b304e9b03", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7166a15-0744-4918-acd8-4db3ea923195", "sighting_of_ref": "indicator--b4b1ba7f-5d7a-4aaf-bcb2-7c23dc2f68af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236a2036-f42f-4100-9f0f-8c8563de760f", "sighting_of_ref": "indicator--f54d133f-9de3-4087-968e-f405bf321376", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b00daa6-ea9e-445e-8ed8-06054792c5c1", "sighting_of_ref": "indicator--f80a4124-90d3-4079-ac84-7bd7d68b61d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999b4f22-5073-44ef-ab63-5359add6c623", "sighting_of_ref": "indicator--b5972856-7dbe-4052-a239-246d91e85e7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cc8656-2458-4b49-ad0c-84226246705a", "sighting_of_ref": "indicator--80fd68bb-6455-418e-8128-75c1a5e3f791", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a7bb77-7b9f-4c22-9074-0fe61f58de58", "sighting_of_ref": "indicator--6d1e9049-4783-44c3-99a4-633c229032fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee41b682-43c7-44ab-9856-fd67d9b1dd5a", "sighting_of_ref": "indicator--6f0c7577-eb71-4d45-bd32-4512b8e41c82", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24c71f2-da60-40f2-8c09-39d0d1a67448", "sighting_of_ref": "indicator--be680a0f-76a0-482e-8b12-a82ec3018a0d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02194845-79d5-4eeb-8390-2a21b3f0f3a1", "sighting_of_ref": "indicator--2fb1338b-8850-4f6d-864c-edc6a0e6f480", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdbdd0f-c1e0-4ee6-923b-9351e7236283", "sighting_of_ref": "indicator--27375ef0-a4f6-4dff-9f2d-e32849c07450", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfba4a56-994b-4b6e-b2d6-13f65b97989a", "sighting_of_ref": "indicator--5bfb00de-5370-41b6-8c12-a75d8885869c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f299ef-0e7a-4bad-b856-a12b84336bad", "sighting_of_ref": "indicator--e3be2b4c-4cbd-4fab-a630-5e806e0950eb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3bb319-fc48-4d09-9195-5d724e1c0abb", "sighting_of_ref": "indicator--ea2523cf-199a-42c1-af7f-aedf7892c54d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fad61c0-4e4d-45a3-baa4-262521ef6e13", "sighting_of_ref": "indicator--8a083bf6-fd75-453d-bbcd-9f311d79d18d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221b7e9b-3652-4f86-9e24-a3f9c1fff074", "sighting_of_ref": "indicator--5fc82b39-2330-4eb5-b9f9-6afae1dcdc34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ed59fa-e0be-405d-8356-8ed4860901c4", "sighting_of_ref": "indicator--2df57aa9-4095-4cef-86e0-968fc7532881", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951e12db-21f7-4a58-8f9b-5d452c699667", "sighting_of_ref": "indicator--2df57aa9-4095-4cef-86e0-968fc7532881", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0caa6b-885c-400f-a79c-03ec76f0e308", "sighting_of_ref": "indicator--9de88491-85a5-4355-b6de-54d2c02fb2a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab77484-d200-4148-b775-4694891e6709", "sighting_of_ref": "indicator--9f2eceba-e429-4735-88ff-06eae47be4fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6b38ce-609c-458a-a213-73b06aa2e2e6", "sighting_of_ref": "indicator--a924c442-9236-4856-976f-41801890e7e7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8ac30b-c205-4699-939d-8859b49a32c2", "sighting_of_ref": "indicator--038aafc9-04dc-4c8e-9923-1eb8fffd35d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2d7556-a89c-439d-b720-0d8f4b5e8f31", "sighting_of_ref": "indicator--a43405ad-3e0a-47ee-bcf9-094faeed5cfd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7a40fa-2c83-4b35-9d2d-9e31add78240", "sighting_of_ref": "indicator--343f185f-db77-4cf0-9425-6a25f861cccf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb9a6bc-b5f1-41bb-aa7b-090517d62b42", "sighting_of_ref": "indicator--e7378069-1a75-4804-a935-899c77509690", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd93df5-23f6-4adf-ba66-150af8ac0681", "sighting_of_ref": "indicator--4ddd2fdf-4043-4e02-baa5-5ab145539e9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f21a0cd-c0e8-428b-9001-e29f67ff64ba", "sighting_of_ref": "indicator--ec32ec84-e850-40d0-b74e-d4604c54f225", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cb0182-f8b3-43c5-a6fb-5993d7443f29", "sighting_of_ref": "indicator--11abc5e1-babb-47ce-a6b8-332669a60e0f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b929fb-06c3-4cee-bf71-639da84ac150", "sighting_of_ref": "indicator--11ce45f1-7489-4bd3-9973-1026e702a47c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5574a7a3-6938-41eb-b942-63011533ef56", "sighting_of_ref": "indicator--900feb18-aa77-4ddf-9fa6-106f1d32efaa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cd420e-8e17-4e67-b5d5-c57236999f4c", "sighting_of_ref": "indicator--3cadb873-5332-4ff9-a46b-f07a3b62bf59", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885c32ed-dade-415e-834b-05e3083657b9", "sighting_of_ref": "indicator--1a835f05-6707-4d80-b1ba-c599686b6fbc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd61881e-b040-496c-92ea-64d6f0f80075", "sighting_of_ref": "indicator--6635d427-3c8f-4e22-a6c7-0cab41b1dd3a", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d023b371-a607-4ede-95aa-cb4adad79180", "sighting_of_ref": "indicator--d854a641-5ad4-4e4c-ad12-c4a7f7ac79df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5250af-5319-4c4c-90f3-cc0c1b6dd15e", "sighting_of_ref": "indicator--d854a641-5ad4-4e4c-ad12-c4a7f7ac79df", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbe4c61-84dc-423f-8617-ba87a4b5da8e", "sighting_of_ref": "indicator--c8886f13-b701-4606-8e23-57f4a07c2da6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6d23dc-12f2-463b-848e-2b2f40d161c6", "sighting_of_ref": "indicator--ae4470af-102f-4a49-95c2-dd73a25398c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2238e0-ac61-47d3-bf88-77b47ee81b94", "sighting_of_ref": "indicator--e01c20d0-9145-42e8-a1dc-648a7db756d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff16b9c-09cf-45e1-9f10-f45ba6d2a287", "sighting_of_ref": "indicator--7c0a4692-073f-4956-b68d-241e676c4c52", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc531941-d8fc-48fd-851a-6a281a78f54a", "sighting_of_ref": "indicator--57cdf5d2-549e-43ec-b991-e4391dea8c2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd739112-e355-4a2d-bf93-73082a809744", "sighting_of_ref": "indicator--cbc8a054-f60c-4ae1-9cfa-14c530881905", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134fcfa2-1970-47b8-a4ee-cdfa107e5be0", "sighting_of_ref": "indicator--8446aa29-7508-4c04-b941-203801214a5c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfebac9e-271c-4ddc-9771-1402dcf2e184", "sighting_of_ref": "indicator--85670e1f-ab44-441b-b08f-b9fd5aae49eb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060cd8a8-0d9f-43ec-83ba-8e7af7469609", "sighting_of_ref": "indicator--96e76fc9-52ef-435d-a029-598f6746b613", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6da91c4-8a45-4c9c-96a1-62b39336782f", "sighting_of_ref": "indicator--eea7497c-6015-4421-a787-2e1cd951fe55", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fabeb3b-8e46-421b-9f54-5d9c201c434e", "sighting_of_ref": "indicator--4bc03396-c152-417d-ac5f-c43a715d67d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9338430d-229f-41e5-95db-2e9a3d2bfd12", "sighting_of_ref": "indicator--7123a5f4-2bd6-4923-aaea-549d94656358", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a895fabb-6c0b-4a1c-8a5a-1b5c70071eec", "sighting_of_ref": "indicator--43c87245-b93f-4341-9f4d-f8c47a1cebc9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d72b68-1566-45ae-996b-ae075a74dc79", "sighting_of_ref": "indicator--2acc61a1-c45e-4022-b590-5873b3421eac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718b2893-9937-4c5e-968e-861dce30cac5", "sighting_of_ref": "indicator--a8593cea-52ef-481c-a159-97cfd14bdfed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01020059-35df-4a85-91c1-946cf35f74f5", "sighting_of_ref": "indicator--8131fe73-54db-4e16-81e0-751893b7dfbb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8274f4f9-897e-48db-b6aa-9852a1d50df2", "sighting_of_ref": "indicator--e4fd3a32-a023-4e7f-b2ac-76fd6b6ed979", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6246fb5b-1b24-400d-a56f-7d8c3602ce60", "sighting_of_ref": "indicator--b22ece8d-1cb3-4c9b-946b-fdd593688004", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb2d286-9b42-45f3-87dc-d054e02f3bf7", "sighting_of_ref": "indicator--d01f2f73-7ee5-4252-90a1-6bc45f74439d", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126d5323-4eed-4869-a30b-939bde7eb7f9", "sighting_of_ref": "indicator--e6529d17-e7ac-45f3-bd66-b5faf9cc85e9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f358b7-61ad-4a6a-a60c-8ad36fb154b2", "sighting_of_ref": "indicator--57226095-583f-4e50-bda5-be301c0f9a20", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5352f61-02d4-47bc-85b2-965827f08388", "sighting_of_ref": "indicator--81efe0bd-0a5e-487c-9e15-56a63e27c581", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00b6aec-923c-46a6-912e-2148af48b9e5", "sighting_of_ref": "indicator--4a02570c-834d-468c-b1e9-c37cb6d97ed8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4280f19-1f04-48e6-918e-ddb655609a1c", "sighting_of_ref": "indicator--5b6c3183-d0c7-4f89-8ce1-bc9430f960a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97faeaf1-3485-40c2-9059-a205984cd0c4", "sighting_of_ref": "indicator--1ddb5009-ab47-499f-af85-4045cdecabff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bea2cf-77f0-4c54-9fd2-3fdfe2ac960d", "sighting_of_ref": "indicator--8176b7ec-86a1-47c4-86c3-ef8830233bb3", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24525a08-c688-450a-8cb9-72e795510dc9", "sighting_of_ref": "indicator--8176b7ec-86a1-47c4-86c3-ef8830233bb3", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61961b3f-ec4a-4959-a1ae-783c3337e528", "sighting_of_ref": "indicator--b660d390-a833-4ebc-a4b8-cd0b5eddcbfa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e1438c-8184-40af-a3ab-dc1cf86dfb48", "sighting_of_ref": "indicator--870901b3-7b6c-4fd7-8893-38d9a9debae8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b502b523-3851-437b-9a55-2efa70cdc52d", "sighting_of_ref": "indicator--bd7bf87e-58b6-421f-bd58-ed7957b7de0f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa96784c-2727-4e10-9801-6cc0ac4c3b3a", "sighting_of_ref": "indicator--d0acad76-dee2-448c-9296-450001c91b43", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddb7ac0-3289-4997-9604-ffde5b785a51", "sighting_of_ref": "indicator--ce327085-910d-49de-8f1b-113d3d9e7ba9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba93609d-b8c7-4370-a5bf-cf95f2053334", "sighting_of_ref": "indicator--6e65cfd9-1f54-4fc1-8d3c-b202a28df8ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4a8715-b923-4bdd-9bfe-b911679af606", "sighting_of_ref": "indicator--1b0f10a7-5a71-4bf7-99c1-9cae1c4da4b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d77320e-d803-4aa0-b1ba-3b40bda59efc", "sighting_of_ref": "indicator--dccd52a8-aabb-4abe-a85a-2bd741a7fa2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef888cdf-db56-45d9-8fee-b66fa0c1e681", "sighting_of_ref": "indicator--d569f179-90d6-4353-ac45-3772779b8e0f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f2bf66-e42a-4734-afbe-d8fdb7e708a4", "sighting_of_ref": "indicator--05f39111-05f6-4369-84e4-0456d28e479a", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198212af-e146-42dc-b366-1a4cdda22c57", "sighting_of_ref": "indicator--01df232d-632b-4adb-882f-b778472bc3de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92418c19-b736-4602-aaf6-fb80d8fd33c1", "sighting_of_ref": "indicator--ff70c565-e952-406f-9c75-e8498193287c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b75b46-770a-4bd4-8037-5e8e98d6ae97", "sighting_of_ref": "indicator--b47a354e-f79a-4ca8-bff3-17295420eced", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97784141-b61c-4a85-acc6-b72da75757a5", "sighting_of_ref": "indicator--ddd506a7-3124-496a-9f1a-9dfd2e1eb36a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ec0349-a280-413e-b20a-ab40baf03b65", "sighting_of_ref": "indicator--0f2a56ba-1ec8-4501-815e-185cd85d160b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918b6cf4-481e-492c-a915-feac3229d021", "sighting_of_ref": "indicator--a1f808c2-5b7a-42fe-9c1d-8feb7e937f03", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d89d01-a6b1-4fd4-8b01-b255dc63be1b", "sighting_of_ref": "indicator--c587d6fc-b3e1-4e41-8d54-182fa4a6f9fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf1129a-31ac-453d-adec-1cab3180a50e", "sighting_of_ref": "indicator--da3006dc-a46a-49c9-a0eb-56f2148e8d5e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4e8368-63d4-45b6-aac9-103ee4fe4e6e", "sighting_of_ref": "indicator--669d3fac-48f6-4074-85ff-8d7e248ec177", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67add284-36ef-44e5-9eea-24e40c489222", "sighting_of_ref": "indicator--cf4af703-2cb6-46dc-926c-038828e2eaa6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabacd6c-550b-4aff-918b-aad1093300df", "sighting_of_ref": "indicator--144baa85-4db4-4c96-8d6d-55fb72bcb850", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1183a828-46f3-4d25-a14a-5c9acc509185", "sighting_of_ref": "indicator--428af4c6-3d9e-44ff-b985-be40990366fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bffa73b-f299-409e-8de9-bb6e252228a2", "sighting_of_ref": "indicator--4c6d804e-5892-47f3-bb36-0302286c1967", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6352e9a-f76c-4fe0-a798-c8e01dbf3421", "sighting_of_ref": "indicator--c1856848-41ad-4b26-b2f6-8bb3a73c5271", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35166c2a-7150-4e9c-aa9e-ce7cc2aa2b96", "sighting_of_ref": "indicator--99390ffb-4728-4a0a-b22f-5df6d720ec92", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317afe28-88c0-4e43-a3b0-5daa85fc98ce", "sighting_of_ref": "indicator--99686459-98d6-4bd7-8912-5cd396cfca73", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bac1e68-86fd-4183-b8ff-a95eb7f6b9e3", "sighting_of_ref": "indicator--d4f4a94e-5a5f-496f-aa32-edbc56e279a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfcb3af-6ee5-4bfa-a2b1-d657c130a6f3", "sighting_of_ref": "indicator--66588357-5187-4335-a172-cebf74614d9d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff76f2a7-74a0-4e14-a43f-de6bcf796bca", "sighting_of_ref": "indicator--7208a808-0896-40ff-92fe-7b5e7fd8b894", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361706a0-35f1-4387-99a5-95b5bc444d77", "sighting_of_ref": "indicator--ed9e3b5c-9ac5-4c4e-bfa9-f009ffc8da15", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9f8fc0-45fd-46f9-a506-eece630c286f", "sighting_of_ref": "indicator--bbac4e5d-b7f7-451c-9341-b8fb8c0a3cd8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49195179-6bfc-40f0-9b21-d2365232f433", "sighting_of_ref": "indicator--980c1c86-7032-4c5a-ad5c-69b4bf7b1b8d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf30f81-7248-4342-be7c-dea099abf31e", "sighting_of_ref": "indicator--99210fcd-b1c7-4f4f-aadb-eb31e4b332de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814b2d36-3e85-404e-a67d-6d83f09fc540", "sighting_of_ref": "indicator--05f297df-c935-4fb7-911b-7238b4047ba9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e774928c-abac-41e6-8358-1ee0f784687a", "sighting_of_ref": "indicator--70ebc76f-9f60-4b33-aad1-f158c673b049", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40dd957-7882-43aa-8ee3-3fbed45a85bf", "sighting_of_ref": "indicator--596676dd-063e-434e-9102-4f340f6ac46d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb2710f-9b35-4e7c-af61-aa4663e132d0", "sighting_of_ref": "indicator--872478af-4315-4cac-8ca6-d92cff356256", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a499d0-718a-4c18-8f94-edfcdeb6b8ba", "sighting_of_ref": "indicator--9373183d-3af0-4ef0-8004-2ef09f53d0fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190bbe63-8361-4898-b8e9-0009162b66ff", "sighting_of_ref": "indicator--bf634e71-11d2-49e6-9be4-2064da90940a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd09bb1-ef46-4ef6-a6aa-711442f47053", "sighting_of_ref": "indicator--f37c2f2d-03ea-4207-ad03-189e7c4b7950", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff27e555-7946-4c26-bdf2-7d6eb61926b0", "sighting_of_ref": "indicator--2591b6f2-b27c-46b8-b5ef-3f81bfdde07f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fcf031-24e9-4074-92d7-3af90bb77f96", "sighting_of_ref": "indicator--cf3d7cc5-67f5-4d08-8752-96e95fb0904d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c1eee6-41a0-4ee5-a7c6-27ecf31261c7", "sighting_of_ref": "indicator--a506dbf2-96fe-4354-9048-3ce9c1c784cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8145e77-ff2f-495c-8421-b836f8123ced", "sighting_of_ref": "indicator--49327bd4-8a70-41ea-9e58-226a2ee4c073", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e16615-5b2b-4ebd-ad42-c3f5ab2d5ae6", "sighting_of_ref": "indicator--7b6ccd04-f5bd-438c-b060-31548a5a5b62", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e8e651-5407-43ea-bc50-ec0906c8a5af", "sighting_of_ref": "indicator--f5e6e57e-230a-435e-af7c-4f7a76d6b865", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73663735-f3f4-482d-8785-a3cf7cbe6c5f", "sighting_of_ref": "indicator--18cfe3d1-db9e-431d-a18e-8cc8fe65db2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae474b0-289d-435f-9641-4d7a73b1060c", "sighting_of_ref": "indicator--69655fc1-9ae0-4462-8aa4-8f7eaa8a33f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837f315e-e7f0-4bb0-b525-ec96ce4d3800", "sighting_of_ref": "indicator--fae6468c-f7ea-4ac6-a35c-e9712007387f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814eae52-f1d0-4552-83f3-6bffe7d1c57c", "sighting_of_ref": "indicator--b18f0ef5-f11e-4c0a-b4e6-c29227b6dd4d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594ae9d0-7ef6-4111-ab08-129f41df870d", "sighting_of_ref": "indicator--b18f0ef5-f11e-4c0a-b4e6-c29227b6dd4d", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217ab6c5-4868-4ccc-bb10-556de7cfc52c", "sighting_of_ref": "indicator--f2431c9a-85b5-4fbf-a2ac-c9332cd283f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbd8b1e-8028-4fb1-a5fa-281f845c14bb", "sighting_of_ref": "indicator--69098de2-278c-4871-8c08-77387f849dcf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f01626-712d-4ec8-939a-a26f2e730285", "sighting_of_ref": "indicator--e331f660-e3c5-4a4a-b3ee-e740c0577600", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b8713c-e633-4b67-aeed-b5cd128c1ec4", "sighting_of_ref": "indicator--263eb75f-4dda-4ef9-bbff-3a31a5d6b344", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10be16f9-0db1-4b18-bd1f-06ac21be3430", "sighting_of_ref": "indicator--edf1664f-bb51-42c5-bf75-e26997676081", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c1bc48-63df-4d83-88f4-45b304cce223", "sighting_of_ref": "indicator--76bd2f96-a4fb-43b8-baae-9025b0f374b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dbdbf1-d46d-41a4-bc25-482e1c0d07de", "sighting_of_ref": "indicator--c4a8cf84-0499-42e8-b45a-fef4b8044c61", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b102d2bf-faf9-48f6-a661-92d0b3e47d10", "sighting_of_ref": "indicator--d1d98f33-05af-45ba-b9aa-f1d73a189e04", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bb78e9-bcf8-4d32-a4f1-5a935251876b", "sighting_of_ref": "indicator--3215e635-0cf1-4e1a-9511-ef9c591ac959", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f661bac0-17fe-471d-8e3c-7e77b27e7a9b", "sighting_of_ref": "indicator--e9419437-f890-4b39-b1b4-776db7c5afb5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dba7c27-8970-4878-bf08-6541ee6d933d", "sighting_of_ref": "indicator--21a41ba9-05d8-4ee3-94a1-4540c068c0be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c219509-545f-4d84-b3bf-05802e0c8187", "sighting_of_ref": "indicator--01c24c39-70d6-4cd9-a276-2bc089907956", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5019d5b-b264-49af-bf3b-a2aedfa79945", "sighting_of_ref": "indicator--7d54fa66-36bf-44a7-a2bc-9e17a8ea8f1e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7daa3e-b63f-43f1-9bb7-d69d6d6be6aa", "sighting_of_ref": "indicator--299334de-4dbb-47bc-bdc0-91e320f9d94c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a9fd3d-d398-41cc-bde2-41c5e860f69e", "sighting_of_ref": "indicator--a4c37f0d-43b6-4afc-b996-e96ffe43b781", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb99c0a9-13b4-46bd-bb1b-e607d5c8c50c", "sighting_of_ref": "indicator--fb46043e-7d89-4354-a716-cb04b99e6f17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089fdcc5-a32a-4373-b75e-5f61b918b1cb", "sighting_of_ref": "indicator--25835de9-e3f5-415e-8b68-ffe0f94bffe0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405e0a17-d73f-4070-8a0e-fc4f9807f33d", "sighting_of_ref": "indicator--0b706f69-513f-4789-bf90-86a333736811", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2379cf7-da46-48a0-a0a4-553c8280a2bb", "sighting_of_ref": "indicator--3c2a9f9f-f21a-4d79-9d10-6d2745b351ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf370db-1ab4-4735-8d5e-019ab72c9c5c", "sighting_of_ref": "indicator--a6d22f60-96a0-45b4-91b0-5d148f114e81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f7adc3-ce8f-424e-beb8-842fb8cd1e43", "sighting_of_ref": "indicator--62e3d0f9-a3a4-45a2-89be-6031c824ff9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2908e442-9ed5-4127-9501-74e00da4b98b", "sighting_of_ref": "indicator--567b39ad-1863-4248-862d-d2824ed66150", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab42507-ffe4-42cb-849a-a6ebf145b12a", "sighting_of_ref": "indicator--5969e5dc-e0c8-414c-a49a-1808dddd5617", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c799aa2a-651b-4c46-9c59-f6c227454f3d", "sighting_of_ref": "indicator--f5714c0b-d794-4aaf-949b-cbdedc8f3abc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ec9cd6-7899-4e3b-bd84-7b98cf95a3ee", "sighting_of_ref": "indicator--1fff170b-df24-400e-8d8f-2db615eb4402", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be66b733-94f2-4374-95e9-f8d0249a26a4", "sighting_of_ref": "indicator--8ea77b3d-cd7c-4baf-a5be-163f485575e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33363d8d-9696-4d70-96a1-02bc46c6f91f", "sighting_of_ref": "indicator--1169429b-569c-4535-911f-e5fa1ad5abdf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eaecc5-3ebc-4bdc-8e1f-31ec97dcfe19", "sighting_of_ref": "indicator--65f2f49f-a50f-4e15-afdf-4a27a251b024", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727863b2-cdeb-47cd-abe7-fe11ed80e671", "sighting_of_ref": "indicator--6a325a54-108c-47ad-bf92-9055b4fc06be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d0ad3e-5065-4596-8d8b-471bace36369", "sighting_of_ref": "indicator--aa35575d-09db-472e-b9a9-8092a71174af", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc9f7cf-b6b9-4386-979e-52b3563dd67a", "sighting_of_ref": "indicator--28de867f-5b61-4a68-9bdd-8d110c80aae6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994b2662-a6c2-421c-8937-b3e58b7a92a2", "sighting_of_ref": "indicator--f5d81562-ea3d-4f79-8721-13855f005d85", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd3e9a8-751d-42d3-8f78-cc6ea9cf495f", "sighting_of_ref": "indicator--85da2c7f-8b65-4df3-80a1-dbfd2cc74add", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d83a40c-2971-42fe-b874-25944b814d57", "sighting_of_ref": "indicator--07aa7eb2-3cb7-4d08-a2f4-c36b64ef62c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3295348b-b6b9-4798-98a4-902544197aa6", "sighting_of_ref": "indicator--b25ab6b3-e554-4187-9d86-f7e22d554a5e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b25e44-09a6-4f03-a7dd-0393748d2cfb", "sighting_of_ref": "indicator--042c3ccf-eed7-40d1-b462-87a79fe5155d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ff2541-ae41-432b-aef1-7f1d60a3ccea", "sighting_of_ref": "indicator--0f7344ab-e481-40a0-9ce4-ae1d6ac7f2fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d8ee70-2279-480b-8cb6-c370141d86ac", "sighting_of_ref": "indicator--abbd607b-cff5-4957-ad02-09aa5316eeed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c31ec9-2f41-432e-bd8a-47c97619ebe3", "sighting_of_ref": "indicator--568290cf-1fb0-4d73-b388-c07e53e10cd1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00677a7-a0b4-4d4c-a0f4-c1934db0d210", "sighting_of_ref": "indicator--c0543166-38ee-40ba-8fe8-97c842fd2424", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908c42d3-9a5f-46ac-b4be-e8c95bcf4720", "sighting_of_ref": "indicator--d62a1b37-7cc8-418d-ad68-da994a0461be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0865c2ea-e96d-492f-a7b3-5b3f2a649bbb", "sighting_of_ref": "indicator--1ea753b8-4d4d-44d6-8cf1-618b9e24babe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a47418-5e51-4079-9873-5fb8eacb861e", "sighting_of_ref": "indicator--df8f75b7-564c-4b7f-bfd4-8a49eddc76a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13537f8d-b73d-4097-905e-41ab6398be06", "sighting_of_ref": "indicator--d262410d-179c-4b8a-98bf-5b90766896fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1834c52d-dee4-4131-abc3-dd56248235db", "sighting_of_ref": "indicator--4c92ffce-0c91-40a2-989e-e10804a6ef98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef40e3d-59a7-4838-8fef-b40999c5f6e6", "sighting_of_ref": "indicator--4a56fca5-7ebb-4370-be4f-89d625b79b5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7f45de-d1d2-45fb-95f8-af096c42a86c", "sighting_of_ref": "indicator--f5a016ba-83f8-4585-bcc7-1fe6941fa38a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5d6095-dead-4b5c-9ed6-5e0988d92f52", "sighting_of_ref": "indicator--fc4feb1d-9e1d-4641-9c77-eb41defbae12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad10325-b947-4232-bd0a-19ee784e2092", "sighting_of_ref": "indicator--1a1fcc61-e493-46b7-a308-7aa61d15029b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581d85b9-7cca-4011-86d4-f5ffa3563178", "sighting_of_ref": "indicator--c53d0f69-0b70-4dc6-9812-92faa11348cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a645c7e7-39d6-4668-bcd7-ea63a308be1c", "sighting_of_ref": "indicator--da91a3c4-2c5a-4e50-bbec-d3160c2333fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c02e032-8eaf-4308-bef6-fa7fcbf00027", "sighting_of_ref": "indicator--030f1143-cfe5-46ce-97ae-af282a1dd4b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaeab742-6f4f-4192-86ef-22362d49285f", "sighting_of_ref": "indicator--2956c4c8-1dc2-44b5-a289-53658b1d4a76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9512374-daec-4ad6-9145-4cac7d77efe9", "sighting_of_ref": "indicator--b50025b3-0392-4b0c-8d71-57b3316fc718", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e37fa6-6de3-474d-bd92-810ee58b3423", "sighting_of_ref": "indicator--086389bf-83ce-4d06-89ca-7c098a1fb4b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f59baf-2c4d-4e58-b06d-5dc4e1f9012c", "sighting_of_ref": "indicator--13358c9c-54af-4ba1-8f6d-0099af353607", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181c2c89-ac4f-4a01-80e6-1b9cd9c942ab", "sighting_of_ref": "indicator--aedf697b-e048-4376-9696-ab9c7e9c87d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c911c4b-0cd4-404d-95f6-287a4b5880ec", "sighting_of_ref": "indicator--15bc5fbb-6555-4acb-a2c2-0eb8eb55195f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d79864c-c905-48f7-a082-b64182668321", "sighting_of_ref": "indicator--7e968078-b839-4297-9e0a-008627cc8eed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd28f92c-bc9f-4e1f-8b08-07d24ce7243c", "sighting_of_ref": "indicator--235b15f3-d145-438c-b884-5b73d1fa7d74", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f399fc38-9e05-4259-91d4-1e6821178057", "sighting_of_ref": "indicator--e2462003-d5c5-4763-a331-80e67cea69e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d92d6e-25e8-47d6-a63c-cd0e58e051d4", "sighting_of_ref": "indicator--12118268-e286-4217-b8f8-c31cd5501601", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450e7d91-9b6d-441a-93d1-738dbb58c27c", "sighting_of_ref": "indicator--b158e65e-c3de-47a8-b3cb-2df09d0ebfcc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c972381a-c527-4203-87dd-a67b969ee23b", "sighting_of_ref": "indicator--360e21a2-dbb9-4c57-bf2a-a2fd64cc525f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f71b90-97c8-467b-b4fa-c028317df199", "sighting_of_ref": "indicator--67f63287-0674-4bd5-8127-b45a87f17c4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45eafe0f-d783-40fa-b6bf-c4d67330e88f", "sighting_of_ref": "indicator--7cae0e4d-6789-47f1-ae9b-678cc5450870", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0ed320-9c11-4e22-a50a-4cef4455bb9c", "sighting_of_ref": "indicator--78ee4442-f52f-4c30-b99c-b54bf299f46d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eea13f-a06a-4d14-8453-a7a71cad0174", "sighting_of_ref": "indicator--81c81207-f714-4835-90fb-a24c12351976", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d21febb-45ce-457a-a46f-cb0c2926db8c", "sighting_of_ref": "indicator--30e01069-c268-41cd-bcaf-487620f7d67e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9414794-58e1-4dad-945a-651e24000966", "sighting_of_ref": "indicator--3fb75a55-7803-48b0-8864-c606b6ad92a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c67b2c6-02ec-4654-acca-0b56f4c7a970", "sighting_of_ref": "indicator--3fb75a55-7803-48b0-8864-c606b6ad92a5", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6caa31a-9025-4ee3-9aac-476d5a72e032", "sighting_of_ref": "indicator--f5c2a8cf-a81f-436a-a81a-43c8a812646c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdbeb2b-aa9e-48c6-a9ef-48a6214f5eae", "sighting_of_ref": "indicator--2a78bf86-55e1-42f5-adb7-95cdfba38688", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bb9539-f32b-47db-b3f0-08034deee400", "sighting_of_ref": "indicator--934786bf-b645-4e63-85ee-9cac2b7bbf1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa8a1fc-1f52-44bf-837e-d62d60a936f0", "sighting_of_ref": "indicator--948f8636-cfec-4537-aa29-8c6c493079bc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4e45f8-e302-4be2-9b8e-66d61a276531", "sighting_of_ref": "indicator--4f0c115c-76cf-4aec-8adc-864f29b338b1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ab3a60-6f00-49ec-8957-91767e9f7db6", "sighting_of_ref": "indicator--04769355-3c18-4f62-a9d2-801098a6424e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73ce8fe-6fc9-45d7-a740-d59e7a98015b", "sighting_of_ref": "indicator--b0917712-e829-4b1c-a992-118be9b94d54", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f328f9-1818-4452-aad8-a108029d5a81", "sighting_of_ref": "indicator--4a2a8f90-6f2f-4692-bf6e-bca0b092ce1a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730b8ce8-91e5-472c-9846-71b6c51b1a6c", "sighting_of_ref": "indicator--2cc2f798-6117-4726-a8cd-99a1efe01422", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e127c7e2-adce-4593-9516-34f12f19cb52", "sighting_of_ref": "indicator--f7ed50e5-bfab-49be-bafc-6e7c03f025a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d71ed76-038b-4462-ba92-1ef96058dfa8", "sighting_of_ref": "indicator--4d2b6e35-1952-45e3-bcdc-113d2d11e680", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6f5eb4-7f77-4984-bb83-388c8d7e0c9b", "sighting_of_ref": "indicator--bcb14b9e-a8cd-4aca-8589-87c804d49bd2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab3681e-c62b-4566-a3cb-a3a82afac24f", "sighting_of_ref": "indicator--77e4b12a-e31a-4719-9a9d-dd0160eff6de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad2ba65-8a03-4af4-82ba-db2fad3410a6", "sighting_of_ref": "indicator--340ec146-bb0c-4bbf-be53-d62f10d7ef41", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25843dc-9715-4ab3-8cab-c92ca38749fd", "sighting_of_ref": "indicator--b2d3ad40-fe1e-4367-8da3-147ffb6a4eb0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ada0b2-9285-4474-936f-f30947cd21ea", "sighting_of_ref": "indicator--62e44006-4739-4e24-ae2c-268f2f764274", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f695f82-4137-42e5-aa6b-9ff930773bcf", "sighting_of_ref": "indicator--62e44006-4739-4e24-ae2c-268f2f764274", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c776264-32b5-4667-a1f3-7b186c6386de", "sighting_of_ref": "indicator--b0e26f83-50ec-416c-a3b3-7d3aebf1e478", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85c46a2-870f-4ea4-ad1b-4b1e406383b6", "sighting_of_ref": "indicator--3c9b0c98-079c-45a8-a088-5e1d5c913de7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b2cef3-6dd2-4cb9-baa7-cbce5e621eda", "sighting_of_ref": "indicator--f90b2e86-9ee0-4c2a-9c85-8c0f9b18aa9c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fc8ef8-027b-46d9-b4c2-e80f0147636a", "sighting_of_ref": "indicator--4f66c90e-7eff-4795-b8f4-e1877345f8ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c657e39-9709-4c1b-977d-f4d46fe152da", "sighting_of_ref": "indicator--34c203c9-fbde-4aa5-b004-fa7804a2c59a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67a9b60-b213-47cc-b39b-31d1c3ae50a7", "sighting_of_ref": "indicator--8c5c6bc4-4a1d-41e0-a842-4689d4ac4c50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38706a21-a343-42cc-8642-00cedb0e5b15", "sighting_of_ref": "indicator--3a169101-b279-417b-8ce2-c2cdfe03a14c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b670ac-f5d6-42f7-b5a4-fba0d420d998", "sighting_of_ref": "indicator--273ede32-0e5b-431a-a870-955325bfb5f6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05677d7e-347e-44bb-9b9d-1021f5113734", "sighting_of_ref": "indicator--881073b0-609c-4e41-b8f4-b9681c004476", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b3e7c3-08c2-4732-ae45-dc603842d697", "sighting_of_ref": "indicator--dcfd13dd-42c1-45ed-8d99-b47c93346a49", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca6a6a4-9bc9-4ba9-9afe-0a1ad41b7983", "sighting_of_ref": "indicator--c8568f79-e71a-4631-9c03-4633ad8b7a92", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f032ff1-7fab-475c-8ed9-f18e270db8d7", "sighting_of_ref": "indicator--225f161a-1018-4891-af62-09013a0ca893", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fe304a-a54b-45f2-9be1-c4c6d03ad78a", "sighting_of_ref": "indicator--0614a9b3-34d6-43fc-b1c1-71f76efd6a3a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2381503d-af36-495b-8dfe-bbbdd4c09a94", "sighting_of_ref": "indicator--06cefd60-68a5-4b04-97c3-ccdc64fded6f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd284121-fe4b-473f-ab2a-144643a616d1", "sighting_of_ref": "indicator--9e1b158f-c70f-40df-9409-8c5fb6392771", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d054d87f-11fb-44ca-8030-955b50bfce63", "sighting_of_ref": "indicator--75dada3c-6e38-4c0a-8721-c6aabf2f52bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddceac1-0339-4093-85e0-996960be7338", "sighting_of_ref": "indicator--03881719-1c23-404e-8dde-d299380cd399", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707c4e00-15c9-4838-892d-99b89a957095", "sighting_of_ref": "indicator--4fca2a1a-5029-40e5-8fad-b97b20196759", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4560ab-6110-457f-9eab-05a29e12e9c8", "sighting_of_ref": "indicator--a9c4d92f-6d99-4c2d-89ad-efb57d6e35da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fea95ea-8c37-44cc-a47b-eb2a5958591d", "sighting_of_ref": "indicator--806fd650-8ba0-4f48-8bf7-7c111cb4e35b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cec614-ea9a-4eb8-95d9-fd397a00dc69", "sighting_of_ref": "indicator--9ba5299a-8eda-485b-a101-81e2481bdc80", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8480c50f-8bf4-4696-a88f-1b230f86b53b", "sighting_of_ref": "indicator--14894ed4-1696-404d-b989-25e5a899055b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a87e8b-f03a-4b27-a18c-b97d47853050", "sighting_of_ref": "indicator--1c6976b0-dd10-43ae-8439-e812bdebcd61", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d5c169-a175-494b-8b3b-1ce676de5790", "sighting_of_ref": "indicator--59e4e503-8bf5-4d07-9e44-00f17e5bb944", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1bda73-20a8-4dd2-b69c-3f10d71e64c5", "sighting_of_ref": "indicator--f5e63985-ce8c-4dbf-afcc-917aa6bc0eda", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34898190-137a-47dd-8345-2f541855721b", "sighting_of_ref": "indicator--e40f8998-b70d-4733-a24c-84f814506719", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69319704-45c7-40eb-8119-14e901690bd6", "sighting_of_ref": "indicator--9b5d9de1-cf53-450d-9cdf-757c53dba9b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d955de18-7b78-4f28-97e0-fc96e6a4f4a6", "sighting_of_ref": "indicator--daecebd1-2555-4c6e-b028-e3c6dd5ec61b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf194f9-d49e-4604-878f-2bd35761795f", "sighting_of_ref": "indicator--4e69fc31-f0cf-45d3-bd4f-0f91ec44e21f", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f9258c-a628-424c-bf18-9bb9a6eb2284", "sighting_of_ref": "indicator--862ddcf9-eec6-4fc3-b83f-adfc41e28780", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5a151d-7b1a-4368-a9d7-8de8dce421c6", "sighting_of_ref": "indicator--0beec788-cdd9-4d3d-810e-7200bab800dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ba347e-b65e-4489-b2da-72bb879229e8", "sighting_of_ref": "indicator--ce4e73d1-1962-485c-b8d7-89cb67850720", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c37f5e-95eb-41ad-892d-bc2d07611958", "sighting_of_ref": "indicator--bea5feb1-155c-4e17-bce3-af78d1067f50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f17418-7443-4189-883f-dfa27de3a0eb", "sighting_of_ref": "indicator--6a667aad-6257-43a8-aa5f-fab57cfb13af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0410cbc5-a793-4191-a0ab-d85a3bb173a1", "sighting_of_ref": "indicator--71693581-dafd-44c9-a1ea-4dc8d0a31a83", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecd58a9-2ca5-4ce8-914a-c3b46efe34c1", "sighting_of_ref": "indicator--a110e0ad-f729-4745-89f9-3244aa0e8f58", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c03a607-0754-4af5-8f63-3fb9df32a935", "sighting_of_ref": "indicator--fdc129a4-e13e-46db-a55a-14f39991ba5f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ea587c-f28d-4db1-9bcf-d0914614aca6", "sighting_of_ref": "indicator--01bbc1ea-75b4-4734-88d5-1b9d60920788", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47bc59f-7a91-4261-b64b-2ff8dbd02056", "sighting_of_ref": "indicator--ea24c775-d2f7-41e2-b052-a113985dc5ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8319fd24-1f15-449c-802f-7bfaede9d1a5", "sighting_of_ref": "indicator--03e740df-ac2f-4a8e-9e9a-94d1e9eb92a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee98c31e-daa1-435e-926a-4f5c1f1531a3", "sighting_of_ref": "indicator--38837140-78c8-4194-b4b5-6800e02b4dce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ea08b9-4320-48a2-9291-948d3406eac9", "sighting_of_ref": "indicator--5a8e5f0d-faf7-4fdc-8972-6ce301bcc2b1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3463767b-60f1-44bc-bf9a-83cb0c0b11d9", "sighting_of_ref": "indicator--ad267823-8825-4544-a8c7-5a9936447981", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4891747-89a6-40d1-810a-a48b473324c1", "sighting_of_ref": "indicator--2d9a3000-6feb-4df9-a329-5ab144289732", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf534152-8206-4f06-a939-ac2928e98580", "sighting_of_ref": "indicator--f5fc638b-9e1b-481e-8aee-492511eeb752", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62e1d50-b88f-44df-888f-7461f57ba101", "sighting_of_ref": "indicator--df7ae8e7-d774-4ab8-a5cf-75fa78c6138f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f18390-2547-4d20-974c-c3ecc744b66b", "sighting_of_ref": "indicator--f6b23e09-f443-45ce-90d8-477cf124d1c5", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d1a1df-a2bf-49b9-b362-77d8c0149e9e", "sighting_of_ref": "indicator--de621424-2c35-4326-a164-16794e8a9b11", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2272e1-5a3e-4d17-bfe0-b127d194fb8a", "sighting_of_ref": "indicator--fbbdabd3-2af6-493b-89f5-a39e99479aa0", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed529546-30ac-4d93-8ac1-2fa1308bef9c", "sighting_of_ref": "indicator--317abf95-a486-4f8b-b522-82d7751d51c5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae5557d-eef5-4a89-88b4-56f685a39ef0", "sighting_of_ref": "indicator--f79f0f41-e1d0-49cc-8900-b430fee2d02e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c73be1-8c7b-44b7-9c77-c3273ac1b9e8", "sighting_of_ref": "indicator--8c10e8b2-60e2-4e64-9aa9-47d6752cfbfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715dbd1a-7965-4021-bac3-f329df3918b7", "sighting_of_ref": "indicator--9bdd08cc-6fbd-480c-afc9-88d84ae9aee9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8a2e91-a42f-4441-a255-79f9fc75f653", "sighting_of_ref": "indicator--575d12b9-7c87-4671-8bea-6650dde5bfbc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8437f33-8c4e-408e-b696-d29f9d0c071b", "sighting_of_ref": "indicator--f1af1908-5f57-4a04-8521-0e134ec5b047", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d7f269-394e-442d-b0cd-4b7388eb10f5", "sighting_of_ref": "indicator--b950ae8e-ee5b-40f4-971b-e429b372f046", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd27cc4-b519-4d61-9746-0a2813535a99", "sighting_of_ref": "indicator--aa26bd63-78db-4e30-885d-b3b4d8edc347", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e9b5eb-9c63-49ef-80a0-e8cf413a4665", "sighting_of_ref": "indicator--5dcfc395-ffef-4da4-b9a5-bca7bd2139f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaeb7933-d68e-4c44-9fc9-3bd37f485dae", "sighting_of_ref": "indicator--f513524a-97c6-46ad-b11b-87b60bd0e4ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e9c45e-288d-4883-a614-b3bc17b356e9", "sighting_of_ref": "indicator--d0e3665d-48ad-4926-9a68-a98c30b0f59c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e39f85-6748-43d3-a0d9-2bc66108668c", "sighting_of_ref": "indicator--7dbb50d7-3179-4587-b2dd-e842c08552a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb20b341-44d4-4bdc-aee1-7fbb2581ae57", "sighting_of_ref": "indicator--369863c1-694a-4ea6-8717-3438569c9c50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c801ae7-ba4a-4c1f-b59e-a36e45ad3aaf", "sighting_of_ref": "indicator--3c6df1b2-a9ad-4090-8ab6-b35f879867c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b652eb02-4c48-4efc-abc0-214953cfa034", "sighting_of_ref": "indicator--096b05df-e02a-48c2-966a-1def913998f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2a6510-e343-4424-8749-a3dbebd0a388", "sighting_of_ref": "indicator--ac5ff358-fa75-4f13-b747-9557428d1307", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b2a4ac-2b2e-4aab-8124-00565286a6c9", "sighting_of_ref": "indicator--37d8d6d4-a8ab-4267-93f7-9e4e82e4ef9e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368c06e6-9419-48b7-b37e-dcdd79b3f691", "sighting_of_ref": "indicator--a2727f06-7608-4a73-9b49-ea737b0ac9f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dd6404-018d-463a-8699-805656cf301b", "sighting_of_ref": "indicator--e238da06-9e87-4858-b8ae-d5820a8d268e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01c4c59-f8d6-4268-8109-a4d93f799384", "sighting_of_ref": "indicator--76ba1e77-95c9-4a1d-b858-cce8747c4644", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca60eb01-8677-4506-b550-86adf33053ac", "sighting_of_ref": "indicator--8af06794-da5f-428b-82fc-37639fb9fdcc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074138c9-7267-413f-a1ae-50af075b74f9", "sighting_of_ref": "indicator--62b73f3f-b035-4462-914c-afe6a5d55665", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98d1c5c-4dd3-4ba5-b9f5-21e779dcd23d", "sighting_of_ref": "indicator--cea3d043-cce7-4b1b-8f4a-01ad37721c4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f57bf18-c10e-4317-bee6-b0531acf307a", "sighting_of_ref": "indicator--6274e8fa-0cfa-4016-bb45-8afd6bd17766", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da276a3-2bbd-44af-ab76-afa2ff086eea", "sighting_of_ref": "indicator--0d1a31b4-cdc4-4d3f-a040-1803c916b901", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e5b08b-3ddb-493f-92a5-c6d18bb631af", "sighting_of_ref": "indicator--fc5d4b44-a874-4c87-b1c5-ef4c733ab3e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c0c602-8c20-4fc6-ae6b-494688b327ce", "sighting_of_ref": "indicator--34dd5c2b-5b32-42fe-ac44-8ddd6f2e1d46", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f5621d-b8ec-4ab8-a9b8-00c20697d262", "sighting_of_ref": "indicator--55c5f8c4-aaaa-4c63-9679-df7ad999b2fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a825f8f-c866-411f-8ac7-64b7db66643e", "sighting_of_ref": "indicator--a2861411-4284-4139-b098-440846a836d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58efbaf5-e6f8-4b57-8a6c-3ba2c70a7d79", "sighting_of_ref": "indicator--4b0bc68c-e2aa-4ec5-8cbd-50166ae5d3b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29028dd7-0f73-43ab-87cf-5776c7f3df30", "sighting_of_ref": "indicator--21b3df19-74af-4b73-8318-5b3b3fba27c5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c745d9e5-86a8-49a5-afcb-ebf02079a921", "sighting_of_ref": "indicator--fe14b0f6-61d6-4310-aa98-7f1ababeffec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e93221-5b69-4d6c-91be-7fd5731ce9d1", "sighting_of_ref": "indicator--9a737d1e-0fec-4391-9f33-1eb9e85b8a17", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f471469-e409-4a5c-a49b-4eb7b89ab97e", "sighting_of_ref": "indicator--9a737d1e-0fec-4391-9f33-1eb9e85b8a17", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa1156f-5458-4522-bcd2-f0a890c62e3c", "sighting_of_ref": "indicator--df440f47-13b8-41e8-996a-400958d47e1f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971c0f7b-c2fe-4c92-800c-dfe886413e59", "sighting_of_ref": "indicator--07329f7a-4a2d-4ded-ab86-54258fd9ef2d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c505692c-f396-422f-8fcf-209971441346", "sighting_of_ref": "indicator--07329f7a-4a2d-4ded-ab86-54258fd9ef2d", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53bece2-6998-49e7-b0ca-e81a6bb22b75", "sighting_of_ref": "indicator--8b6c1725-9470-454b-bf2e-94b74ba5cd91", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdb77d8-cf41-4fa6-bc54-22310589a2a7", "sighting_of_ref": "indicator--fb34faa4-9c07-4c10-9215-2257df806938", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711352cd-6016-43fe-980b-80a6aa8daf5c", "sighting_of_ref": "indicator--c92ad425-0614-40be-ab5c-37de9ac4d006", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567ace92-ad45-43f0-90c9-dee4ad138975", "sighting_of_ref": "indicator--752f2caf-044a-4c82-92b5-7540380684a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71886a17-3268-4a97-bcd2-debf875a6cb3", "sighting_of_ref": "indicator--445b5d2e-c382-4275-aace-9a59d3af76d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679a6d6c-5015-4f90-9a03-026e20ad4e3f", "sighting_of_ref": "indicator--8126576a-8ce2-4344-86ca-80e0b0aaa072", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f37b6ba-6b93-4cc2-b265-62111e128a35", "sighting_of_ref": "indicator--da7e7370-9fd7-4e63-b4e2-55ba36fa1aca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a158a8-5a3d-480a-a2fb-00c80f555b39", "sighting_of_ref": "indicator--e733f72b-3692-4c85-85d3-276d1bcabb6b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d9a14a-ea55-43b2-8b9e-e385948aba01", "sighting_of_ref": "indicator--9b4d0aa5-9165-4833-94bc-e3056b03d14d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b761c23-1c41-40da-97a6-9005612ddc10", "sighting_of_ref": "indicator--a64f76ce-8ce7-4934-8f98-a1d709356d4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797ea9b3-3c80-4bc9-859c-b4942152b921", "sighting_of_ref": "indicator--8c0ab45a-66db-402e-a73a-b8248d67e96a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebfe497-d0f5-4820-a48c-59bb677e113f", "sighting_of_ref": "indicator--12db6ce1-6044-4fb2-8477-aa17c1016d70", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bef36b4-437c-49d5-8f33-84fa3c33ce0b", "sighting_of_ref": "indicator--12db6ce1-6044-4fb2-8477-aa17c1016d70", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c78a39-a400-46a4-8345-c65fe1b01e1c", "sighting_of_ref": "indicator--0c848846-48c3-4b76-b6f8-698cf2084c72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faa0d70-98d7-4158-824e-2ec0ec3f77f4", "sighting_of_ref": "indicator--43f67f8a-c7e6-4a9c-b527-4c22d49a89fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddef42cb-0281-4c9a-aa97-9dacc85c4e14", "sighting_of_ref": "indicator--ca47b73d-67b1-433a-9d5a-b019161f7fb5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca97c5d4-9210-4b37-b6d6-7140f165e62c", "sighting_of_ref": "indicator--090561ba-43c3-4fed-ab43-f1858923c349", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef33222-15bf-416a-8f57-1fbed9eb040d", "sighting_of_ref": "indicator--c3c3c294-90ce-43da-86ee-dc6330517f72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03eed42-8684-42a5-8d6d-628f2186ca31", "sighting_of_ref": "indicator--75500679-0f5f-4a69-9f2a-130f9c87892e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c4eab7-21ae-4398-842b-0d05a7cb7099", "sighting_of_ref": "indicator--16077da3-d2d1-445b-bee7-98d6798d8a80", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83380b97-f446-4b4b-aa2f-5e9f21ff350f", "sighting_of_ref": "indicator--c677c359-934c-4974-9ac4-6301629e0b4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1f5418-4e14-4ae7-a95d-9d6023741ef7", "sighting_of_ref": "indicator--aea49139-a331-4fe5-9ed1-d7e952bb1107", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3feb131f-9d0e-48cb-a56f-c76e1c37e463", "sighting_of_ref": "indicator--97bbf861-35f9-4782-a0d6-aef32a204b42", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63610e0-24cc-436a-a699-4abe9a70bb93", "sighting_of_ref": "indicator--0ddb2e2b-29e9-4777-9367-3ba783bdbf5e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828a0b11-0424-4ed5-9dc1-0c35221732dc", "sighting_of_ref": "indicator--b3879caa-a496-4507-9c17-7376591ed1af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057bbde7-ddd2-480a-8eac-8f9eeb5ecb96", "sighting_of_ref": "indicator--6fc6fedf-950a-4960-81ca-d46391cc9f82", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afce1d2c-7c98-4faf-a50e-a209f7423bf3", "sighting_of_ref": "indicator--fd3fb0fb-5fa5-4d3d-b35b-6aa826263036", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abaacad-d340-4c2e-9e59-bdbda5b184cd", "sighting_of_ref": "indicator--1c2a8a1e-9b2e-49b1-b0aa-590906c9a848", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7829b21b-636b-48b9-b386-c451633d5256", "sighting_of_ref": "indicator--ff604153-22c1-4dd8-bb32-257a21ce5a92", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72bcb05-8cef-4f45-a089-6f4aca2f07a3", "sighting_of_ref": "indicator--e1df6285-f0c8-439d-a5f0-a4c978b19689", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0702e273-25c1-45c2-a35e-86d039945bde", "sighting_of_ref": "indicator--6b9c0d69-13fa-4c89-8674-e90d3cb88285", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773ef3a4-346c-47e9-b53f-54c53b78ca70", "sighting_of_ref": "indicator--b0f1ec39-cef2-41ed-8596-79085c5a236f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d03efc-b09d-42db-a55a-0485f84651be", "sighting_of_ref": "indicator--bc777b70-51e8-47a4-9051-c20391abf92b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ab8402-3303-4ed8-b85b-fef3ddd4d677", "sighting_of_ref": "indicator--8e5774c1-2833-4b61-93cc-07cc4baa8126", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcce627-fe7e-45d6-a5b3-c181164a49e4", "sighting_of_ref": "indicator--b936dd64-1271-4cd7-b116-b627e2d9e53b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5247bf20-05f9-44d9-9871-239cee0475ef", "sighting_of_ref": "indicator--ff1cbff5-0fbf-4770-a339-4d3f072f7057", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef55a14-2d1d-47f9-8698-4a90f161a7a3", "sighting_of_ref": "indicator--19fd0108-9a0c-493f-bda2-1cce93ae8d65", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61107423-c4b6-4e0c-9bcc-096c2d5713d4", "sighting_of_ref": "indicator--87672be5-633f-416f-91ce-cab506aff2d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b0ecf4-78d7-4d68-91dd-f75a11c8fb00", "sighting_of_ref": "indicator--09ca241f-b9d7-4f9a-9f21-c47164f86c12", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d4cff2-3f60-4a64-ba25-b117df651a7c", "sighting_of_ref": "indicator--527b6bc2-c032-4952-8fab-963be46b388b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d895cc-ec1a-4cdb-955f-7fb9c0531659", "sighting_of_ref": "indicator--4986afc7-b984-42b1-93f8-9919c3ece92b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759466ee-2b9b-4984-8d4a-b449f1c30c65", "sighting_of_ref": "indicator--bed63d9e-bd4f-4562-a46a-5746e5b6b98c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ba664c-f745-4c05-9263-321e05a75522", "sighting_of_ref": "indicator--ececf92c-a49e-4ffe-841f-0940457aa527", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71453491-f210-4030-acec-782f88f48f3c", "sighting_of_ref": "indicator--bb67a235-81b4-4103-be62-99909086ce57", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cfeb4b-7712-4917-90a2-9a57510f1797", "sighting_of_ref": "indicator--7243be34-d807-47c2-8248-5992da9dd6d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07be604-f95a-4dd3-803d-2b0b92eb8118", "sighting_of_ref": "indicator--defb955a-0ae7-4518-aa5a-ebc7e89671c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b7f172-7f00-4c4b-abfd-891ecb54ee20", "sighting_of_ref": "indicator--f63504ea-3511-420e-a099-9b6d9626519b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029e2d02-74f7-47fb-bad9-391f3ba4a15b", "sighting_of_ref": "indicator--ab5a3e3d-b3b8-4f35-8621-c035d09f810d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f89e03-eef5-4a81-85c5-8dc036f7e0f0", "sighting_of_ref": "indicator--647aca28-f642-4be2-9408-53dc6d0d3037", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973969e3-9ff1-40db-b1bf-325e69792702", "sighting_of_ref": "indicator--0c51c523-ce7c-4707-963c-86eb207b27de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01165dd1-8614-47d3-9d16-91ffa12b9269", "sighting_of_ref": "indicator--f8ccd486-2423-42fb-9d53-6ad7f19335c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cdf6a9-260b-4bd2-ac7f-3f86b9eb5e06", "sighting_of_ref": "indicator--9ce96697-e8c2-4236-ab34-a0fa6f8c8756", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b272a5e5-d20e-40fb-a153-bc34f45875eb", "sighting_of_ref": "indicator--e30575fb-f7b0-4b01-b55c-65cdb9e506b2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8200cf0-290a-4d9b-891a-0cf04bf56db7", "sighting_of_ref": "indicator--ddbc63c7-1e8a-4cde-9f41-36737c3a5097", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f090f0a1-9d51-4a7f-9fea-0612724b5d28", "sighting_of_ref": "indicator--842868f7-c69a-4dde-b1ec-0aac5e233cad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd786114-1a9b-4fe9-9592-bc814e198ca2", "sighting_of_ref": "indicator--2ebc3d40-87d3-4d44-a23f-0a85764a4e2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9e1c6a-fa68-4031-9203-cf0b20be233c", "sighting_of_ref": "indicator--e96de2a8-f1d7-44f3-9250-522665a8ab15", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04d5a23-65a3-4a20-833f-e99e899063b1", "sighting_of_ref": "indicator--7f417485-7e81-4aef-bc5d-95c193430585", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ddf8d0-5d65-4542-b797-97dd19c45a64", "sighting_of_ref": "indicator--8c4f2464-137a-41a9-b624-6fe34b4af225", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095ca0ec-89e8-4b0b-85dd-1a150a5aa933", "sighting_of_ref": "indicator--cc5bc250-0cfe-4afb-84ba-d72540995ee0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1c8a3d-aae7-43ec-857a-989852714df3", "sighting_of_ref": "indicator--004f917a-556a-4f18-ae2a-fe2423ee5c6c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a4d520-4fe8-40be-ae8c-d59efabe4126", "sighting_of_ref": "indicator--b31b442a-c316-46bc-86a1-27cc24e681f4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb50a954-946f-4cf5-8057-6be912b4feca", "sighting_of_ref": "indicator--4eb104cc-5813-4b64-a36c-64e89b8c1c5e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03394a0-edeb-4068-b390-01b89f0fb9ad", "sighting_of_ref": "indicator--74593627-6ba8-4188-beef-2ab0bd60fba6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d2dda7-9084-4177-ba5d-48a1624faa52", "sighting_of_ref": "indicator--29fa7bfc-ea7d-428e-8e79-eb812a8abb42", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db93db4-2090-4946-9d38-83442e10c77f", "sighting_of_ref": "indicator--59622ffe-84d9-4944-a043-ae0d35fc14c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2335cef5-41da-428e-9580-c01ccd9be13b", "sighting_of_ref": "indicator--3c1babb7-5c2f-4d25-9b82-81e947f38077", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8df93c4-641a-4eed-a36d-39f2e587ff66", "sighting_of_ref": "indicator--68f91062-a0a3-4f08-a703-fd821fdf8355", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a816e2c6-284a-48f2-84e2-6d3ee03a1253", "sighting_of_ref": "indicator--43eaa790-cb7d-4c74-9614-5f8d9e0f1c2e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b591a891-7204-4ab3-a16e-339d04960b5e", "sighting_of_ref": "indicator--0ee03560-f43c-43dd-bf57-5e8c58c75b75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec55987-104f-4a19-ab23-e53d5af02775", "sighting_of_ref": "indicator--f38331ee-bab4-4065-a537-de00dea9f6e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40034a5-e26b-4105-996e-e987d5e197f1", "sighting_of_ref": "indicator--164eacdf-ed36-45b5-acb6-6a24e601a68c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023c82b4-55b1-423c-ace9-14dcce4a84f8", "sighting_of_ref": "indicator--164eacdf-ed36-45b5-acb6-6a24e601a68c", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ad5090-fe4d-417a-b51f-6b87934f6ed3", "sighting_of_ref": "indicator--164eacdf-ed36-45b5-acb6-6a24e601a68c", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e003f4-2585-4bc0-8c15-9ba4e93880f4", "sighting_of_ref": "indicator--50424605-31a8-4f74-911b-21fe570e103b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77261e77-103f-48bb-96f9-db51e944ee0a", "sighting_of_ref": "indicator--50424605-31a8-4f74-911b-21fe570e103b", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fda3c7a-b206-46f7-b7a3-b25a0caa0999", "sighting_of_ref": "indicator--50424605-31a8-4f74-911b-21fe570e103b", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d8474b-3b01-45d9-b1fd-4d7ca1da34f6", "sighting_of_ref": "indicator--8f2b5011-b711-4fde-bb19-871a88d38f47", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb99fbb2-11e7-4b60-81ff-f29c1466ec2e", "sighting_of_ref": "indicator--04e5130d-8de6-4e8a-937b-9e572a851a80", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f92b10-5e8a-48e2-8a0f-7cee1b0abab1", "sighting_of_ref": "indicator--5ce12660-0641-4476-975f-a12512fc8113", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b547a668-ad1a-4790-a9d8-a4a93556d6fd", "sighting_of_ref": "indicator--5ecd73e8-e4ec-4782-a6ef-bdffa4634ba2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10be396d-eae6-470c-8c2d-8ee1126e0bd5", "sighting_of_ref": "indicator--690b1d92-623c-4f6e-a7df-3333e0562527", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dd5c2a-1f49-4303-aef5-eeb8718d2eca", "sighting_of_ref": "indicator--60cca7e8-79f7-4b45-945f-6164aba2b9d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8251618-a3ba-4677-a00a-cd59908f05e0", "sighting_of_ref": "indicator--418e2a73-a780-41c1-af8d-b7cebecb5076", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feacd39c-76e6-4b82-987e-479aa8adc6c3", "sighting_of_ref": "indicator--93dd5ae1-f0d7-4c25-bbc6-229bc68d7deb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529b3a08-654d-4605-9774-955076aa7d76", "sighting_of_ref": "indicator--799902b2-0ba5-4ff5-b0fc-aab7621b459d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d09cc5c-1d9a-4022-8edd-29df6cb59a4d", "sighting_of_ref": "indicator--e9bdcbe0-20e8-40e0-b825-57968c90d6d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b603e4a6-4a9b-4a25-98b2-86d5817f0ff7", "sighting_of_ref": "indicator--cd80d889-8575-4c9f-8940-70a101997642", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef46f0f-dd3f-4e63-b0de-cd215ff2da3e", "sighting_of_ref": "indicator--6a87ef07-646a-44a8-80d0-3ad0569f52d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be4cda4-6379-4c82-ad17-31274071519e", "sighting_of_ref": "indicator--15d9c501-9bd8-4751-96d5-8f0417bb381f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f78e0a-3a18-498b-9acc-cf13b9e6c48a", "sighting_of_ref": "indicator--d0d108b7-dc58-4b0c-99ff-60ece2b60968", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f979f71-14fd-4148-94f9-f1b74b10ccb3", "sighting_of_ref": "indicator--854b20a1-6ac0-4ee4-8194-91704a4be5e7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab25f5a-211b-45b9-b2d7-d94f3b6c6eb9", "sighting_of_ref": "indicator--8871829e-8d33-4adb-b936-385ccec1dfd0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3b8477-0c30-49d7-8410-43270b2ac4cf", "sighting_of_ref": "indicator--ff3b2bfe-3b50-40ee-a426-47e210fcee91", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cdcd9f-fa95-4664-b66b-0dc7112d70e1", "sighting_of_ref": "indicator--d1765755-abac-41be-b572-0fc22ecc9428", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a688846a-0e75-4cfa-9cb0-b8115cebdae9", "sighting_of_ref": "indicator--dcb136f4-d848-4fda-be18-a2e6bdef6378", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6619ed-b1a1-4718-afea-52d81fa412a1", "sighting_of_ref": "indicator--14cab151-c359-4937-82db-7882b0e4a485", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ca12a5-1354-4c8b-bf76-ca2ba4645e80", "sighting_of_ref": "indicator--0ff87bfb-14fe-4822-86e9-6f6b95da4c6a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c8726a-0516-4a66-86bd-898849d22ea9", "sighting_of_ref": "indicator--01610b1c-17b0-4967-adce-7379832eee92", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b10332-fe88-4eb8-8217-91f810401921", "sighting_of_ref": "indicator--be3b0ae9-f8e4-457e-8282-5b9f14a832a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3350eecb-b632-4fb5-8bdc-c85943d168e4", "sighting_of_ref": "indicator--af672a07-defe-4b55-b206-2991b8ed9637", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaa4f5c-6508-4777-9086-b15c942197c4", "sighting_of_ref": "indicator--61e25a20-fe25-4a6c-a55e-59ec3a598548", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f458c08d-27f4-4b83-ac78-5ba2da56262e", "sighting_of_ref": "indicator--c0329854-47aa-4c41-8baa-435ec0516da2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dcf022-0532-4c9b-b97e-e1da4efb4d92", "sighting_of_ref": "indicator--081f646a-9982-433d-bbd6-2143d304616f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d1d94e-09f5-48ba-af3c-f0ad461487b2", "sighting_of_ref": "indicator--8d4e23e0-ec17-4a83-ae38-cc253ce86fd9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2cc841-3259-478b-b741-23ce9d074e1b", "sighting_of_ref": "indicator--f3f0bf7b-f5d9-4f20-8572-905d540bf285", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada23112-0653-4b76-b2c9-22f326209a2d", "sighting_of_ref": "indicator--0601fb81-aaf0-4f20-bc71-1772919e1edf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ff5b9c-2bfe-4448-9996-3c61a896358c", "sighting_of_ref": "indicator--1f216a57-0a68-4d3b-979d-92cbe0ba366b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dffdd96-313b-49e2-8be1-d9b77dc6bf6a", "sighting_of_ref": "indicator--e94737e3-5038-4444-9c58-388cbe8fd2a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343423bd-538d-4721-879d-0f0dd02da0e2", "sighting_of_ref": "indicator--ca92e161-7531-485f-823f-6cf090654652", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46285d88-75d4-4e78-9265-5dd76edc583d", "sighting_of_ref": "indicator--3c3e7811-ef2e-4c61-936c-09d4cc036dcc", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4585d9b-0fef-47e6-90ec-8995dbc49027", "sighting_of_ref": "indicator--c5dc7046-effe-46b2-96d5-3a156e962cd3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecb048b-ec50-4ba3-8629-9826544e553a", "sighting_of_ref": "indicator--719097ab-1520-4d68-b282-6a41f9ddfa9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b6e221-96f4-47c4-acd7-086689401da3", "sighting_of_ref": "indicator--d7578134-f4ce-4323-be54-325b8c8e3e37", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66652477-4db4-495e-ac35-56469dd3b048", "sighting_of_ref": "indicator--912d80ae-4bec-407f-902d-8d720c4a3a51", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e9a234-83e3-48ba-bbb4-b122c17df1c4", "sighting_of_ref": "indicator--266dd460-c21f-4f0f-b2dc-4fb87918d936", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa20d9e7-c1a1-45bd-9406-62e263f1785c", "sighting_of_ref": "indicator--ca9df4dc-5165-4383-9f4c-20310ed143be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5878df96-675e-48e9-baff-bfcd69752225", "sighting_of_ref": "indicator--bfeedd8c-e94b-4e9a-8d4f-177dcb1b34d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b938df3a-13c7-4558-887d-8af585a2ee86", "sighting_of_ref": "indicator--78a54817-2a03-409a-a7da-8741d8ae1529", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602f5098-7f4b-41d1-8dd2-1df738384abd", "sighting_of_ref": "indicator--ac260424-a833-4171-831e-2211bdd7c439", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d291c3-ff15-4d5b-a1c7-8cbb6402783a", "sighting_of_ref": "indicator--ac260424-a833-4171-831e-2211bdd7c439", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd19850-2a1b-42c5-ae33-6668520ad49e", "sighting_of_ref": "indicator--5c21b266-98cf-47b4-bc8f-e5adb478b168", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f081f03d-7d54-4ebf-a22a-9c36705065af", "sighting_of_ref": "indicator--5c21b266-98cf-47b4-bc8f-e5adb478b168", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca2798e-3a38-4395-a202-e25c99b0de16", "sighting_of_ref": "indicator--e75c1265-c186-4ccf-86e3-f48032e70870", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7858c87-5c39-4f93-96ee-a3210449900e", "sighting_of_ref": "indicator--5aabb0b7-7052-408b-8830-5aa8cc0754ca", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d770cfc4-4690-4299-9699-7f3ecdc7b2a4", "sighting_of_ref": "indicator--5aabb0b7-7052-408b-8830-5aa8cc0754ca", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a89b05-1712-466e-9e2f-e107a1252996", "sighting_of_ref": "indicator--37c90cc5-ca4b-46e7-87e7-6373d83cbc02", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b7b80c-bb06-4a9f-aa91-0588343eba53", "sighting_of_ref": "indicator--37c90cc5-ca4b-46e7-87e7-6373d83cbc02", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47da255b-7af0-4e4d-a54d-595e67d2e864", "sighting_of_ref": "indicator--cc89d145-7d04-459f-a5b7-150659a56630", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5d9e13-f237-431f-95fe-528df822d816", "sighting_of_ref": "indicator--cc89d145-7d04-459f-a5b7-150659a56630", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4be3a01-f603-47eb-9b3c-bf07bdba3528", "sighting_of_ref": "indicator--4464c494-3147-433c-8ca7-171fe9ebd113", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed58f085-2843-4ecc-9add-0dca47743b2b", "sighting_of_ref": "indicator--ae6e0d3b-10cf-4c62-8643-96bd01092fed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c307918-8168-4f3a-97fe-1bc0e555e0f4", "sighting_of_ref": "indicator--0c3e0d8a-f90b-4743-b44e-8f3e03adffab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be9b458-6781-4358-994c-daecf83b66de", "sighting_of_ref": "indicator--5d864d26-1b95-4ac2-a90a-29cf38f3ee01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd8b6ad-27cb-4a17-8b89-b79f0a27b7c0", "sighting_of_ref": "indicator--dc2d5069-47fa-47c0-b1ba-43f234498de1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22905796-ec51-449e-ad99-a9624c3822e8", "sighting_of_ref": "indicator--b0360aa4-5142-4124-b2ae-3951f4bdda82", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95ab13b-90aa-4495-b8c0-a8ab9d62e4e8", "sighting_of_ref": "indicator--da12f444-8fdc-4099-a60e-8c94b8e6a5ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb968d3-f79b-4639-b837-7e0473f74421", "sighting_of_ref": "indicator--a4707996-2c40-41b9-a076-b46909e33b81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404c2c49-ae52-4fe8-860f-5029ec923895", "sighting_of_ref": "indicator--51e45e91-ddbe-4a97-8d39-a7ae94be1acc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30ac528-9653-45a1-b185-a9e92e378088", "sighting_of_ref": "indicator--da6d1544-419f-4bf6-8131-a25668a78d1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe65560-0240-467e-a984-833f0009a534", "sighting_of_ref": "indicator--132393da-b533-49ad-9b22-d02b23784658", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a9a026-61e8-4083-93c2-d6a421798a92", "sighting_of_ref": "indicator--255b71df-f123-4dbe-9388-8c406910e421", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a04ee8-87f6-4ca2-a28a-09905413c99b", "sighting_of_ref": "indicator--3ad185cd-a579-4776-a6aa-f6db9575652d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1fc6d0-4e58-4f19-852d-469a83795284", "sighting_of_ref": "indicator--30246e21-5481-4846-a5af-3588d5f9d7fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63069bd-0aa9-4062-bd81-4922bfd3f55f", "sighting_of_ref": "indicator--604f057e-764a-4e95-92c4-cf28263bd515", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c4e336-8727-461f-a2f9-80fdc2e81d58", "sighting_of_ref": "indicator--42f2e62d-db11-4ef1-a670-77d58b54004f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12072dcc-74dd-46d7-845a-f32723491200", "sighting_of_ref": "indicator--f795ce55-f141-4593-9305-cf53f8b1de5b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521a13b2-5e49-44fc-bb81-7808184ba926", "sighting_of_ref": "indicator--b7a0d3be-ef18-4efe-b3a2-b526a6c88fdd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa2fb2b-fdb2-451d-b472-a8e5f32cedc0", "sighting_of_ref": "indicator--1c6418b4-cc8d-4b83-9cb6-c7cc3b6a20b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af4e8bd-0386-47e9-9c9c-bb84eaf5f9f9", "sighting_of_ref": "indicator--1500a3dc-3231-4407-b66e-164f79f31e6e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f567441-db20-4cc8-915b-e55cbeb362ff", "sighting_of_ref": "indicator--7b2b6113-a6c7-4ab3-8649-97b05d661f10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5769635a-4013-404e-837d-b589d067700f", "sighting_of_ref": "indicator--2414f222-4875-44e4-ad38-43ca4d50bb49", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18d70e0-e3cd-40c3-a0c9-7d159c608421", "sighting_of_ref": "indicator--52a97fd9-6043-4c69-9a3b-5ce85806173d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2243faa5-e877-46be-917d-1c8fe5c2f044", "sighting_of_ref": "indicator--50fbc36b-fe1a-4a07-9ead-13016e21c15f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5dccf1-e46e-4663-a6f2-cb2674b823d9", "sighting_of_ref": "indicator--9ff6730e-8496-445c-89d6-f842ebb31795", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02f02d1-fa4e-40c2-946b-55621e67217c", "sighting_of_ref": "indicator--0e149fb1-f68a-427f-819e-dcec7f7c36cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5900e1c3-1fdd-4606-be52-cd864b94fb5e", "sighting_of_ref": "indicator--cf29a359-5512-4762-8ffd-57731bd2b340", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cc3933-20c4-41ef-af6d-e61b8f02a01a", "sighting_of_ref": "indicator--7e5dc8cd-0590-4720-9b79-b5de685fcfa6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a1d7f1-9b6f-44b3-81c2-ba7d9e384b04", "sighting_of_ref": "indicator--f5f064a9-4617-450e-893a-b0ced980a469", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4603244f-7878-4084-9984-1784250ba2ef", "sighting_of_ref": "indicator--b4ca6883-5d56-481c-a203-973e1ca7ba45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b53a632-3f5b-4dc5-889e-6c59a3000b1f", "sighting_of_ref": "indicator--567bf957-bd4c-4bab-adb0-eb3a2f8225b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cd160a-d707-4c1c-a5e4-c98cf8c723ed", "sighting_of_ref": "indicator--331432af-645b-40ce-b352-0b25b4e8cd1a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd9a4c8-6049-4344-b4cf-1fff0fe88f2a", "sighting_of_ref": "indicator--7ea01d35-f215-470e-90fa-98199b10d297", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173a1807-f1fd-41a3-8dab-ccba9c739be0", "sighting_of_ref": "indicator--766cdad5-7e2d-47fc-9ff0-c1ebbd951d14", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d57c367-c525-4b92-8870-53574013f79c", "sighting_of_ref": "indicator--45e9cf5a-595e-4886-aa22-1a0e2fb49d2e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4540eb-91a2-4e2f-9592-3c637ffc54c7", "sighting_of_ref": "indicator--0bdbb574-3794-4e49-a8bb-cd5366fe3380", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8539ed1-6296-47f0-8741-21e0b8bc72f5", "sighting_of_ref": "indicator--36ef1276-86df-4393-ab63-973dc0308736", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0488041-0ce1-4062-8397-c142620d4679", "sighting_of_ref": "indicator--bb7f0d04-45b6-4e18-8aad-560ff49c2acd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26ee448-c9cd-4073-a689-67afdb57738e", "sighting_of_ref": "indicator--8fc18717-41be-4304-9bd1-d82688cb021f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df658f0-ede1-4375-887e-0d0297de9de6", "sighting_of_ref": "indicator--1e2986d3-d10e-4856-b581-9bb8d89b8917", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead5bfa0-d701-4751-bdb5-baec3bf28d3e", "sighting_of_ref": "indicator--8e1c3e11-59a5-43d3-85cc-ea46d0a65ccc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f0d31e-4917-4c7f-8552-08ea8643a387", "sighting_of_ref": "indicator--87d31a6d-d7fc-479b-8e0f-81a7dd325e8e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac45880-c31a-471e-b9d0-0f38a1f7f1db", "sighting_of_ref": "indicator--810b39d4-4161-4dd0-ad2d-a23dd5441476", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca0c716-6568-481f-ac78-eb1d13d73e83", "sighting_of_ref": "indicator--8ccb34cd-cb47-4277-b901-0a8562dbdf4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83d8234-a639-4dfb-88cb-bdf6dc90c9f1", "sighting_of_ref": "indicator--69d2d6f4-1eb1-4831-baad-35c519abacd3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a348e1d7-6cc3-4456-8472-ea9b2a7b0559", "sighting_of_ref": "indicator--77dcda82-baf3-4506-a6c2-6620ac38ade5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ecf9cc-ba78-4c7e-a884-78285c5993b6", "sighting_of_ref": "indicator--6cdae654-92d8-4548-bef9-643294a27656", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3056908-b42b-4553-9b74-260820fe3f0f", "sighting_of_ref": "indicator--ee66b091-c850-45ac-a8b9-fe56628f5093", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade69b8f-74dc-494b-9775-3ed2ea559fe7", "sighting_of_ref": "indicator--dc28b184-d254-43ff-b9d6-a914dfe27981", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a282de56-c51e-4846-a9b1-8426003f7a2b", "sighting_of_ref": "indicator--b10fddbb-b661-4c24-86e7-765e6a785a85", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a7097e-ba38-4e41-947f-e6467ae3a780", "sighting_of_ref": "indicator--8b046a80-1c6a-4358-b016-f7ebb35e87a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042d8a74-4ac9-4beb-bba4-dfa8e688f36d", "sighting_of_ref": "indicator--9b46aeb9-2eed-41ce-befc-fdc22a70f86f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e626fc-f0d6-4a7e-bdc7-67b6c9dfa19f", "sighting_of_ref": "indicator--d58d4999-37f9-4d0e-8d35-6976a9d47516", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baca03e-e307-4019-ac0e-1a4a975895aa", "sighting_of_ref": "indicator--2e8f4f59-3758-4be2-8f91-b326c80989b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f791c9d-4cb1-420f-a1b0-8cf4d39e52f8", "sighting_of_ref": "indicator--de28de98-7530-4abe-9bae-ee6ea55c4bc1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfbf3fe-2cfb-4505-8a35-c8dfcd546988", "sighting_of_ref": "indicator--79212578-06bb-47d2-afd6-aae6559e7d4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348031b3-4095-4ceb-b91d-4cf13a43ddbb", "sighting_of_ref": "indicator--b6b787bd-2aa1-4458-b971-a3b32e4e8be2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4038bc60-8ee2-40c7-8e88-092745124317", "sighting_of_ref": "indicator--cd002989-b1a6-43b0-82d9-427ff912dfec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53e7c61-23a5-4040-90ce-3733e4f66ab3", "sighting_of_ref": "indicator--7057ee49-66fc-4f80-964d-d994862b85f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f69f7a-1b1b-4e4d-a55c-5ba321c13807", "sighting_of_ref": "indicator--ccd51004-deaa-41af-9bd1-f0cdf19527e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de07866-b953-45ae-821a-a15a230d4659", "sighting_of_ref": "indicator--f39f2c0d-8984-46a5-bd1a-eba3f3827067", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1984b9f2-b78e-46dc-86cc-7c91051838cf", "sighting_of_ref": "indicator--2111e20f-66f2-497b-a806-7e71c2793975", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21aaded-ff07-42e7-a0b7-8b3ef8647af9", "sighting_of_ref": "indicator--4a7cd820-6ace-4ea8-8f54-6d059e71e144", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15c1938-a552-4baa-9597-f95e66a24bcc", "sighting_of_ref": "indicator--f010cf36-141e-4537-a12c-392cb5b92e0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009697a7-0027-415d-92a1-be331cfa0221", "sighting_of_ref": "indicator--991a5939-7203-4bcf-aac6-d5a68076a955", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a3cf1f-4e8e-4875-b954-136b157fe621", "sighting_of_ref": "indicator--3a4ddf03-5e73-41a2-a2f1-0115c6dabfb7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b916fca4-adf5-421b-bc1f-f33e18dd94ca", "sighting_of_ref": "indicator--c71d2349-5a28-4f10-b077-0040cc83419f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46edefde-92bf-4469-9a28-84a940fc64b6", "sighting_of_ref": "indicator--fb9d9e64-2a75-4487-9659-a19636acc3b2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dc51e0-84bc-4598-bc87-b4b97e4a40f0", "sighting_of_ref": "indicator--b9074574-4c7d-4926-8ead-09c25b71c228", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590ad370-a8a1-44d9-9ef9-3a957913f46f", "sighting_of_ref": "indicator--bdc6809c-9004-4954-9184-ca39cdcc0f9c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d43ae58-5cf1-470e-b519-626a7f510a4e", "sighting_of_ref": "indicator--79070f2e-df6d-4626-8fc0-1a4d1807e584", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726592c0-2368-4df7-bffe-d3cf95dfe5e2", "sighting_of_ref": "indicator--529b752d-4845-40dd-b8c6-a483d06f77c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a47ffd-a946-4f81-a5d1-e367eb9f1946", "sighting_of_ref": "indicator--98a93e1f-b21d-4a9f-bb1a-8748745896a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d8cf9b-03b1-4b33-bcf8-69cc758408a8", "sighting_of_ref": "indicator--f725ca8a-bb8d-40ad-8327-98bbdf38c0a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14195965-1daf-4073-926b-abe8b14eb325", "sighting_of_ref": "indicator--61ab151b-9aa7-4c12-9c6a-a9bf88fbfc68", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df69d782-f3e5-49b8-8df1-0d70c0fe75f1", "sighting_of_ref": "indicator--1bab4b8f-f92e-47d3-99dc-9f9013ff78ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd0ee09-2a41-4cd3-ae79-6c011f80406e", "sighting_of_ref": "indicator--5a1d52fe-de85-4751-b21c-bb51e04b2799", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e813d9f9-9a4e-4540-89e0-c0d1406832cc", "sighting_of_ref": "indicator--83306bad-53b2-4484-beee-f1ffd08ec96e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b541a4e-5958-4e75-a7b7-241ac287b023", "sighting_of_ref": "indicator--30316e68-3910-4e4e-8289-13382c7e0c23", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6116b7a-7f77-4123-8418-d1de831323fc", "sighting_of_ref": "indicator--5c6d7882-5140-40be-acde-f76e60dbdf4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c7997a-ab2c-485e-a790-726449f495f0", "sighting_of_ref": "indicator--c377ec24-728e-445f-a4a7-059fa83d48a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ff001c-3b67-42ed-88f5-3fbb4068dc8f", "sighting_of_ref": "indicator--9716a55d-259f-4fc7-adf1-0491df870fab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0336766c-674f-44ab-876c-287957c235c2", "sighting_of_ref": "indicator--a864537a-51c8-4949-9b5a-53f80ddae27c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59366a02-5611-4aad-9d43-eed92fbe6cda", "sighting_of_ref": "indicator--551c262d-e89a-4ae2-b1e9-6bbe36357f3f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed056179-574d-4f5f-829d-cac97c0d0b65", "sighting_of_ref": "indicator--e8e03e20-a744-4649-a81e-afc284f2d8c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba45fdca-ca4e-4997-9f0e-8822ad8dc36f", "sighting_of_ref": "indicator--f4f7f886-f4e9-41d3-94d2-057494e88fb2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1f0429-6c60-41a5-8f73-3bd22f6e4b41", "sighting_of_ref": "indicator--a44e5ee6-6f10-4ca2-b76e-8829e5031483", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf85495b-aec6-4018-ae6b-7021232d25c1", "sighting_of_ref": "indicator--8bae6e14-1856-4dbf-a58f-da832881458d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15be1549-8e73-4fa1-b3a5-0c740d0fa1e9", "sighting_of_ref": "indicator--eefca7f7-3842-445a-a306-a67765fa7944", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d722b16-16b1-476c-a553-741a0031c6ae", "sighting_of_ref": "indicator--47e4eddd-5900-4921-8894-dce0ac94d719", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8bf24f-6581-4b16-b04a-0786882d3840", "sighting_of_ref": "indicator--3e200fb4-4acb-4b6c-8e2a-9bf643d7334a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b0abb3-46be-4093-80a0-613adfe0eda7", "sighting_of_ref": "indicator--06362c8c-bc13-457e-9a57-41f872b761c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e75388-1ba4-46de-87a3-4b1b91ab8bdc", "sighting_of_ref": "indicator--71d326d0-9700-4a65-87e9-660fd436be04", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5ca9bd-70bb-4431-b004-0a2463857915", "sighting_of_ref": "indicator--5db60828-eff9-4daf-8072-8a3d8968a160", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a0c152-705d-42a9-bdc4-ec77df5a1ea9", "sighting_of_ref": "indicator--0775993d-a20d-4575-912e-fdf742285d71", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bb5c29-3cc9-4089-affd-4b36f7c52c48", "sighting_of_ref": "indicator--95b778bc-bc55-4b7e-b91d-f5255fde5f25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4a9760-cd20-4f21-b649-c28ebf40ab0d", "sighting_of_ref": "indicator--8f4eed78-bc7d-4047-a099-236446da4fe1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d13ae67-95a2-441b-bcef-f3c6cfdf061a", "sighting_of_ref": "indicator--8a8227f4-fd77-4175-9be5-f3231f7a1817", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fb34be-76b8-4e0f-8d66-99128d089d84", "sighting_of_ref": "indicator--8a8227f4-fd77-4175-9be5-f3231f7a1817", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bc4b29-4512-422e-a9e0-1a9f1e1da1fb", "sighting_of_ref": "indicator--8a8227f4-fd77-4175-9be5-f3231f7a1817", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4d179a-6aba-47ba-b6ec-5e59af8237c9", "sighting_of_ref": "indicator--efe5778f-d637-437e-b4a6-666eeed1752f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0299c33a-d577-4318-b2c4-6f9a11cb3739", "sighting_of_ref": "indicator--efe5778f-d637-437e-b4a6-666eeed1752f", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50653bb3-fa96-422e-83af-6a5afc92f6f7", "sighting_of_ref": "indicator--efe5778f-d637-437e-b4a6-666eeed1752f", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d53ee9-f1b2-40d7-8c03-5509253dbef7", "sighting_of_ref": "indicator--05c24bf4-a066-450f-b292-9299e396d1c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fe12ef-f146-4b15-a780-c31233162e23", "sighting_of_ref": "indicator--eb85a5ac-1dfc-41ff-981f-f1f9abf714af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6a0946-ac40-4ab7-bb92-33157a46a614", "sighting_of_ref": "indicator--46ffe74c-6d86-45ce-b4e9-2846fdd1c5d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106a76c6-2b4a-478a-901a-11966c2d748f", "sighting_of_ref": "indicator--bf3b9222-6a0a-4e9c-84d0-031c2c61f354", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d049c475-e8b9-4ea6-b969-218716dbe1ed", "sighting_of_ref": "indicator--2e15367b-c4e7-4ddb-b4e2-270389d36445", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9922ac58-0a48-479c-b665-2946d3de06e2", "sighting_of_ref": "indicator--03578c5f-4a3c-4d4a-ba7a-b78a9a14f61e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cd0395-adc6-4788-b57e-382483820c46", "sighting_of_ref": "indicator--f4e397ab-0b9e-4520-b43f-2b6a3e2a9fb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21944c9a-e929-43a5-b8c4-8e8177a41f26", "sighting_of_ref": "indicator--f1eafa15-552b-44f1-996f-8de9cb9fb275", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b6b0c6-14f6-4245-8e05-916e691a914d", "sighting_of_ref": "indicator--f1eafa15-552b-44f1-996f-8de9cb9fb275", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e368207e-1bf2-42ec-9250-7792a8a4a913", "sighting_of_ref": "indicator--9e85be6b-235d-419b-8959-478eeaf90d29", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61daf9b6-6cfa-4569-acb8-becbdff8de19", "sighting_of_ref": "indicator--067a3de5-57f7-4cc8-8d5b-182b6803994a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd3d5cc-2be1-4cda-938b-b579af3f2e8e", "sighting_of_ref": "indicator--bdd3c4b7-c56c-456c-9b5e-cc4f3165fb1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4d55ce-ee6c-4e6f-8d14-2896c13f7087", "sighting_of_ref": "indicator--6dae0a1f-cd05-4eb9-b5e1-04a1f04001c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6865305-bcf8-4ada-a055-e22d2f57e71e", "sighting_of_ref": "indicator--1d9a186c-cd90-4928-aed5-5e3a73a004f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1603d2-069a-4e94-a79e-ba7452dc9dbe", "sighting_of_ref": "indicator--3eb985fe-9adc-477d-9403-9282d0591056", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaa8107-ff0e-4d80-9d14-a5ed66aa16f9", "sighting_of_ref": "indicator--dd9a4005-237c-4cc7-87d2-044e7171a9fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad38ee5-da4f-43b3-92c4-6e8693324c50", "sighting_of_ref": "indicator--951aaef5-6df6-45ca-953d-11af7adea1d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25541d5a-c8a0-405d-9802-98558a15fb60", "sighting_of_ref": "indicator--20bd5e8a-b1ca-43bf-b7bb-6ab02269f393", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be51d152-b4dd-463d-8086-d6e5344da39b", "sighting_of_ref": "indicator--f1397ccf-4447-4c31-a350-111d770ff745", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9fdecf-3a20-42d8-a83a-d39c08db3bb8", "sighting_of_ref": "indicator--f1397ccf-4447-4c31-a350-111d770ff745", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8965892a-78ea-4476-a288-f288173ade18", "sighting_of_ref": "indicator--3d1f7ba7-eda4-4010-9c47-ec6d7e897601", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8ce623-7adf-4234-a006-c4129563decc", "sighting_of_ref": "indicator--8d95419d-6ad2-45ef-ae92-263af26d8472", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83211bf9-1152-4af4-8be1-245ae83455b6", "sighting_of_ref": "indicator--3c660d4e-efe2-4d3a-85d4-777c8ab7cfe8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd424277-e114-4e4b-b07e-21d5a9535b8d", "sighting_of_ref": "indicator--f41557a9-b027-42cf-9113-80a9e9720157", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4178df3a-2440-4762-bb80-4e2b80c71082", "sighting_of_ref": "indicator--4bc132f0-fe5c-4a40-8b4c-93b69b14dfa2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5696d9-f559-4139-ae98-82d68cd69ce7", "sighting_of_ref": "indicator--694fa23e-44ad-41d8-b39a-d3cce399d922", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7cdd94-128f-4f5f-936b-994b25930c1a", "sighting_of_ref": "indicator--c5202fa6-0bb2-4195-824b-1c691e05d5b6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bf2086-1ddb-4a34-a726-694c33a410bc", "sighting_of_ref": "indicator--24cbe473-f3aa-4002-93de-1bff42b746b5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324a52ae-eb51-4947-ae17-942636fb0f87", "sighting_of_ref": "indicator--ede4aea5-0793-47d2-9aee-bac8503db6f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c221925b-f0ab-4c9a-8cac-4a46d15dd83f", "sighting_of_ref": "indicator--249d2d33-69ea-48a3-a543-bff6e7e0202b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edff8ad0-3499-476a-a3a3-cd805d532197", "sighting_of_ref": "indicator--70ced8c8-33f8-4c55-b40a-30f801391fe6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593cd54f-0555-4cfd-8c5c-2324ab17fc6b", "sighting_of_ref": "indicator--16c9051b-b3ce-44cc-8c4c-2e6f4bca7d3d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed65efa4-0680-43f0-9755-e74c6f798504", "sighting_of_ref": "indicator--577a9629-5770-485d-b492-99ede8ae80d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0494bf4-a379-488d-ba0b-e55280843839", "sighting_of_ref": "indicator--e30c4ec6-f813-45bc-9d9a-4d28e1fc3b35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad32ecf-e78a-4de5-9065-c072795bb57d", "sighting_of_ref": "indicator--ab166bb0-860f-4e6f-9bb9-e6791e339b7c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc15b863-79c9-45e3-971c-ceb8eb24541c", "sighting_of_ref": "indicator--b1dcfb4d-ffa4-4b3c-85b4-2a0e5528a68e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d59d331-93bb-49d3-b8c0-d8db6bd4eb8c", "sighting_of_ref": "indicator--264e3021-5b3d-44b0-b88e-0af8f031b606", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1454beab-1d02-44b2-884b-17a6bdb99da2", "sighting_of_ref": "indicator--905eb929-af9f-40ec-97a5-028c04ee6872", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8887d4c-45c1-422d-8678-3c8d0ebf53cc", "sighting_of_ref": "indicator--4db0b543-1663-4a73-bf7f-b5f0b8df862d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7404d36b-4a78-41a8-95d8-8c7454ff4906", "sighting_of_ref": "indicator--a7c86565-730a-4aa7-a124-788577e359ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e6efc3-f0c5-4555-a3b4-92ca8ed7b3d0", "sighting_of_ref": "indicator--c613116d-fad8-421e-b3bd-2d3a3e82af50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749e92f2-7b6c-4f53-84d0-26fbe6d5d4c2", "sighting_of_ref": "indicator--c613116d-fad8-421e-b3bd-2d3a3e82af50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15a125b-4f50-4dee-ae4f-f88a45a3f54b", "sighting_of_ref": "indicator--b95b6ab2-e41b-45ce-b665-e503b79bb1fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a1c4b5-0250-4b60-be5d-e336ced99f17", "sighting_of_ref": "indicator--3ea86016-d84e-4b20-94e6-bf23989a2818", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e2315d-01c0-4f54-8e25-59ae64bd60a1", "sighting_of_ref": "indicator--26789491-7c79-48f9-958f-857c8a78a1dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1777308-11a9-4200-b052-5ae7a3106a63", "sighting_of_ref": "indicator--810f328f-955a-4458-bc90-7ca423325d4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c67507-0e03-4b33-aa7a-acd9d713ef74", "sighting_of_ref": "indicator--f67ccf0f-7392-4f92-a8a8-419e05dd8db5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1beb12f2-6fbf-493a-9c3e-33ecc19adc90", "sighting_of_ref": "indicator--00088607-4b2e-4f85-a071-88f27254ed18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75775aaa-546d-45ae-9095-0a14f3ea8db5", "sighting_of_ref": "indicator--984219bf-fc83-42f1-9e45-e753f2ebf2a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864aa1b2-f5cf-4eeb-85f1-2fea791760eb", "sighting_of_ref": "indicator--25c29183-7ecc-4b13-b67a-d0b352c9bd9c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115dc704-779f-42b1-b2c0-526413401747", "sighting_of_ref": "indicator--13f8d8d2-85be-46c7-91d5-10056a90e1f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0364dbf-1188-460e-b13e-8e2b6cc42c2d", "sighting_of_ref": "indicator--ce9ae65e-30ca-4c9e-8f6d-15ebbc2a8cc1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a58728-dd3c-4daf-bfe0-81f144aa1524", "sighting_of_ref": "indicator--22bd8575-4181-4d50-88f8-a34c432a375b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719fcfc6-5d60-4455-b9cd-1a6199c90e37", "sighting_of_ref": "indicator--b0f1f082-04dc-4fce-b702-e18f99babd1d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba98713-ebf2-42b7-a183-0a9ffbb1232b", "sighting_of_ref": "indicator--b45b17a9-0bab-4143-b069-0e4f3a75089f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18fec3c-a6e7-49be-a215-68b29d0c835b", "sighting_of_ref": "indicator--067ad84e-91a8-49ea-9b8f-a77403d78e36", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5bb255-be6a-44cc-92f0-030e26592f54", "sighting_of_ref": "indicator--3d3c00f6-8587-40fb-8298-b3401e221067", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f5e286-6b19-45c5-be2f-177d1e50e3fb", "sighting_of_ref": "indicator--f9dfecac-f367-4afe-babd-53208a5818d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d51b3e4-5b2d-4212-8e2b-8ecf0a626e57", "sighting_of_ref": "indicator--4a5ff7f5-3f21-43d6-b25d-b18805940070", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e685dd7-dbc8-428d-80bd-b173378d528a", "sighting_of_ref": "indicator--88197520-4649-489e-a826-87eb821093de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf6618b-3ed2-4398-bfd8-1744fbf0aa76", "sighting_of_ref": "indicator--f36978fb-c8e3-48e9-a31d-6dbcc4371c95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d3595a-f6d8-4add-83ff-e173a3ece557", "sighting_of_ref": "indicator--1f76a53a-ed88-43dc-999e-1c133d0d9a7d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3141dd88-de7d-43d1-9162-78d038ffc0b1", "sighting_of_ref": "indicator--5f1c4129-d3a8-46e9-955b-3e00511aa269", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec36d957-d783-44b2-819c-cf2fbd36a0d0", "sighting_of_ref": "indicator--148ad55d-50ee-46f7-aef4-f211d6767cf4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0798e7-b844-45e4-ba59-778f85816f54", "sighting_of_ref": "indicator--eb569f6c-3dd0-4d8d-8f58-e7de0adb7116", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d96e88f-dfb0-4be8-860f-12080e32371e", "sighting_of_ref": "indicator--e3030455-39d7-4285-a266-d6ecf0b7099b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf03b7b-ee21-402f-b0a2-9ca4640c6f58", "sighting_of_ref": "indicator--85819446-e650-4ecb-a8d4-c9a92ad06ede", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236cc9c4-c457-4640-8c7a-ac366ea5f922", "sighting_of_ref": "indicator--30ad36b7-e947-45bc-86a1-577824e422a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288c7181-1e8d-4e4b-b128-2b4dab175051", "sighting_of_ref": "indicator--ff2fb260-8828-4ca2-aa51-bee33656910d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb84115-ece8-4f99-8334-aa13fdfcf223", "sighting_of_ref": "indicator--9bc92dc9-356b-437d-ab75-d6e4d1dfd231", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a8effb-6f48-4312-80d1-f9e18ee041cc", "sighting_of_ref": "indicator--9bc92dc9-356b-437d-ab75-d6e4d1dfd231", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67409d8d-1b23-4257-8552-079ba055effb", "sighting_of_ref": "indicator--4f9faa72-70b4-4e9b-b478-66264afede38", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993c96a6-40b8-47c9-95a7-98020547ee16", "sighting_of_ref": "indicator--6c953d20-9e99-4ed2-9923-14e0b604d195", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7e4f7d-3d45-4601-b945-4b5e5049b02c", "sighting_of_ref": "indicator--f0025c5b-fece-4fb3-a829-af08a3101223", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60edf2b0-a56b-4be1-b3e3-c2573c6aab8e", "sighting_of_ref": "indicator--11bcf050-b98c-4b8f-ba9a-137ab37c5311", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c29f79-050f-4477-80b0-7221baed1e7f", "sighting_of_ref": "indicator--9fd2a047-55b1-4c6b-a0aa-c905f2ef5a49", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc87773-76ad-4959-9f41-4acf1dcef131", "sighting_of_ref": "indicator--08aca47a-7dd3-49fb-b115-79dcd62671ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ab723f-f063-4414-b46f-e22942fb6e71", "sighting_of_ref": "indicator--6b8682e6-c047-4731-9d67-018cbee604a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acaab475-7264-4be2-9270-69fc516fdf82", "sighting_of_ref": "indicator--6b8682e6-c047-4731-9d67-018cbee604a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4296b56e-9eef-4d39-9c13-53ffed88ca47", "sighting_of_ref": "indicator--6b8682e6-c047-4731-9d67-018cbee604a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d5e76a-c46b-42df-ae72-356feda505be", "sighting_of_ref": "indicator--189024ba-1f1c-49b2-92ff-d64d060ba848", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c79cfab-1138-4a62-845f-b46e5ed1ccf6", "sighting_of_ref": "indicator--6455365c-f5fc-45ab-92d9-b1034fd20956", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e304be60-d80d-4c38-a038-b16fe9841b30", "sighting_of_ref": "indicator--641a74e7-bece-4f71-8578-a43e5cb0022f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f59be7b-96f0-42c7-8825-6cda659d32a8", "sighting_of_ref": "indicator--b973bf9e-7429-4a1b-9905-a890c00da0ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14993713-e45c-441a-b623-f6a972665e4c", "sighting_of_ref": "indicator--3385a940-0f9d-4340-a9fd-c9af4aa6ef87", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513bb838-5187-4360-8516-5bf5db8eeeac", "sighting_of_ref": "indicator--d0f1bf13-5835-4091-b10a-5a12939033b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26506b48-408b-4dd5-a696-08790ea2ae35", "sighting_of_ref": "indicator--d0f1bf13-5835-4091-b10a-5a12939033b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c9a6ff-c1e6-4d36-b50e-a0fd0a594510", "sighting_of_ref": "indicator--7eb5b1c3-0657-404e-86fb-046e64d4ece6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f3881e-4635-49ab-9308-e1cf6a0dd3cf", "sighting_of_ref": "indicator--d2f54c0a-2a4d-4a24-bdcb-3704ab429173", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cbee5e-45f9-454f-9e94-e1955797c9a0", "sighting_of_ref": "indicator--a38d2c0a-8b1a-4c50-9c7b-04518f6d0f89", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8147741e-1f16-472a-813d-19c839bb294b", "sighting_of_ref": "indicator--de2f55ef-1a70-4605-96eb-1c7c70fab7a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd24fb0-e663-4cdf-8b97-959b9c3b8fd7", "sighting_of_ref": "indicator--d1974396-f2df-49ec-b439-80e061edac4f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ae1110-6f93-45a2-817f-570bda9fe4f4", "sighting_of_ref": "indicator--235104d4-a670-46b3-83bf-14e096de14e4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2e0e25-bc1d-46ff-aa8e-498c71d03b06", "sighting_of_ref": "indicator--b734f2de-4082-470a-a189-681edc555e1f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8a092a-96ec-4e5c-b70d-f3723468ebec", "sighting_of_ref": "indicator--e1a64c13-b134-437f-9ed4-a1a7813f5d8f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d48b48-9d4e-417a-9fc2-70cf6d06bc92", "sighting_of_ref": "indicator--b071bf55-22b9-451a-a23e-2dea1f5a7925", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64caecc3-730f-4102-846e-1fe4f7d05cf4", "sighting_of_ref": "indicator--b071bf55-22b9-451a-a23e-2dea1f5a7925", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5692fa-8851-493d-babb-ab8e70eb91ed", "sighting_of_ref": "indicator--9aba93e0-060b-47ef-a7ef-0988f748b659", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c32b36-1eb9-47b3-bf00-1db1302c0b78", "sighting_of_ref": "indicator--0de47ca6-24e5-41e7-bf2f-2d7a5f9d17bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dba3310-34bd-47ac-85ce-1c258b68ccb2", "sighting_of_ref": "indicator--ad872aa7-96b2-43bc-b690-c38029387f63", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7f90d0-88f9-4636-9f07-a831604f0a0a", "sighting_of_ref": "indicator--757e225a-824c-4d63-83b1-9f274a93facb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e83c0a-c948-4c2e-b320-675e67756fb2", "sighting_of_ref": "indicator--a0f67a19-dd8a-4ad0-b5b6-b87207a00154", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcffd3f-3e8c-46c6-b100-ad83b1418640", "sighting_of_ref": "indicator--1a7785d0-a11b-4dc0-b9b5-e09e01b49f47", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9974ee8-7d0c-4536-a512-f950bafb5910", "sighting_of_ref": "indicator--e45e906e-2bf2-42cb-b9ac-5bf2315288fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034533bd-a55b-431f-864b-c0b98f53fcd1", "sighting_of_ref": "indicator--49811a1c-906c-4212-8250-87bfdc2d22ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cb2ca1-91f0-4366-94dd-bb4683596bf6", "sighting_of_ref": "indicator--6acfece4-7d4f-4bfe-a727-51cb347b744d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6ed171-e590-4376-b1ad-d56dbabe9dd5", "sighting_of_ref": "indicator--c2de5ac7-25fe-482f-9898-26dfb70b1fef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4c885c-bf47-4298-83b0-1fd74d913f76", "sighting_of_ref": "indicator--21c2a424-0f7b-4152-b92d-aa4db2253c86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4706ff-3110-4961-bb6f-406f4b6af7b7", "sighting_of_ref": "indicator--fdc3fc5f-a40c-4cac-9354-406688c5109d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ec2c1f-343b-4b7e-a7ec-1452fd4c8677", "sighting_of_ref": "indicator--0568a913-a0c6-45cd-a941-7a1faa881a95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b46bab-0f0e-4fc2-9eef-1b84c18aa5e9", "sighting_of_ref": "indicator--268ceb4d-9952-45ed-93e4-6596a3f13a15", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2465ccfc-28c5-49f8-991e-7b5d4b031deb", "sighting_of_ref": "indicator--1e221c6b-ca5d-42ca-8ac1-dad45f45d8bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1478ff04-83ed-4570-9d33-f83008cfd9bb", "sighting_of_ref": "indicator--7327719b-58f6-4632-8650-1ea48ef148d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be94c758-29b9-4763-a5b6-363319721bf5", "sighting_of_ref": "indicator--45f37af9-9fbb-464c-9155-3170d043a408", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a222ce-7ed4-46ea-a946-416a272c76b5", "sighting_of_ref": "indicator--ba75c635-cc67-4555-9dc1-331c7ae7349f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3123276b-9f8a-4df1-bb2f-bfcecbb99b2b", "sighting_of_ref": "indicator--9d5de59c-9ab7-4625-b5cc-114351aed84d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7cbac2-48d2-43d9-a4a8-d0c1f4ef1ce1", "sighting_of_ref": "indicator--baf768b9-cd36-4968-88b3-4156f8f83f50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0160441e-2e08-4efb-8f7e-8977bf4efa1a", "sighting_of_ref": "indicator--4986f753-021f-4d6e-a1f8-263bdd4b8d83", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddf7ca4-da4c-4a6d-93fa-a91016ec6ba2", "sighting_of_ref": "indicator--08fff7cd-271f-4ab2-8543-ca2f4646e032", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72ee75c-eaf7-4800-b8d4-6b190f00cd7f", "sighting_of_ref": "indicator--dd454ac3-3fd7-4069-9cca-27a40f5be94a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c55e25-2244-4712-9e10-564a32e69d83", "sighting_of_ref": "indicator--9bea6eeb-3931-4e77-b930-e43876ae09fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b67c17c-5e4b-42c0-aef4-8947578c6090", "sighting_of_ref": "indicator--79918760-4855-4452-bbfb-aee4f1700bd3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485f811b-8002-44cb-b72a-8d29424369bf", "sighting_of_ref": "indicator--63cae8a3-3804-44ca-81d9-b3174454b73e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112ddf03-e073-4c29-9270-6b116875e3df", "sighting_of_ref": "indicator--b86b0e5d-8918-438e-aac5-a4e9adae5809", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b0bc4a-0989-461e-aae3-ca3efbacabb3", "sighting_of_ref": "indicator--b86b0e5d-8918-438e-aac5-a4e9adae5809", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468dcc6c-d0ba-4da4-b970-009afc80624f", "sighting_of_ref": "indicator--b02bbc24-3bec-483d-80ee-5a9723dd44ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e45649-a92e-4136-a69e-6523a660b05e", "sighting_of_ref": "indicator--2c2e588f-cb56-4bdb-bc61-32dde09ab468", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5b4c0e-fdda-4ef1-bb24-fb5c5b9a42a2", "sighting_of_ref": "indicator--a5de1344-e1ad-4fdc-81cb-62fac0c415c5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c52538-6c7c-4b58-a0ff-4cc218b3907c", "sighting_of_ref": "indicator--8f9b7d7c-b921-4a95-9381-4ff68d38655a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffda239-d457-43d3-a97a-6f11e54a84d0", "sighting_of_ref": "indicator--8b89b07c-3764-4a26-8bef-1c108e5b247c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3122fd-d296-4e9f-b1ae-a84ca8cf2df8", "sighting_of_ref": "indicator--dff9a87b-55b3-4065-b494-bb5d5828b46e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ac8bed-fc98-485c-a051-afa0c76edb84", "sighting_of_ref": "indicator--f86cf6ae-ea7d-4df0-91d9-1b155f105440", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81294b6-3a9a-49f9-b306-2df4e76c92f2", "sighting_of_ref": "indicator--4cdbf499-0f45-4f70-b83a-f27806f36098", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879387da-f0b9-40d6-ab1e-d03278b9f034", "sighting_of_ref": "indicator--d9e30fe7-4ce2-4f4e-932f-fd2f5dc0c53e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e97c8b-621e-4248-8e23-04f2d27fd02a", "sighting_of_ref": "indicator--8189f92b-ff63-4aed-a5bd-c1ec8114b5b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21de2e49-3b72-4934-9ae7-61738cb941b8", "sighting_of_ref": "indicator--9a491209-b3ff-42d2-b180-b90615034c9a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a534d6c-fb5d-45f7-9d14-eeae72cefa8d", "sighting_of_ref": "indicator--2d3a6b1b-d0f7-426f-84f6-5aea8cd15604", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79fd646-0cfa-4e62-aef3-72bb66bc488d", "sighting_of_ref": "indicator--e9955254-f1e2-47e5-9b98-41a0e5ec8fb7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57324c7a-6400-4b1d-bd3a-4a8ece36d2d6", "sighting_of_ref": "indicator--47663285-50f5-4828-bbab-790c15dd0f32", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38acdc92-d0cb-46ae-a984-df930ea4b087", "sighting_of_ref": "indicator--4fab6f01-a0f4-45bb-a236-43c6014b49a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69108f41-7538-4b80-b100-a3367aed2ccb", "sighting_of_ref": "indicator--d47b830d-991f-4c76-997b-8d3b7e4c6c5b", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a718bb1-a758-48a0-b638-853d3fcd4fb6", "sighting_of_ref": "indicator--24e9d3ac-22e0-4c41-a96a-3bab2498d75a", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f8b291-fa68-4672-9631-e49a09c2636f", "sighting_of_ref": "indicator--d3462084-5723-42b1-9c69-b543df5f7e76", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb21d64-fba6-47f0-8faa-1f63042677eb", "sighting_of_ref": "indicator--bd4306fe-696c-4443-a2d3-0b6439d49588", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3198c10-9892-4806-ad93-1b759f0dad93", "sighting_of_ref": "indicator--764bf784-4b94-4104-874d-cb49305f455a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8abb06a-ce4b-4356-9388-b36a925873c9", "sighting_of_ref": "indicator--b257fc92-43ba-4192-9f64-8d0b5dddf634", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e001543b-ac5e-4614-bb71-838c3a21d00d", "sighting_of_ref": "indicator--e1582fc6-2f29-414f-8a53-e3a82971f46d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a685cea4-5f1c-40c0-867b-e9e8877c065f", "sighting_of_ref": "indicator--7f909935-a032-487d-80ee-ce5210bfe638", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f29956-3c57-4138-acd3-91fd63ee4d39", "sighting_of_ref": "indicator--8bab133f-174c-4792-b444-4557ffba251a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1a70ad-8ad9-4296-b76b-f54ce80cbf97", "sighting_of_ref": "indicator--b7a13ba1-e942-456b-9157-6f06d5ffb6d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895e9900-e3af-4c14-8630-8cb5714f5dc1", "sighting_of_ref": "indicator--a44ab8e7-033b-465d-b192-d2210a0465cc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2389f9b-ec38-4637-bd68-4902d394b022", "sighting_of_ref": "indicator--2139dc2d-f99d-4d12-8877-7e8a0c9057d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19b4435-5bc7-4c23-8200-63a1c8aa5fe8", "sighting_of_ref": "indicator--fd584880-d5c1-41e1-b7b1-deaf5d29d635", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1660d07-0d90-484d-bec6-9d2305d79896", "sighting_of_ref": "indicator--e8352a46-5540-4c2d-8c76-15eb30688e37", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c601e223-a78e-464c-8b98-11cbc7351bd6", "sighting_of_ref": "indicator--32cdd984-e0c3-483a-ae09-b6857e3251e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2464b1b-cd1f-4e92-9209-edf9f411eb97", "sighting_of_ref": "indicator--b05b1a40-218c-4bb3-b1f1-8d9507892ebc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93207c19-ef83-4ea7-8eea-e3f1b82b309b", "sighting_of_ref": "indicator--f6769df9-416f-425b-93d6-ea28d22182f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb8238b-4e34-43b4-abe7-14eb2d493170", "sighting_of_ref": "indicator--b9e0c5e0-d1fb-4a1b-a06e-4da6d3193b09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22df7f87-1056-49c8-8248-b2700bd90b8b", "sighting_of_ref": "indicator--fa5a1815-7a90-4721-847c-71c33ee28769", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f382f5fb-2b5e-45a5-b021-575fe5ccd35e", "sighting_of_ref": "indicator--5658db0d-4141-4e7b-af83-342edd593b28", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274666f6-2f33-40d5-b9a2-f49054b43b3e", "sighting_of_ref": "indicator--a5d9280f-595b-447f-b1d3-31bd355fd662", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4735bd6-d6d7-49c9-8c86-2f358d790556", "sighting_of_ref": "indicator--d792718d-5270-4586-88ba-3fb1451a3551", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d03ef8-0747-4cbb-8cd2-013031c5a733", "sighting_of_ref": "indicator--73f12fcb-82bb-42c1-87f9-26391496953d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d5c6e2-ea77-4a8b-8fee-d030b9e158f1", "sighting_of_ref": "indicator--214cacc9-44de-456b-b961-d53dd08a1f2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bec92ab-adda-4ac3-afb9-4ea16aa2d165", "sighting_of_ref": "indicator--6b6c62cc-c034-443e-9fcf-ceb057f964a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed46513-4a5f-42d0-851a-c61504b57dcc", "sighting_of_ref": "indicator--7b02bc96-5053-41fc-ae15-f13770c7fe62", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da02705b-8167-4341-85bf-f02cc7a8c8d1", "sighting_of_ref": "indicator--b02cf4c4-3b04-4ef5-ba1d-5f6f5bba8b95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3aacd8c-6937-4e7f-8d77-c42d1e1db329", "sighting_of_ref": "indicator--f1e6c519-0e6b-4374-8b38-6b9d98e9db42", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da1aa94-9ca3-487c-8583-9b6a56852475", "sighting_of_ref": "indicator--7fb4daf9-0e20-4e27-b8b7-ca548524d1a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22ea841-4963-488a-97ea-c3fd3c162311", "sighting_of_ref": "indicator--7e5a6423-562a-45b5-9090-0dba6761a583", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3825f6-df05-4c2c-8ca0-9fdff3acfa29", "sighting_of_ref": "indicator--61d0c7ea-6293-4f25-859f-b6a68fe282bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fe04e7-29c6-482b-b0c0-63d80aa29d3b", "sighting_of_ref": "indicator--49311c1f-7e26-40e6-80d6-d33a78e91a3c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba9ca12-f963-41a9-af21-ec8d0a4c21aa", "sighting_of_ref": "indicator--71cd05aa-0221-4ab8-b06d-d60b2095075e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f1e2e4-87ed-427c-a152-18e5e1d2f870", "sighting_of_ref": "indicator--8486d051-8694-4b55-984a-4b26eae6177e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b27e4f4-de1c-4f32-b58d-fb3853c8587a", "sighting_of_ref": "indicator--c5cfeb52-1d60-49b7-aaf2-68fa47c17732", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a10344-f5e2-482b-97f5-f0ef57ad8b3a", "sighting_of_ref": "indicator--11dc7967-3a78-4181-a563-90b7fe4ed7d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610cd66d-1458-4abf-a5d8-c8832a5305b8", "sighting_of_ref": "indicator--62a380fa-921c-4b3f-bdcf-0f97389b04be", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18c03a7-a60c-4100-8599-673413e7a8d9", "sighting_of_ref": "indicator--c5a1c99f-94ed-4ba2-b6b9-839fc5957c59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e76aa7-9c4e-4433-8dc0-2b51a8575795", "sighting_of_ref": "indicator--b9d4f09e-1d05-4563-9858-63be66b9b01c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d02c14-31a0-4889-a848-cec93643da81", "sighting_of_ref": "indicator--361acda7-cac6-44b1-9618-c294daa74531", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34530974-060a-4e68-bd35-cf2a1c203c13", "sighting_of_ref": "indicator--43eef848-186b-43fe-af9c-a4361a46fe86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e37768-676a-4c1f-a739-100fb9ff03d6", "sighting_of_ref": "indicator--6999e3cb-366c-4830-82da-b623a9d9a9a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ee9d5b-3541-4f98-9003-5e86b7341bf4", "sighting_of_ref": "indicator--d308a075-2c47-4e6a-b2de-74f86b0906d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1b34ae-f029-42f3-ba26-846075199c9c", "sighting_of_ref": "indicator--a83c43af-3490-4302-bf37-01c160ecac81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fce296-6ab8-4354-9f01-c42693ea40fc", "sighting_of_ref": "indicator--fdf1c44f-ad70-4c5c-b029-851a7f50e31c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31906d1-be1c-455a-8afc-95495bd9ad96", "sighting_of_ref": "indicator--fdf1c44f-ad70-4c5c-b029-851a7f50e31c", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e5138e-b31e-4f0e-9689-49aeeaaa181f", "sighting_of_ref": "indicator--92728134-5872-4815-acd0-998a09822c91", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c4974e-d06f-47c8-aaba-896354830974", "sighting_of_ref": "indicator--92728134-5872-4815-acd0-998a09822c91", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ab22b0-1085-4bab-91fe-d46489a76bac", "sighting_of_ref": "indicator--92728134-5872-4815-acd0-998a09822c91", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aeffb9a-834c-4117-a068-d3ddced0188e", "sighting_of_ref": "indicator--3597b660-4734-484e-a9e5-624943b8dae5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727797d6-fc22-4bbf-9d9e-09d7b0f5f458", "sighting_of_ref": "indicator--3597b660-4734-484e-a9e5-624943b8dae5", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb9618f-15e3-46a8-810e-563686f157eb", "sighting_of_ref": "indicator--3597b660-4734-484e-a9e5-624943b8dae5", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638c7a86-245e-4443-a3de-d88641757010", "sighting_of_ref": "indicator--18969382-9953-4639-8bbf-db1243d4b089", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ce65d9-4e5f-4175-be94-d966c5094655", "sighting_of_ref": "indicator--18969382-9953-4639-8bbf-db1243d4b089", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb955e0-95f0-4048-8c71-bea945747691", "sighting_of_ref": "indicator--c88ebd11-eed8-4eac-9e8c-cdb23868a8e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a48075-b214-42a3-9649-609d80425fef", "sighting_of_ref": "indicator--99910bd1-cb16-4227-a85b-95bf097b8bb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5837edf-f30d-46a2-a119-463560f68b52", "sighting_of_ref": "indicator--aa7da0a5-2af7-4942-9c05-55c4a5df5605", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c515e57-7339-40cd-8f1a-517022cbe27c", "sighting_of_ref": "indicator--15c5943d-5774-44f1-bcc8-277ec9f7ba85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2571238-60de-4a38-97d4-b7ba7b714840", "sighting_of_ref": "indicator--13deec5d-e7b9-4169-95b6-d48a7db208a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c295ed-c552-4106-99e9-f8a9e1ee6b32", "sighting_of_ref": "indicator--7df580e7-808d-497e-8dba-d6575cce6136", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2144fd1-c55e-485f-8e63-74447b313309", "sighting_of_ref": "indicator--3a7ea57e-3e3b-45a5-a74b-80c514ab41dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f7f2de-b49b-4f69-9d5d-418fbe44eaf0", "sighting_of_ref": "indicator--c97ecb5e-c834-49b9-9053-85a3b53e4ecd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a090891a-7066-4347-bcd6-47317df977ba", "sighting_of_ref": "indicator--493bfa21-8899-47ec-a806-9a4f1f2ce11d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1b21c2-81b4-46e0-964c-38dc0bfbdedc", "sighting_of_ref": "indicator--d4dc35bd-9f62-429a-b246-8780c752a27e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac9d47b-9c76-46e3-91ab-bc5807a461ea", "sighting_of_ref": "indicator--727835be-4a17-402f-99e2-62894704f6ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f87e12d-d155-49bd-ba69-1c5cb79b114f", "sighting_of_ref": "indicator--add142a3-142e-4c79-ad2a-6153a5f21f10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4a3078-b0f6-4f3b-831b-0408710d0927", "sighting_of_ref": "indicator--51343e84-55f6-4aa2-9efb-35732bbd6cc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224e26c7-8b64-4e2d-b16c-c3aa21c7f54e", "sighting_of_ref": "indicator--27c4fc69-4eb3-411e-aeb7-e58113f97cf7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99c49b1-c824-4b2b-a193-90d332792146", "sighting_of_ref": "indicator--e4d9b381-3590-492d-8b55-5adf652defe6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28934e82-ae7d-4f79-bb37-d8be368f3533", "sighting_of_ref": "indicator--141bd21f-e160-40c7-b05d-b861747c9275", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973ea096-855f-4466-ba16-5803b75a8b86", "sighting_of_ref": "indicator--cb4ded32-93e8-487b-a576-9f8799ed6af2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ae277c-d19a-4edc-8124-5c42c998cba3", "sighting_of_ref": "indicator--4c86d88f-0433-4122-aa1d-c40e66b7e359", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd05fce7-b857-4012-867c-ade94f897217", "sighting_of_ref": "indicator--a1c4a011-176e-4687-ae68-67315b3f4755", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29fd713-1b68-4d47-b382-5cf79057a163", "sighting_of_ref": "indicator--6748a32b-c2c4-479a-8dda-bab9e74532af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037b571e-a757-4166-80d0-badbf9f9f1e1", "sighting_of_ref": "indicator--94dbaea8-e903-4cc8-b8b9-99968605be7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a84da2c-c570-4613-9c2d-ae67fc826242", "sighting_of_ref": "indicator--f3005d68-3034-4fbf-a44b-3318798e5262", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10836d6-2cfa-425b-9ab8-c1d064d1e9d5", "sighting_of_ref": "indicator--aad5d261-4ce5-482c-8626-e9d0ccc54276", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73724af8-8ea2-4b98-8f66-9178a61480db", "sighting_of_ref": "indicator--31373f92-894a-4371-b9a1-987d2c90742e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faa6647-d137-408a-aef6-6736f5edeb41", "sighting_of_ref": "indicator--e73527df-44b1-4e7f-9ac5-12f8abcbfc1e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf5557f-1bd0-47cb-9a93-ed101ad11dda", "sighting_of_ref": "indicator--b4d80892-0f18-45ed-911e-beb08e939125", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2967afec-ed71-4c96-8fff-2aba7e614e8c", "sighting_of_ref": "indicator--a8dd9bfe-e8f1-44ab-bc8d-906e01b5fc1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48cb914-4db5-41e6-9b05-c24bb20e44cb", "sighting_of_ref": "indicator--c1a6b561-4a67-4315-a1df-4bc054af3d8b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac6ebc0-9027-4444-a5a4-5466d85b2124", "sighting_of_ref": "indicator--68fd72b5-d10c-44d0-88eb-4b87820c2930", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d47edb-e739-4276-a249-46b6f2889664", "sighting_of_ref": "indicator--6442a7b7-3cff-422e-b44e-214a080b50dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b03d714-d19e-4d95-ba45-d3858a16c946", "sighting_of_ref": "indicator--ffbb4f2c-1f2d-47de-b793-14ba9a058e97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091bd607-8a76-40d1-a036-0ed62aeac67c", "sighting_of_ref": "indicator--94fe9bde-8e0e-49f0-8573-82dcea9a37ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcce6c9e-7df0-4c49-afc7-fffcc441393e", "sighting_of_ref": "indicator--8e98ff09-144b-487f-8e03-03ffb1722e59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ab4599-b3bb-4356-8a21-89dd02908a27", "sighting_of_ref": "indicator--b2c75b1c-b701-49a2-a0ce-866ce1c52e9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66976bad-e507-436b-9a55-9cffdeef6344", "sighting_of_ref": "indicator--14704877-1c87-45d6-8fdf-5259bd958cd6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fb799e-8a31-442c-a5ee-7da31b4ed8de", "sighting_of_ref": "indicator--b5ccbefd-3272-44ce-baf5-ab6ccbe51596", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b734364-3c29-4d8c-9dee-039b048a0dda", "sighting_of_ref": "indicator--42e564dc-0a30-460b-af1f-d80e65aa42b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b456cf-5c9b-42c6-9b3a-1c4e2bcad388", "sighting_of_ref": "indicator--e286e9dd-39ce-4048-b894-180efc3d504e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad33a805-f223-4ce4-8c79-ee4558195251", "sighting_of_ref": "indicator--b71f8494-8d1d-467f-9d76-e67d8259b55d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eaf79e1-7020-4058-a85c-19e52c6bd0d3", "sighting_of_ref": "indicator--2c07bc2f-b36a-4c07-bc50-149c9dd19e07", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab73bd0-f1a9-4a38-b2b0-f337da575bff", "sighting_of_ref": "indicator--9bcfe315-516f-4a3c-a62d-a69ac122eeeb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd974e95-fea8-41a7-84c6-44220550d6f0", "sighting_of_ref": "indicator--943055e9-2ede-4fc6-8c5b-56a92686a609", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5e39a4-d5c0-4ba7-9a3e-570779a82423", "sighting_of_ref": "indicator--5c7a62a5-1aec-4295-a3ad-649e83a06042", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e36daf-db99-4d45-8085-ab3a6fed27a9", "sighting_of_ref": "indicator--f59c3708-cb49-4eb0-8cb0-3db8e597ef47", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116b3dc9-9e39-47e9-ba4c-2bff91455834", "sighting_of_ref": "indicator--83026bdc-67c5-44b2-90b5-576aeefa6982", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb8e7dc-9d04-414f-9530-4b3eb6a2356a", "sighting_of_ref": "indicator--9b5ef556-f2a0-47ad-bdd2-ee15f95c9286", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258852a2-b56a-4764-b243-4fa4e21f8a85", "sighting_of_ref": "indicator--1ef38b23-cdf3-424a-a463-2b7f87ef9755", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f7c4f6-008b-4b39-8972-5156c09c2e79", "sighting_of_ref": "indicator--67489d63-aa0c-414a-b1d1-bdd22d842d5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81a29cd-5a2a-446e-956d-e0ea80487f2d", "sighting_of_ref": "indicator--c035841f-c765-4a71-b341-b4c252e35d94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bfbe8d-f155-439e-a107-d193ecdeacd4", "sighting_of_ref": "indicator--dcb5a0fc-e89e-4e4f-a3e9-517ca5a14e7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ab705d-ec4f-4ab5-9094-7f3c649cd263", "sighting_of_ref": "indicator--2682cb77-fee9-417b-8610-b20aa2ad361d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7019407a-d144-42aa-99d6-92f299db06ff", "sighting_of_ref": "indicator--e66b1407-9e5a-402c-abf0-7b5e62fe854c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3cb325-8f2a-43f1-8454-6be5fca1ad68", "sighting_of_ref": "indicator--14c6f893-eefb-4a95-9ff6-a0329b285a97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21106b3-90c4-4bec-a24a-2c02485fdc5c", "sighting_of_ref": "indicator--8caba000-df02-4883-9a23-8df0fa6d3386", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d2ff2b-79a4-4cb4-8d23-9bc3f99031c0", "sighting_of_ref": "indicator--058bbaea-a26a-4e94-98ee-1cd61e05bc76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa3277d-54b6-485e-975c-621e575d008a", "sighting_of_ref": "indicator--ca5a8ac8-0da0-4342-9a81-1c9b639944bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db92306-3dce-42a3-968a-c88a5df89a5b", "sighting_of_ref": "indicator--056be071-495a-4672-becc-77bcf1ec4010", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9823068-1b6c-454c-b39d-e082d06ff47b", "sighting_of_ref": "indicator--373e5927-18d3-4ef9-91d7-58d5814cd866", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a4c9c1-77b4-451b-806d-01ccd729b710", "sighting_of_ref": "indicator--7537d464-056f-413a-ab58-bec604f169a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886a2b50-0248-442d-a809-a375081d096d", "sighting_of_ref": "indicator--9bcebe7b-02fb-4ac7-a01e-4c33236d7b45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbfb302-fd5b-4138-a702-2368c6939ca7", "sighting_of_ref": "indicator--e1749c16-607c-471c-9ba1-4bb7dfb315c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ae071c-4fda-404e-bfc6-bfaf397061f0", "sighting_of_ref": "indicator--b344a646-d1f7-49d7-9655-cc9095721857", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f389aaf8-4c76-4f23-8c81-fe0ca12fb9b7", "sighting_of_ref": "indicator--cee0455d-bf2a-4ee0-b9b1-67c9c9f7b82e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8476bf90-bff1-4707-9490-f6f9875282f3", "sighting_of_ref": "indicator--ed3cd9da-d44e-4346-b803-74b1855a2ed8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d41123-5825-4eb5-9086-d69ba0f35ad4", "sighting_of_ref": "indicator--ef5a13b0-40a3-45bb-a9e3-caa82443db14", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab271e9-0ba3-44c3-9f43-4514c2d37176", "sighting_of_ref": "indicator--ef9b59f0-bd43-46c0-bcc0-e47058be39c7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877780c8-8672-4306-a705-f06bc6a7041f", "sighting_of_ref": "indicator--81f1529f-2bcf-4acb-824d-cb4cd0fb364f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9785976b-b3d2-4103-9a63-81b66486809a", "sighting_of_ref": "indicator--b0372f08-f635-492a-ab9e-c00b2f1e52ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dc6c29-8e3b-48bd-9f64-a103b30b636e", "sighting_of_ref": "indicator--384f7136-2590-43d8-9503-627f761eaf34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faaca7b8-e41e-4476-a039-144aeab0dfa3", "sighting_of_ref": "indicator--9a67d1a1-a1f4-43e8-9c72-85fe574d5da9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d394c7-ff42-443b-855a-d9c3d8b2e427", "sighting_of_ref": "indicator--fa3189a3-9114-4c93-9c66-5c7457b365b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36b4d8b-6f89-410d-a2e8-fe3f0c6145ac", "sighting_of_ref": "indicator--6d4c2bcd-f899-4cd9-8a80-fd175a31162f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd0cee1-bf6a-48b8-9bc7-6f21534c9844", "sighting_of_ref": "indicator--fc55bea0-e5b7-4841-9029-f6e2d031b687", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d262694b-29da-4323-8aea-2d14f719cf19", "sighting_of_ref": "indicator--7b478cba-c725-4098-8e2b-3d24e0853635", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c54500-a48f-4f9c-97d4-8ed34fece6b9", "sighting_of_ref": "indicator--05fe2511-5c01-4438-9a5d-5b69471ac0aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cd8cf3-845c-434e-9456-ec9740c2b991", "sighting_of_ref": "indicator--57d17376-ab15-46a1-8f92-209163e4f0dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c386a8e-9f30-4b47-ad36-21a52152f365", "sighting_of_ref": "indicator--897e5ea7-46ba-4155-a549-710782169c34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80640dc0-ccbb-450e-8268-13521f8f7c95", "sighting_of_ref": "indicator--7b68734e-bf8c-46d4-9f02-7f144ce7db3b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2a1304-1cf6-4032-b51f-6eddd4037bbc", "sighting_of_ref": "indicator--3a3d220a-1559-4260-8193-2079933ef937", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0239ed4c-b1e9-4621-8ab2-1e0e328b1447", "sighting_of_ref": "indicator--844c53ac-bdcd-4de6-945f-613ad9d47686", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685eed4e-8a3b-48c2-b27f-44343b85e625", "sighting_of_ref": "indicator--fba6b1ce-1af8-4054-9651-2632650e9f72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f97d62-1cb3-44a8-92ff-fd840a7bdf58", "sighting_of_ref": "indicator--1c31d259-a441-4170-90ee-fd8906775420", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2149d1-056d-4fa7-b6c5-3a28e632ae93", "sighting_of_ref": "indicator--1c31d259-a441-4170-90ee-fd8906775420", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922d511c-d35c-414d-8ef1-cf53ac4f4879", "sighting_of_ref": "indicator--a3fc7b55-9e7a-4470-96c6-847fb8c30a37", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03057bd5-19c9-4939-8631-246105dac0e6", "sighting_of_ref": "indicator--c8d781d3-60d7-4f0b-896a-3ec5c26466bc", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fdf6b1-6447-4151-86d9-e0f9673f9301", "sighting_of_ref": "indicator--9e4ed279-7c50-4ed9-b7a9-e0e52ae3b1bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf4ec1f-92ee-403f-a646-1339d565c8eb", "sighting_of_ref": "indicator--f9b255d1-ed88-4a0c-b3a3-9597abcd5d4f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df23d065-0fbb-48d6-9db9-e4ae1ac8e460", "sighting_of_ref": "indicator--42b8b7e0-d712-4e7d-ac04-c5529aef3db5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e961c247-5ed6-4cd2-8c8b-9dcaa92f5c03", "sighting_of_ref": "indicator--da6e6174-ebf4-48ec-91dc-b18188480223", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c75b9a2-2f6b-48fb-b9ab-b2f2f304a5aa", "sighting_of_ref": "indicator--213c819c-4e80-4571-b080-7bd3dc68b943", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18817d1-1084-4e15-a1d8-1ea36a2668bf", "sighting_of_ref": "indicator--213c819c-4e80-4571-b080-7bd3dc68b943", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d125aa35-630e-4b82-975b-94e7bcc8bad3", "sighting_of_ref": "indicator--d74185e5-f957-435b-8339-007f7b580c70", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f15f6d-b470-45fd-968c-dc3108e02707", "sighting_of_ref": "indicator--217d3af1-2298-4a11-beb7-f74b5cbe7ce6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f21df11-58f9-45d9-88af-96eaec55d7a1", "sighting_of_ref": "indicator--fbd8e551-19a4-4ac4-a645-f267a939ba36", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dea06fd-658b-40bb-936d-c835bbb0f35f", "sighting_of_ref": "indicator--8136f624-1df2-40d2-88ae-0c2adba2d1b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c3f070-3777-438d-8ebe-9e35f81d4143", "sighting_of_ref": "indicator--62c93f9c-8ae5-4cac-8dc3-560df8b7b151", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77451192-82f3-4e86-a543-eecee9ab5a05", "sighting_of_ref": "indicator--19eb255f-402d-47c8-945e-47d515404b6a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdee0e6-d417-4c52-944a-3f90255f9a4f", "sighting_of_ref": "indicator--3121b419-49dd-4e7b-85ba-790abc674115", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c2d324-396c-4801-b88b-3e88d535d130", "sighting_of_ref": "indicator--685b22a3-77a0-4fe2-955f-c92c6d27b7a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754e6ea2-199e-45a8-a428-7d073ba4e636", "sighting_of_ref": "indicator--33213837-1dd1-4b55-82dc-32decdcb3f8e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199331e4-e6b9-476a-af4d-a1d7273dd408", "sighting_of_ref": "indicator--986f5056-554f-448c-8267-d76389f20df8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54669c5c-f8a0-45dc-962b-6d06712690bd", "sighting_of_ref": "indicator--4e866542-4189-4f70-bef8-fd65525db8a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039badae-4b9f-49cd-8fb8-11ab169d780a", "sighting_of_ref": "indicator--c9429c89-dba1-45a5-b269-ed831a4bd2bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249a1d6c-0df6-4cbc-9b4a-c08d2110335a", "sighting_of_ref": "indicator--9e67cdbd-e146-4b82-94ee-5923cbc20b46", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9694054b-cffa-4e94-b434-9d1d00c36f86", "sighting_of_ref": "indicator--d7bb51a9-e0c5-4e38-a5a7-8f058717def6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f40d313-048e-43cc-9a0b-efa1e9d8c418", "sighting_of_ref": "indicator--404eee66-276a-4742-a18c-24b93eaf64bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4f7fde-27ee-44ce-9964-eeed2393580b", "sighting_of_ref": "indicator--0a7ad224-300b-4d3e-bb0c-c7936b6c391d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c495272-517c-4424-ae25-c0dd21ad5b98", "sighting_of_ref": "indicator--27ca554e-08f0-4df4-867c-390e177103ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd13be3-b9a7-4db7-8b69-274b0ae5da69", "sighting_of_ref": "indicator--63b9e8a8-9af3-42d9-8b5d-5f3761f500cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e489cef9-fcec-4c69-80ed-b716116547c7", "sighting_of_ref": "indicator--e28d3dc8-fe40-42e4-8f0b-c1794aa98041", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56966591-b9aa-454a-a050-3b74e7bae2d5", "sighting_of_ref": "indicator--40852aa6-ca3f-4bb7-ad8d-569e4e4c14ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba02331-a413-4f05-822e-f1dcc12bed45", "sighting_of_ref": "indicator--6fbac682-c8fa-4e08-9938-d47d669adac1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8bb57c-da84-49fc-937d-3c652c915518", "sighting_of_ref": "indicator--6f1f5d9e-4a34-434d-b3b9-776aaf220f97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b806682-bcf3-433a-912a-17a90260f599", "sighting_of_ref": "indicator--3e8192ba-0f21-4e18-9f32-a3304923ba54", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0112fa59-5695-43ce-89d4-c74bdbd2a3b4", "sighting_of_ref": "indicator--2796ae65-b60d-4395-b598-c26be3100f86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a76ff2c-ddf6-4160-bbbd-6d94f8cf1456", "sighting_of_ref": "indicator--340eecf7-2780-46e9-9b84-a839bb7b0cf4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc01633-b8b4-403d-8d04-848d1cf8b7a6", "sighting_of_ref": "indicator--0d6fe6bc-a2f5-46fd-b5a1-8d552030b935", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667649f7-6368-4266-8eb2-8d448c49ef22", "sighting_of_ref": "indicator--901ea259-2589-4371-badb-523b1d69217f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5fb356-3ea9-4ba5-9c1f-6db515564cb2", "sighting_of_ref": "indicator--659cb557-bb77-4e15-bdf4-444240d0e5dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d9f54d-ab9f-483c-a43e-e0bc605bd57a", "sighting_of_ref": "indicator--2f0ef028-2be5-4715-b700-332126e1e052", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5206a237-a159-49d8-871a-36cb95d8654a", "sighting_of_ref": "indicator--bc84a4c1-3a86-4887-a68f-99ac367e49a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1c13fe-a587-4de3-affa-ddc6f12d3669", "sighting_of_ref": "indicator--5fab1cdc-972b-45f6-b9e8-504dd57a6087", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b311d9-d68c-4ec6-b9a0-cb3f827f69ac", "sighting_of_ref": "indicator--95fedadd-135b-4dcd-8057-e5897676f1d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0641f00-8a08-42fc-b583-730ce585a73c", "sighting_of_ref": "indicator--95e02245-1356-4c14-8831-10d8352a4a39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804ee8f5-7d41-4835-9583-f071a7631413", "sighting_of_ref": "indicator--30f2c7dd-f2b5-4e67-a94d-80545c7fe733", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e25a64e-f265-4cec-8ff0-80d957e53812", "sighting_of_ref": "indicator--f9c50405-a779-4a8a-bc2b-827ba946f5f6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23df86e-5281-4645-9cd9-3a86e47360ca", "sighting_of_ref": "indicator--8e58835d-9c50-4ac7-960f-e70a9d49e8ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300586cf-e36a-43ea-b4ab-e46a71afebbb", "sighting_of_ref": "indicator--0316abe4-f26e-4cd2-a800-1fc9b39103a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2aec95-9184-48bb-bb59-e1f0994ef9d5", "sighting_of_ref": "indicator--6b7453cb-e0b4-4e3a-b6ed-795fffd8b69f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622c8e18-b791-49f8-b806-d4aa9cd9f104", "sighting_of_ref": "indicator--14def2b1-515f-4fb3-a207-97c9bc1e1828", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8215da17-4e1b-4cbe-b4fe-149a34c817c7", "sighting_of_ref": "indicator--cd288042-f84c-4b8b-9bb9-ee3f7b2d72ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00b8050-90a9-43c0-b5ca-7db9db893f27", "sighting_of_ref": "indicator--e8a40516-c459-4d89-8c61-7618e71fba66", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0601e45e-6482-44fa-8f69-26d78a482c45", "sighting_of_ref": "indicator--161f215c-100d-4ec5-870d-cef936bb5010", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8612a9-b0f2-4626-bc24-155c18a75143", "sighting_of_ref": "indicator--b63f92ec-4d0c-49a1-92b7-15dc37e5d261", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d4dbf3-ae26-42ba-9f4a-5b8710301b39", "sighting_of_ref": "indicator--c389a475-51e5-4877-8fe2-20a10fe89fe8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cc97b4-bbc5-449d-85b3-8674474c8819", "sighting_of_ref": "indicator--004b85b9-927d-4bc1-b748-c2c4db86fd56", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f499c76-c65f-445d-8ca8-6f4895e26ba8", "sighting_of_ref": "indicator--63a76218-66c5-49e0-8084-876f8a4fd90f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104c3db0-13c2-4ffc-8b1b-2573bf117aeb", "sighting_of_ref": "indicator--4033ae34-ebde-4f18-8eea-027c5c0f724e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d522ccf-a526-4d07-90ac-50f406329776", "sighting_of_ref": "indicator--c8fcf890-4789-4041-937c-f02eb039af8a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c47953-3fcd-4477-a62e-fa02dea9280f", "sighting_of_ref": "indicator--7755a097-7cd2-4206-b079-3562d5425dce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ebe6bd-071e-4ee6-88cf-9365d6d3d8cd", "sighting_of_ref": "indicator--305b1778-ea25-4091-8596-a44de886fedd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3589e57a-d7ca-4d63-af30-b2d4cd987b59", "sighting_of_ref": "indicator--71b9ffbd-9795-4d2f-a433-d671ddc769dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418eb8be-a4d3-4acc-85b3-fecafe030ac1", "sighting_of_ref": "indicator--dfe7a219-08c0-422b-bbd0-39255739b0bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3314fa82-19f0-46a7-a68c-36e73748541b", "sighting_of_ref": "indicator--00277c55-ba54-4337-a52e-d23520157bed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df8fd44-74e8-4fdb-8e77-70f8594bf7cc", "sighting_of_ref": "indicator--7224e3be-53e3-47c2-b5b3-7a7333d98cab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b8d4cc-c803-4859-ad49-eed4f0a8249b", "sighting_of_ref": "indicator--bb46120a-abda-47f1-85eb-9367c0b8eb99", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de44e0d-42fc-4497-98be-b9e562fe80c8", "sighting_of_ref": "indicator--5196fd8c-bd44-4daa-aed5-5bf870442291", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36438097-125c-49be-a7b8-bd26b20d32ff", "sighting_of_ref": "indicator--799ee394-cf42-4c80-8596-96345cb9f98f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25befc7d-6822-4da3-8f38-65017ab2660d", "sighting_of_ref": "indicator--68783eea-5c17-4350-98ed-079d6ca76bae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d78bd4-aa7e-499e-9276-cc18603ed911", "sighting_of_ref": "indicator--9bb0250f-14d5-4dea-b6dd-3e838cabe114", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82651ff6-6c5b-44af-95bb-f97d35563a87", "sighting_of_ref": "indicator--10d5b0f9-f637-436d-8f33-cba8f330137c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b6e5ac-9306-4e5f-bc38-e31934195d65", "sighting_of_ref": "indicator--cb77c332-bf45-4d81-bd6a-09e657704f17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8597ff-167c-4149-a054-860ec56f56f0", "sighting_of_ref": "indicator--1db3009c-1e21-4bdc-affd-d91c0968a73a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4205c82d-d1df-4eb7-88de-8015e18d3d8c", "sighting_of_ref": "indicator--6b171318-2ff5-45ba-af4e-da831ce436c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410bf3d9-f284-4b74-8852-5485ac1a597b", "sighting_of_ref": "indicator--5d073c56-8e5f-4e6c-9c8d-8f5883626687", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa1179a-7513-4896-b944-472c69540512", "sighting_of_ref": "indicator--2f8a1af5-5ff6-4940-90a1-b535115d7301", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef9f7c9-19be-49de-b6a3-e109171137ed", "sighting_of_ref": "indicator--337d494c-ef99-4ab5-96c1-df949f9faf1d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a070d9-d9a8-4cdd-ac38-bcf56a2107c0", "sighting_of_ref": "indicator--90d7f9f9-4f75-446d-a800-d82f676381aa", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d704e2-de17-4359-9c3d-1b08798b9b52", "sighting_of_ref": "indicator--11af7459-9c87-4297-95ed-0cc7925f7aae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e37424f-4bbb-4eb0-8ed6-70ce13fcb842", "sighting_of_ref": "indicator--879f4c30-e849-4d0f-9d12-b813fa594abf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e12a80-563a-4373-a42a-a20598d5e390", "sighting_of_ref": "indicator--5dd366d9-94a5-4544-9f9d-e39eddda8852", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4879c201-83f1-4a35-83c5-eee836e36634", "sighting_of_ref": "indicator--d7a601d9-51dd-4712-be89-2a9d192f92ae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48986d3-d0fa-4cb5-a29f-20978eb34ca6", "sighting_of_ref": "indicator--5cc9ebc9-c878-4f3c-8612-3a96d5a58ffd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5129515-46bd-4a63-9111-3383d858446e", "sighting_of_ref": "indicator--cfac9feb-e26b-41ac-93b2-237f2169e694", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b466e10-8ac7-4e5f-bf71-b8067b39c0da", "sighting_of_ref": "indicator--f5f60ab7-87e4-4b75-8ea6-682cdbb03839", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a88420-6ee3-45de-ae12-842721a62088", "sighting_of_ref": "indicator--f5f60ab7-87e4-4b75-8ea6-682cdbb03839", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c11204-9c20-4fe7-b3d8-e93a148cb8a4", "sighting_of_ref": "indicator--e3aeb564-565a-48b8-b698-4d19bd752b14", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3861aef-fec3-449a-932b-784809bd5954", "sighting_of_ref": "indicator--9cf24cb3-e483-4a9e-a73c-4052f4e387de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168e0d5e-e9eb-42cc-ba44-40d6d599b305", "sighting_of_ref": "indicator--5b7ee6be-6b82-454e-8176-1d61d96ceea5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f3b963-ee48-48d6-b5e9-6d5c51b53bf8", "sighting_of_ref": "indicator--e14894aa-f3e5-4acb-b26f-532cd8074181", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea71e044-d3b1-4b3f-8758-8245771d0d71", "sighting_of_ref": "indicator--278865e2-1e5b-4f79-886d-98887e981d17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f309b82-98d9-40ee-8e0d-5168c5a0c29b", "sighting_of_ref": "indicator--8f2e3004-9045-470e-87d5-284618fc57ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df15afd8-ac31-49d9-b833-5d42de816ad1", "sighting_of_ref": "indicator--7f645d80-3f2f-4abb-bcb2-b4b718a4529b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64a24a6-3535-4d6d-a8f3-ed966cbbb238", "sighting_of_ref": "indicator--7f1713ce-3ff4-445e-8862-cf702ab16ac4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76927046-8544-4a44-8fe3-2517f33bd464", "sighting_of_ref": "indicator--3023372e-b2bd-4112-ba83-a6c32e7a5d4e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a583a79-6b24-499b-a715-185fa544953d", "sighting_of_ref": "indicator--f6f6de60-f7ad-494d-aaad-7fab024f9d1a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d7bfd5-df29-43f9-8784-058932787302", "sighting_of_ref": "indicator--fadf130c-cf75-428d-bce2-b3c3a293372c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005f5786-6eab-4b41-83e2-8478c062fcc2", "sighting_of_ref": "indicator--044a5990-7fbe-4226-912b-9b982458df06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2364a1e9-5632-43a1-8522-0fd441f92d3b", "sighting_of_ref": "indicator--c17290d5-d687-40b2-adab-fef180ecc5bc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818bd778-7abf-43c4-9d60-a87ebcaa9820", "sighting_of_ref": "indicator--68094292-7213-4a35-9560-27cb77b82e1a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52faa36a-ee8b-445b-83c5-4d337fa2e4a2", "sighting_of_ref": "indicator--0ed5fcf6-3b33-4977-9252-62d74ab035d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf1b718-5539-4ef8-a9f6-58cefc16aa54", "sighting_of_ref": "indicator--4383ea30-dc9c-4dcc-847b-9b36e18d091f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328f4de3-2340-41b3-8632-f9e9c4a2c88f", "sighting_of_ref": "indicator--34754b21-8655-49a5-87c1-65d81f4d359b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a31904-21d4-4abb-8f93-e76e0a7af321", "sighting_of_ref": "indicator--b56d5bb7-7910-4fc9-af10-b53bc5dd30ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d700643-1b20-479b-9deb-9adfcaffa16c", "sighting_of_ref": "indicator--c7ee3af4-d343-421e-9387-04947165ad82", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265d8c9d-daa0-490b-9324-c34d59d77e19", "sighting_of_ref": "indicator--58d5665d-67b1-48f0-8836-23ad50f4505b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0db5d6-a0f2-461c-97b2-701a8df444f1", "sighting_of_ref": "indicator--6a9ed690-4a4a-4557-b590-74c02f372ca0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9db59e-d544-4df3-a090-2d21a2c1746d", "sighting_of_ref": "indicator--82a9dfb5-8197-4cb6-8376-288f354692ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0b4306-4999-48d7-a8ed-284df8612624", "sighting_of_ref": "indicator--4d18c749-bbcf-4a9c-8f6d-3f820bbffe4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a759dd4-44ab-4072-be07-c2f20fbdb13d", "sighting_of_ref": "indicator--5908fe2c-3858-4a54-9d7d-513f3103c28e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a135bb2-a34c-4d3a-97a5-234e942f0b41", "sighting_of_ref": "indicator--51967c80-a13e-475d-a111-8cba9b364904", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf89d21-ff83-4e6c-8bbc-d91abb4274cb", "sighting_of_ref": "indicator--91c742b0-9310-463a-859c-48871cb46a80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe232d1-dca6-4150-a643-89012f3a3576", "sighting_of_ref": "indicator--71f3a83e-8846-4bcb-a9c7-647c82947a27", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2510c93e-cc4a-46e4-b8c2-3c1690d9d20b", "sighting_of_ref": "indicator--6f6eb923-bde8-4c50-9263-5a7fbb9ac674", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bef597d-0b4c-4435-984c-03a4dfd9a7b6", "sighting_of_ref": "indicator--332804b5-476a-446f-87c4-b2e1a98c87d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a79fdea-873f-44f1-994f-2f28f0a6b015", "sighting_of_ref": "indicator--2d99f86f-1ae2-41e6-a6c8-daba26e6a6e9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a68dae-1e3d-4aba-b8b7-2544df26e84e", "sighting_of_ref": "indicator--e7d352f3-78af-42fe-95c1-2823e4abdc60", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e34a90-fcd0-4902-9c10-2dc8eee216c6", "sighting_of_ref": "indicator--6e975f54-ab9f-4874-9f5c-59f5e7966942", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0991c9ea-8efe-421d-8fd1-12452a93a586", "sighting_of_ref": "indicator--6e975f54-ab9f-4874-9f5c-59f5e7966942", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9244978-3d46-4984-a46c-17e169e98d7a", "sighting_of_ref": "indicator--320ed344-1358-4c1d-a426-a1815ec96457", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2f4e2f-e2f9-4d63-94b8-6969b5d94528", "sighting_of_ref": "indicator--23f8c825-5bef-4297-a2fc-fd8bde8ee4ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbe4d80-a447-47c7-b82a-fcafb4b3d23d", "sighting_of_ref": "indicator--a0f78ceb-d9a8-4267-a112-49430ee47bb3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a79551-519a-4016-8d67-0718f52fd632", "sighting_of_ref": "indicator--2bb89a16-3612-4140-979a-6f2a1037e8ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427568ce-a5fb-415a-9402-5393e656288c", "sighting_of_ref": "indicator--a19be3d3-bc93-491f-aa23-99f4e28df616", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797ea60f-e283-499c-8de5-eb4f77314645", "sighting_of_ref": "indicator--65bb1d6d-1897-4e75-96a1-73e149559ec8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c427de1-e352-4413-be74-b669e6baf381", "sighting_of_ref": "indicator--1deb25a4-451a-4091-8399-157cd2495636", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15afd6e-411a-40ed-b0e7-fc05931d4ed8", "sighting_of_ref": "indicator--d56ee7ba-a274-48d9-8046-c19c983a1466", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e936853f-4188-4aa7-ab0a-319851e4a187", "sighting_of_ref": "indicator--fc57f84b-ab88-4077-a0b1-6e5724c0b686", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb2dc74-d754-4436-a2dc-c14347c26be5", "sighting_of_ref": "indicator--8659f3c1-151b-4d2f-a7f1-7aa0699f4271", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b3d2bf-7f2e-459c-9019-94427f25d3ed", "sighting_of_ref": "indicator--c40da604-a4dc-41f4-bd2a-104b52179d96", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e2df75-95e8-46ca-b499-cff45f1b2fca", "sighting_of_ref": "indicator--cbef2476-97e8-453d-8b39-096cf51f7d31", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe8cb47-3f61-46f5-929d-07c5a9b89a83", "sighting_of_ref": "indicator--f4fe2151-7783-483f-bc59-44250fca498b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33462e0a-a9b3-4c8a-9d8e-903b03309d18", "sighting_of_ref": "indicator--e949500a-e5e7-486c-b174-4345e742344e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3d805b-4125-445b-9f2c-5cef28c54229", "sighting_of_ref": "indicator--e949500a-e5e7-486c-b174-4345e742344e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd7c473-6014-4aa7-ac2a-f2e5cd62c6ae", "sighting_of_ref": "indicator--ecef908f-ec51-4c46-8f98-99a7ccf72560", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93479921-85bf-4e71-8ce3-3b01f3fb0d74", "sighting_of_ref": "indicator--7ac14b39-397a-4ba1-8c78-611c6b25cac8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3097417-65a6-48f0-a20d-259ce1d5e3a5", "sighting_of_ref": "indicator--ef2f261e-caa6-47a6-b712-893ec0b0545d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b4b094-e031-4349-af37-c6b1dfc9d113", "sighting_of_ref": "indicator--7942b1f3-5480-4bd4-9e00-b961beba2b08", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1e25cb-fe3a-4706-bde6-465002f04d47", "sighting_of_ref": "indicator--3390e8d4-d06a-4449-a872-1b0629e4cdb9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafe1a49-85ae-4701-95c0-09d879403449", "sighting_of_ref": "indicator--257a242e-dcab-41fb-ab27-2cd9ac477311", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a235e9-29de-4c6f-8149-21c36374f9aa", "sighting_of_ref": "indicator--53ced9d3-7f31-469b-88a2-29339f0f8be1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9facce-ef75-4dd0-9d51-6be2bf1b8016", "sighting_of_ref": "indicator--f3fef30b-0432-414e-901f-73afebf519ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cead250-8b33-44bb-af3a-0ad108168e9c", "sighting_of_ref": "indicator--2ca7e018-63e1-402b-b179-a013892cad03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9533c0c1-54f3-40d8-a20e-0de8f58b46e4", "sighting_of_ref": "indicator--4c910fd8-7d02-4a7c-bcd0-32501d127544", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6311926-613e-4e3d-a097-e433fbfdca0a", "sighting_of_ref": "indicator--da18d194-f801-4854-9b08-a3447dff9134", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be527fb-833f-4707-b6ee-fcc2b2a6f3bb", "sighting_of_ref": "indicator--2d3e01d1-a36e-4016-b7f7-2c4296be7cb5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472f27b6-f8f0-4a3f-8042-58c09b0f5b02", "sighting_of_ref": "indicator--0ecc5ab5-9293-4490-869f-29d920272279", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce8b947-a065-4dd4-96dc-855567580af6", "sighting_of_ref": "indicator--5178d057-2bca-42f8-82ac-ee57d95aa7a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc040d9-2c26-401b-a7e0-80328c6f641b", "sighting_of_ref": "indicator--341c04d2-d7b2-4c47-8992-9dcfd8410774", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d03416-d2f4-41f3-9e44-9433817253a2", "sighting_of_ref": "indicator--f1243e47-6657-4b7c-9790-2925c0bf2eb7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9482039-2bc7-41b0-961c-e34e4c3a0f44", "sighting_of_ref": "indicator--021f527d-3efa-4e54-a27f-e83e526a372a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea875e9-f0a7-400c-b614-b04bc3141dc0", "sighting_of_ref": "indicator--5d11637a-df1c-4efe-bc54-abded97b93b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f7b151-bb24-4b1d-a9e4-3cc1ccdf5cd5", "sighting_of_ref": "indicator--9e512acc-4654-4c5f-b96b-e85600addbae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74600d85-71db-4760-9221-57f080491d69", "sighting_of_ref": "indicator--9fc7f331-b218-42ab-9147-d96590645076", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405fddac-a7b6-4777-a7e4-5592afda7fbf", "sighting_of_ref": "indicator--164e1487-1ffd-4ddc-a067-9db6fb436c2f", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2461e35c-ef27-462d-a295-f795a46985a5", "sighting_of_ref": "indicator--3ac25518-e814-48e9-824d-3f894bd422c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9341b8-ed6b-4d95-ae69-4696ba775786", "sighting_of_ref": "indicator--1788fb8e-f7b5-4b7e-b3da-1b315a7c8166", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d8f75e-bf2c-4341-ab82-1e03ffe79985", "sighting_of_ref": "indicator--de986d8c-87eb-4a94-b4c6-be8778f392c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d83eb1-38e2-406f-969f-b78b52b83313", "sighting_of_ref": "indicator--47593c46-8934-44b4-90a2-f08036aa222d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b3c23b-67d5-45fa-8b80-af0c343fa355", "sighting_of_ref": "indicator--642da2e1-ecd1-408f-b9e3-2ab866b3a9d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c134fc-c5e1-4d4d-aa66-905448dd1995", "sighting_of_ref": "indicator--642da2e1-ecd1-408f-b9e3-2ab866b3a9d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631cd851-9c33-4545-baed-e46712efc549", "sighting_of_ref": "indicator--4487b659-a89a-4964-9766-7ae3f05b4191", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e021ee2-12ce-4dd6-90d5-02eab9df39ef", "sighting_of_ref": "indicator--4487b659-a89a-4964-9766-7ae3f05b4191", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8ce10e-402b-4f6a-b5b4-0a42b2a9b229", "sighting_of_ref": "indicator--fe0eae77-acb7-4c3c-9527-307e360d3254", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407ed206-cc3d-4123-a36a-76d79a7e3cc3", "sighting_of_ref": "indicator--f925619e-5623-44e7-a540-0bf2e6319d79", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2feb7f-5647-42c0-935e-6eaef034cd59", "sighting_of_ref": "indicator--7ce53158-435f-4412-b829-0a5f72a6f03c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d4d924-3489-43b4-954d-e7a8fd8b7bc3", "sighting_of_ref": "indicator--7f8591bc-058f-433e-b701-fd89e051c8a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095e40ed-7ad8-4e34-b894-ee8cfb467dd3", "sighting_of_ref": "indicator--da90755b-2e06-4e31-b7a1-20ac4b10416a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d5f196-70b2-4d6e-bf73-b296547c2e51", "sighting_of_ref": "indicator--f5f0cfc6-6c36-424f-8da7-2c835d92e6f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888aed12-2262-4237-a527-1cb24362d6ee", "sighting_of_ref": "indicator--0ffe6477-d34c-4215-bba8-c1cb60682c19", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68ee775-a2f8-4f53-b8fb-507d5ad65496", "sighting_of_ref": "indicator--0872f9f9-e599-4925-ad81-e0ce948600ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d11472-1c3b-4a44-88e4-5c101857bf5a", "sighting_of_ref": "indicator--17fc95e3-4054-4b5d-a4e7-628b84dfe65f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244f8428-9f79-4c86-a5f8-b9b9f19cb852", "sighting_of_ref": "indicator--557f0c2e-3236-4daf-b37d-21307d05c13e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f322384e-b396-4e75-a10e-8fe0e3d8a553", "sighting_of_ref": "indicator--2399418d-2dd9-473f-afc0-650d597a8805", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29be4b80-81c4-49f6-a6b6-e00040045c57", "sighting_of_ref": "indicator--0b0557d0-bf50-47fb-94c0-b1dc1687c317", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c818e8-d103-4cad-9bd9-2481f863e0ca", "sighting_of_ref": "indicator--0b0557d0-bf50-47fb-94c0-b1dc1687c317", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336d63eb-c068-445f-8b3c-7ee5f8967517", "sighting_of_ref": "indicator--c08b1dba-850c-4d45-8481-1350a86cf96f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d251fa9-9a64-4a1f-b9d4-4f2287eff175", "sighting_of_ref": "indicator--846d8708-3623-40b4-b500-cc4683af78cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972c18cd-d91a-4661-acc7-690b3d37d7dc", "sighting_of_ref": "indicator--a73d9113-175f-4ba3-9a46-a9bbd300bb5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc24c73d-6678-48d4-b6b6-6d4a6988e8fb", "sighting_of_ref": "indicator--210c173a-bb9a-45ab-8d5e-0eb7051c59d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6b186a-2b3f-4701-8c17-a3a8255d89b0", "sighting_of_ref": "indicator--4e405c63-6ad2-42c6-85f5-f022894f9e2c", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d26a32-44c1-4eca-a77b-4273d313a893", "sighting_of_ref": "indicator--479f4ef7-1a49-49ea-a24e-3952b763433f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3edc47f-c4e0-4580-956b-e1af3fa54e93", "sighting_of_ref": "indicator--07192ce7-41eb-4676-b113-ce680159ed25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579ce647-1b1a-4392-83cb-7ce655eea53f", "sighting_of_ref": "indicator--d4e14408-1de7-4774-a16b-b504ec62cb61", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e8b1d8-9221-43f4-9586-3e94b910ced6", "sighting_of_ref": "indicator--b4dcc1b9-6e34-407c-89a0-4cbfd6365f8c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256a603e-e6cd-494f-ba35-a7c6a8709918", "sighting_of_ref": "indicator--efc9d4a7-6677-4fdf-acf0-f342db1a1286", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c770a6b-ec62-4141-8eca-c6c4096dc4f5", "sighting_of_ref": "indicator--64dc975b-9b89-4f1b-ba1f-e45ad5a93161", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0429d42-c31c-48b5-8613-394eb1e4e66f", "sighting_of_ref": "indicator--425c5ab0-8d4a-4057-889d-86dde4e78bcc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649028b1-fd27-423e-ad6e-423dce2f2fc4", "sighting_of_ref": "indicator--dc5bd9d2-3132-42cd-95a9-53973bf903bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0999e0b9-24ea-444a-83f7-d56e9643ad3f", "sighting_of_ref": "indicator--714dd6d9-19a7-4c7b-8e5d-21a251a56222", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e037071-54ce-4a47-b362-8f72a0c23c5d", "sighting_of_ref": "indicator--ba6aaffa-9ec3-4936-bf98-5a05f1d259fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7decd6a8-f272-4ef4-bd07-fbd8632a063c", "sighting_of_ref": "indicator--631f0c2f-5690-434e-87a7-5b413fce1e56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e38d863-8d15-4499-8e4b-121e8448afdf", "sighting_of_ref": "indicator--aad1679a-6051-4de2-8e2e-64ca919a45c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb32814-6e52-4856-ae82-87de51261120", "sighting_of_ref": "indicator--e66f9734-59d0-45a1-a06d-0b3bb72825c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be234a3-f378-4e96-b4ac-a07e86c32a78", "sighting_of_ref": "indicator--3e7999ce-9d6e-4ecf-bb4e-5f578f2e5051", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a51e6fd-7e1a-48d5-b920-1da465aa48ea", "sighting_of_ref": "indicator--3abf8d0f-5fda-461f-82e9-7fd7c9ef0482", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb7f765-5f58-4312-bb5b-397c2641d9b7", "sighting_of_ref": "indicator--c4e5ab99-9d6f-4ceb-9d21-03a386a8f2bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8116c5d6-a50f-458f-889d-04178f85a137", "sighting_of_ref": "indicator--ccf745a8-e88f-41bf-8cec-afbd564b3287", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4cf727-9395-4e09-ab37-1e9fec981f24", "sighting_of_ref": "indicator--18c9a9e8-429a-49c5-b3f9-4c329facd4e7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a058e9d6-34b8-42e2-9286-6926220c37be", "sighting_of_ref": "indicator--5d4380fb-8d67-4fbb-86ee-b1699057f009", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8608cad-369c-4e9a-9902-6fd001cca9e0", "sighting_of_ref": "indicator--ca8f0f66-fd77-4549-a687-bbe631b5731f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63892d7-9137-43e9-8001-6db48313612b", "sighting_of_ref": "indicator--8c5951cf-cd4b-411b-aae1-f2ccd0c6f0fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac63373-d910-4765-855e-4948c7001921", "sighting_of_ref": "indicator--c4aadb4a-cc48-42ba-aa0e-039110430e75", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e37f8c3-665f-477a-a5ba-0de35ad18d08", "sighting_of_ref": "indicator--6cfed453-dd66-4b5d-8256-be177ed4a91d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0fab8e-62a7-45c1-9a44-258a6b2138b2", "sighting_of_ref": "indicator--c594475c-d090-4daa-804f-985dadb7d411", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885b1df3-9ce0-4e56-a9f2-4928d5ce1d69", "sighting_of_ref": "indicator--795e7915-ec18-406b-b6b8-c53c9ac75e2d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f030e9c-879d-4edf-b8ac-eb7ce3375e5c", "sighting_of_ref": "indicator--8b8edd3b-3d50-487e-9709-9dda9edf64fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37685a61-1b31-4e3d-9a0a-495a62f2141e", "sighting_of_ref": "indicator--e4b9961a-3dd2-4408-a4b7-c6f291e00223", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a00a75e-2c0c-494b-a567-b3cfc9cbb1ee", "sighting_of_ref": "indicator--88446d52-8ce3-4f06-9950-913b94f9fbc1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aefd734-773f-43f2-94a3-75c448e930bf", "sighting_of_ref": "indicator--4ccc2a3b-e0c4-4579-a4da-07bc115d1fc3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1769d11-0f09-4f74-b5c4-c940ee956a32", "sighting_of_ref": "indicator--1f3580ee-e087-428f-8b6f-7d8e7ee0ed78", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e597fe-4074-440b-853f-62fd807c215b", "sighting_of_ref": "indicator--d836b53c-df92-4f75-9cbf-11daf4ec0fb6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9322056-33ac-4b19-aef1-82dd61d60b9a", "sighting_of_ref": "indicator--662bb9ff-4a4d-4176-8c80-69c4759195a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca8ada8-6ac8-4a92-a081-05edc0b4aff4", "sighting_of_ref": "indicator--29a1615a-0a47-47fa-9e17-74dc61c0c511", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45ba0b3-ef1d-4f66-ae7c-f809a41ec1af", "sighting_of_ref": "indicator--71ad5d4d-3a98-4094-baac-e53761438b4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aeabf5a-efe8-499c-9dd1-c3ef3a72625b", "sighting_of_ref": "indicator--388d6973-ecd6-4404-9770-2f6d402d25b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b49fdd-0cb1-4005-ac43-7b7cfe8a67c0", "sighting_of_ref": "indicator--b58f4741-302d-4fb4-940d-f586010afd6f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd43ac2-0a27-4c80-993a-caac5ed3d472", "sighting_of_ref": "indicator--8560cf4c-214c-4b14-9571-175dacf3fcab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9771f2f6-335b-4c24-8721-349cc8f8df1e", "sighting_of_ref": "indicator--16496848-8867-4680-9ccd-376f3a5031d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963fdffe-af51-46ed-86a2-05103597d2f2", "sighting_of_ref": "indicator--b5d26d94-2fb7-48d4-b5a4-29e1b3c65297", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270865ba-4aa1-4527-904b-41753e76b0cc", "sighting_of_ref": "indicator--6fdc0acd-5088-401e-a420-80267c0e9e60", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f087bc9-fc9a-4572-a649-460611e38f47", "sighting_of_ref": "indicator--cfb62c8e-d962-4386-a90c-c4956ec281a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf793907-86ea-45cc-8f78-0dbb44607f30", "sighting_of_ref": "indicator--ae174fd5-97c9-4a36-83da-3392f98417a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4857ebfd-cdba-4fd3-a0ee-34c78f13072c", "sighting_of_ref": "indicator--544e38c6-cc8e-4bb8-88ab-400610557239", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5f792c-963c-4e1b-b008-115d7e52d893", "sighting_of_ref": "indicator--2c71f6a5-ece6-43ca-85fb-636fad135883", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e3988a-b3f9-47c5-bf75-d8f36b362d5f", "sighting_of_ref": "indicator--14a7f4e8-0b3c-4d18-ade6-393429ab7742", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e885f3e-d699-4580-accf-3c4a26ad82da", "sighting_of_ref": "indicator--18a82d2d-15f8-45f7-9b11-d2ab09d5c480", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da21457-14d2-4cd9-8ff6-9986f608b6d6", "sighting_of_ref": "indicator--98d6c59f-1929-4ad6-afe3-4884b8984607", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d8b995-3236-43e1-a9a8-e36942bb34ff", "sighting_of_ref": "indicator--eb38459e-01a4-42a5-ac2d-ca87e575f5b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02be1b8-8f5f-4870-862a-3d05a30903ab", "sighting_of_ref": "indicator--f051dc99-ebab-4270-a909-b5e4a64be0bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e88215-056b-400e-98dc-372cf63914a3", "sighting_of_ref": "indicator--854b23ae-cbb7-46fc-ab23-063c5ef3beac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba01fe42-b4ed-49a3-95cc-f1110ddbdd63", "sighting_of_ref": "indicator--671c7cc1-65a0-400f-9763-0c9b19beca01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a205a6d-f5ec-426f-98a7-739bfa1bb26b", "sighting_of_ref": "indicator--fb1ead6b-eeb1-424c-9ff2-7c6229698c06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220c7b7a-2310-4d99-b6e2-99257667cdf3", "sighting_of_ref": "indicator--2524b2f5-3289-4758-baa0-fe464ff1da5c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a18b9b9-131e-4a10-9915-bdd9cd6c2fe1", "sighting_of_ref": "indicator--0a9305e7-ca4a-4690-81e4-1c5c843bb3df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad5019f-a053-498d-aed1-a20060d2330b", "sighting_of_ref": "indicator--61e2be45-d036-4c28-a1bc-a2f19cf92275", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fb2074-6eb0-4d55-8ed1-ec9fe2c547df", "sighting_of_ref": "indicator--d2073701-4aa1-4592-89eb-7d99cd5ab7fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a014f661-625e-43b1-a18c-e9b74ee552fd", "sighting_of_ref": "indicator--bad5e024-9faa-4bed-8f04-b09e424623dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0db12c-b321-42b1-b246-1eb102807495", "sighting_of_ref": "indicator--17273a92-3982-4f31-850a-cc9580bcb2bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b369ec9a-16c7-4acf-9e28-dbd0299d6ad1", "sighting_of_ref": "indicator--3fc7cdfe-35c0-44a2-87b8-84fa920e9aa8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bde45b-b3c8-45fc-a642-89d1be063b21", "sighting_of_ref": "indicator--ae4fc9d8-536c-4839-aebb-d8855a3b5830", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fea73e3-ad28-475d-ac2e-b6dd122a89f9", "sighting_of_ref": "indicator--58356033-8020-4510-bf84-0158fc2ee765", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddfbdb5-11f6-422e-89f0-7c9270a66e93", "sighting_of_ref": "indicator--95e0fbe7-8b6f-4e4e-a697-24d7025d2c8f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752da5a0-8d8c-4314-a68b-60d5739345cb", "sighting_of_ref": "indicator--a0fd8e20-021c-46e2-892f-dd6c5d7757b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef9d530-99ff-421a-8206-c7a324c7e759", "sighting_of_ref": "indicator--6812311c-e216-4ea9-b8c8-31c183b49b26", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b798f2-867d-44ed-8d60-438a4ce8710f", "sighting_of_ref": "indicator--32a0ee08-6cd9-4008-8121-1b1b88cf3a47", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23d821b-7007-4916-8c05-803c7d1c5182", "sighting_of_ref": "indicator--e9ef8c0f-8eeb-4227-9eaa-715634c04836", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc3157d-7774-47b2-8972-2e9338799047", "sighting_of_ref": "indicator--014d4b68-0b9d-4c3a-baaf-61c438e4bff0", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dceba83c-d915-4fa5-b942-743d16760c0b", "sighting_of_ref": "indicator--3d1d109d-8e4c-4ec3-96da-25faa10281bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c31557-51df-4a74-bf00-1e00bac02bdd", "sighting_of_ref": "indicator--a1eb5b23-8572-452b-8751-13ce43e8b5d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3c9464-e3b3-4ae4-8fa0-2f92d2e966eb", "sighting_of_ref": "indicator--73bd833d-b5ab-4fe7-9a64-bfe789ad18bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff028c8-dcde-4ec5-b18b-ff0aa2571d1f", "sighting_of_ref": "indicator--c68109ca-c911-4acd-974b-3759f6a1e81f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24821611-1b2d-4059-985e-8438db41e90b", "sighting_of_ref": "indicator--fd4ab830-c500-443a-997c-0b64b8c24706", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00f48d7-c2ad-4d49-9a22-c8cdfd90a17b", "sighting_of_ref": "indicator--2e538c09-d4fc-4467-8893-25212756b29c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f9b2de-715b-4947-a0ff-2181ce974dd2", "sighting_of_ref": "indicator--946072f4-4a2c-4b2f-8638-552c795274ab", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1833c3-9a3b-4f59-9862-568be29c92bc", "sighting_of_ref": "indicator--3bf4877e-8725-48da-9afa-2747e9b18588", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a185478-befd-4438-a8fb-5673c280fefe", "sighting_of_ref": "indicator--8e692f00-652d-49d8-bba1-c9ce630497aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789b31b8-94b1-4617-a8d2-d8e001605ddd", "sighting_of_ref": "indicator--06e58244-9c7b-4549-ad6d-74ade30cbbbc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610fbd98-f0e9-4aa2-ae5b-1dd5b3fd8068", "sighting_of_ref": "indicator--ce7ec67f-4955-4446-a66a-faeeeba887dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b77df7-c0bf-4d6a-ad45-bf6266b97315", "sighting_of_ref": "indicator--2f9fb320-9160-47d4-a75f-fd8723891271", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb626803-9def-4880-9309-a77c54ca77da", "sighting_of_ref": "indicator--b0674527-5ef1-42fd-ba04-a09c8b1e3e90", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0cb9e7-dd59-4735-8c78-18aa8ecd9649", "sighting_of_ref": "indicator--48918096-ea82-4e31-9f82-599da65883ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347226a9-ce1b-4584-8e1b-694dae5227d7", "sighting_of_ref": "indicator--acafc149-6f4f-47a3-8226-adf828ca067f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe265d3-17c0-4e18-9645-89a65bec0622", "sighting_of_ref": "indicator--01274538-3db4-4969-b308-d74fd7217ac9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4be47b-1ff5-4c9c-b3ec-300da468443b", "sighting_of_ref": "indicator--c89050d8-1daf-4398-8154-b4352baf2cd7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fb3314-b372-4265-aaeb-7c44e01bb7c5", "sighting_of_ref": "indicator--c83de71f-45c2-4cd1-9bf8-a1cadb421cde", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66acd11f-4b19-4175-997f-fccc0801dd6a", "sighting_of_ref": "indicator--a1eb5a63-254b-4fe1-8946-0d1f50e388ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee1ee07-44e2-4b4c-98be-71ede5e712d7", "sighting_of_ref": "indicator--30fc5d0e-4da9-4958-bb1a-a7941e5a55c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae858b1f-c320-4655-8e20-0b7792a385e5", "sighting_of_ref": "indicator--58947871-13d1-40a8-9359-4294368e989a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae9261b-4e9b-4334-98bd-b00817530cb9", "sighting_of_ref": "indicator--934c4197-fc0b-4273-8194-e4717553093b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9eca9b-619e-44bc-95f8-3ba9593a0e92", "sighting_of_ref": "indicator--dd0b7313-c0f0-41d7-b43d-43b3a4093987", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c5ac12-b574-4668-9f64-4e008cbe79bb", "sighting_of_ref": "indicator--6924366b-3b12-436e-ab5b-6075ced78fc3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea011ff-433f-48f5-bab2-c6763425b2b3", "sighting_of_ref": "indicator--01f982cf-f62d-4954-a3d1-d0967bcd37e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33cafa4-c9d5-48b7-ac8c-562a98145d91", "sighting_of_ref": "indicator--1541900a-ea10-4a22-970a-425c231d3b70", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b7112b-a726-4d03-a769-6ab359e60a17", "sighting_of_ref": "indicator--0c8a4eb1-aaa9-4db6-8fca-98497f5dbcf7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e8df4c-4719-4dae-9c07-83fc851836a5", "sighting_of_ref": "indicator--3cc13496-91e5-421b-900e-2a4c921d2167", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71af1b7c-fb67-4611-ada7-41d89c8b6096", "sighting_of_ref": "indicator--c4d7fd1b-ad48-48e7-984b-26881f9410b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c920e774-07fa-405f-bbe2-ab3c7f7c69a9", "sighting_of_ref": "indicator--dbec1a3e-0b0c-4339-ba8c-a1d4c82ebf04", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f27eead-6728-4050-a37a-3098f3227c74", "sighting_of_ref": "indicator--b560feb0-b82b-4e5b-a078-ce60a6993d62", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7710426-9f6c-4f26-bd14-8d509ea5f0e7", "sighting_of_ref": "indicator--a5f1065f-85ae-41a9-bdc8-49fcfd5ffa04", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d45590-e4a1-4968-9652-d08e5f508a4f", "sighting_of_ref": "indicator--568e3c92-3709-4366-872e-48e6595296b1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15f9bdd-de40-4d53-83b1-ab8df49a844a", "sighting_of_ref": "indicator--d2827fd5-35d5-43d7-97af-20086d976e1e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3c479d-4423-4008-8da9-25e0acb82531", "sighting_of_ref": "indicator--ab0f2c7d-2f96-4f9c-a700-00644272d439", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c468abb3-3600-4220-8824-af7f1605c9c1", "sighting_of_ref": "indicator--3f224ab4-35cf-43c3-9c20-073445d562e7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1f104e-769f-4fdb-bb47-b3e9610b75d6", "sighting_of_ref": "indicator--ba89e41b-6302-4cce-a514-6f31a6e82625", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61054eda-550c-42e4-9340-bc4b09686587", "sighting_of_ref": "indicator--8835e891-f9ca-44de-afeb-c455acb5bb3c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606b7acd-124d-4760-a413-5fb6e2502711", "sighting_of_ref": "indicator--8364bf45-b96a-484e-9a37-ed4a6624aaf5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306477ad-74e7-4188-8228-6a6ee34a3fb6", "sighting_of_ref": "indicator--62608347-00d3-4dfd-a1dc-5e4cd8c5f19f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f412d26-fac3-43b0-8328-ba934c0e7462", "sighting_of_ref": "indicator--2e1ce7ff-934b-4ea7-a8d4-73e7cfc8e992", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1dcd88-da9e-45bd-b32c-13d32befa0f5", "sighting_of_ref": "indicator--350d41d1-2e94-41e3-a6c8-907e38037b40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208867dd-e6a7-4e63-993a-c47453e33d00", "sighting_of_ref": "indicator--9f8bd0fc-5698-44ef-9d4e-64a1538b1a44", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8f3ca9-a473-4983-80df-83680ebe153f", "sighting_of_ref": "indicator--562fb767-5317-41ed-9246-f1437dca8d19", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90b21b2-57da-40ec-aac4-40344eff9d4d", "sighting_of_ref": "indicator--64d73dd9-afde-4547-bde9-70d7e32c0df5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5a2a0b-2997-404f-bc8b-b835b2d12b70", "sighting_of_ref": "indicator--f5346799-f76e-4744-867d-37eb553a4376", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c561d04-94ae-4c34-87b2-f4dd3c9fb383", "sighting_of_ref": "indicator--021c1b61-bc83-469f-8e98-2e2e9634563d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f240004-05ff-4dd4-89ef-67dee998e6fd", "sighting_of_ref": "indicator--62621220-5d90-4947-9d6d-614ec8f08c57", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a249ee-1214-4efc-a98d-f21529304488", "sighting_of_ref": "indicator--1301c931-8034-4fb6-b7dc-08a198faacf4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3343bfd6-382d-407c-9d2d-e6cc609a5a84", "sighting_of_ref": "indicator--3b5533f5-60b5-473f-aa86-d05d0aed3df9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7bad4c-9c17-443e-b65b-36b0cb087444", "sighting_of_ref": "indicator--f34addee-b88d-4c21-8cf4-a849d15ad310", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806a70cc-1920-4a08-8cb5-744a24f41c05", "sighting_of_ref": "indicator--8867144f-d2d2-443b-9a2b-8bc862b0534c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad937700-2d56-4e6b-aa64-90e3577c0823", "sighting_of_ref": "indicator--4a821a76-2fe4-47c0-afa2-c669b7bea73b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5aad8b-c9c7-4f26-82a0-e1d5eca94cf9", "sighting_of_ref": "indicator--3f003c45-12a0-4afb-90e7-c64269108b01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc654b5-095b-4635-a29e-bd969d29b9f6", "sighting_of_ref": "indicator--e4acb978-3c1b-4334-8c5c-9870cc9de91e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715be966-c3d6-4fab-8daf-e6e51242607d", "sighting_of_ref": "indicator--1037be1c-5445-4e97-89c2-5bec26a91949", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b94fe1-74fa-4ffe-9441-f4ffd5400ceb", "sighting_of_ref": "indicator--be6200ce-94c3-477b-9a08-32d9fa50f3ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30cd050-68ff-497c-a7c3-7ebd5eb86f48", "sighting_of_ref": "indicator--e0b0122c-8834-44a5-a948-40b932e63e18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed958cb5-6883-4c74-b7aa-58cc1c77c7f5", "sighting_of_ref": "indicator--b031f103-6cb2-467c-8c3c-6feb16bc156f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7672796d-fb7b-4b61-9591-a133d5c1b507", "sighting_of_ref": "indicator--ab732f86-08a7-4523-995e-996ca6c79227", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829f1f3e-898b-412f-9f8f-4f2360894a27", "sighting_of_ref": "indicator--13f9174a-b81c-43ce-9a6f-d4990aeea0cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf539dfd-d33d-449d-890b-28974c60b8bf", "sighting_of_ref": "indicator--d2dd9a85-58f3-4959-9f0a-d5bde08d6e56", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28c6b22-4410-4563-8115-ee1501e6abc6", "sighting_of_ref": "indicator--69b532aa-ffe7-4286-8754-bba3496331d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4765344b-6566-488c-b723-ba4cb58568c3", "sighting_of_ref": "indicator--3062ee52-055e-4552-92df-8b3fcf85f474", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2904944b-1378-4d68-9892-157d65b7c77d", "sighting_of_ref": "indicator--0d2c0c48-b7f8-446a-bbc4-001cbd230c5d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d3179a-2690-417e-8066-5f4e5f5131e0", "sighting_of_ref": "indicator--1747e7ee-0458-48c1-b366-a3918091ce4b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19e9c67-afdd-4a75-a947-df1fcbbddb92", "sighting_of_ref": "indicator--167a9eb4-4de8-4635-9317-4c2580ba055c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5fe21c-3e99-4373-a8c3-8b359480507b", "sighting_of_ref": "indicator--1da4d64c-a17f-4923-8ae4-6b2b0bf61451", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca873d5-6974-4211-9b66-f387ce6496b2", "sighting_of_ref": "indicator--cd1e615c-adbd-43d4-aaf4-059603d5df39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22659e15-196b-49a1-80c1-a783a2b7776b", "sighting_of_ref": "indicator--0f4115c9-9e9a-4564-948c-9ce95e7c7881", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a2e79e-c388-4900-8a35-2ce43a7d3d48", "sighting_of_ref": "indicator--62b99ed0-34f3-42d0-ab87-6b782773a28d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41b07f1-4822-4afa-a73d-84c75b7a6a82", "sighting_of_ref": "indicator--3be497d0-7923-407d-ad22-7d20018930b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6296038b-af58-48ec-85da-b950ffc5b2c0", "sighting_of_ref": "indicator--735aafdf-4fa8-448c-8ae1-952aa79c47bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ceb8f38-e5a5-4bf4-bd85-3d372c8bb2e9", "sighting_of_ref": "indicator--c46a793b-02d2-42a0-8a02-932478d5a0ec", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f100fe-0888-43fd-881b-5462f940777f", "sighting_of_ref": "indicator--7f262627-581d-4a89-a3ab-b3cae402e0c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc9ca2f-b75d-4bba-bd3a-36b310ed3df0", "sighting_of_ref": "indicator--426c8526-e8ac-4989-b695-d775e1fc3535", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add51b50-521f-4460-ba66-8c987c326037", "sighting_of_ref": "indicator--43441dec-d312-48cd-8807-a35aca66f71a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c875471-3ee2-4b88-a7a7-66cd4e093aaa", "sighting_of_ref": "indicator--ad31d976-c057-4d2e-ab2c-dbebad05ceaa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1047a227-f6f9-4153-b64d-2d9e2695ecd4", "sighting_of_ref": "indicator--0e03768d-1554-4b12-b9bf-6f8f8c23398f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728904c7-f377-449e-8d6e-bad4f25f6233", "sighting_of_ref": "indicator--4600dc20-c612-4860-938b-3be6efd3ad1e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ba8d79-f485-4ede-92e4-fe9b7f40ade3", "sighting_of_ref": "indicator--f8387620-bace-454a-8577-418ad41f3306", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a9bf88-675c-4608-9a72-4098f62034f7", "sighting_of_ref": "indicator--a69673ba-7ce1-480a-8bff-1d06e8f91535", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f487ab-acc1-438c-9fba-173ec53381f1", "sighting_of_ref": "indicator--be4ddf66-e18e-4e74-b8bf-c179881c8fab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eda80fd-8f48-4f83-92bb-4c279283db35", "sighting_of_ref": "indicator--049325b3-a9eb-45b1-9a9b-3ecb2ff71d8c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b695ee77-84eb-4ba5-9254-ce430dd7bf2f", "sighting_of_ref": "indicator--d2610fb5-8a2a-48ce-8d38-d0548e35e212", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87abf5f3-ada8-4c2b-b8f7-bcf8acf3754c", "sighting_of_ref": "indicator--9e6f9d2c-9abf-4546-bd12-caef43c9150f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93125df-fbc6-4bb3-b213-29da2db755e3", "sighting_of_ref": "indicator--9b895327-64d2-4c60-ae3a-d08f913ebd3b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0430e6-0793-448a-b21b-a50441bfb26f", "sighting_of_ref": "indicator--ea29599e-667a-46e7-8f33-4905a5e284b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1cee09-1a8c-4eab-936a-771d2fafe7a4", "sighting_of_ref": "indicator--258a5389-ce99-4dd7-96ed-74ee36a6a2d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ec6011-10d3-46ca-8a14-b8b23172844a", "sighting_of_ref": "indicator--a3ccad6c-7e2a-40a0-9085-a7cc6e8119cc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884bdc02-b167-4937-bc31-7e91437fb749", "sighting_of_ref": "indicator--bbf9c2e5-5069-4192-a6de-ec3c86fbd368", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9c08d0-bde6-45ef-898d-52238a3550c6", "sighting_of_ref": "indicator--3507b1bc-6b0a-4058-b3a2-cf24f81c4059", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9256bf9a-aab9-498f-81b7-2ec601872d1c", "sighting_of_ref": "indicator--b60dd95c-56f1-4f82-bd34-88f04c8c7a16", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50d2410-295d-448d-9d46-6ab41f5ffcb6", "sighting_of_ref": "indicator--7167995f-d79f-469f-ad40-e3f4dbb016ae", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0767cce5-3dfd-47fd-b825-03131485b7f8", "sighting_of_ref": "indicator--518f7c81-c567-4530-aa91-adf2468dc477", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717a83a4-8768-40b9-91c7-f11a48937482", "sighting_of_ref": "indicator--a019b4a5-420d-4be2-9abf-091ab42a6c3e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1371120-205d-42ae-8492-2141e068b779", "sighting_of_ref": "indicator--4102db30-b696-4213-8929-9012e25b83c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb058c4e-c132-450f-a91c-011f467864bd", "sighting_of_ref": "indicator--56be7d52-65df-4033-a287-98585a07e21a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8e3e3a-9796-420d-ba41-1ebb07fd0022", "sighting_of_ref": "indicator--f6eee89f-5d4b-424a-9410-263d7c4d3966", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd56437-8948-48f5-a96e-4a5ca4678a5c", "sighting_of_ref": "indicator--b23d766d-4378-45c1-8d82-3ca2e6a14626", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c2bbb5-f338-41eb-b2de-35b573569d41", "sighting_of_ref": "indicator--33db3147-520d-49b1-87f0-6eb927b76d4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccb53e7-ca9c-4490-b5fd-7d82d4f2bf71", "sighting_of_ref": "indicator--f6dfcea1-ebc5-42e4-a6f9-818f5b8e268f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f356f532-3baa-4e05-88b5-bc77d11fe665", "sighting_of_ref": "indicator--5c115493-f7b5-4c29-8bde-6858c32dd40d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12722df1-7214-4064-9af8-9a6d06570ed7", "sighting_of_ref": "indicator--6100d4c3-5864-4d3c-94bb-aef630a5dbd4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01445361-2c91-4d8a-9efe-961edd8be3f0", "sighting_of_ref": "indicator--6100d4c3-5864-4d3c-94bb-aef630a5dbd4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53b6015-179e-499f-aadb-ddec4fa3a0e7", "sighting_of_ref": "indicator--6100d4c3-5864-4d3c-94bb-aef630a5dbd4", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bdf8ac-b272-4aa1-8a32-8f1cfbcbaed7", "sighting_of_ref": "indicator--c78c529f-0c64-4a8e-b57f-c881b2ae6424", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54aee91e-f8f2-4c2d-9fba-bc01941ed0c0", "sighting_of_ref": "indicator--041a332f-673f-4e2d-9795-56e96789d26d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23487a5-eb18-440a-99f4-d2af61249058", "sighting_of_ref": "indicator--6ef6d083-3c36-446e-b8e3-c64bb5ee39de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe4eae9-7ecb-4e69-8a8f-1c3f99b2c1c9", "sighting_of_ref": "indicator--dcaf3417-cc61-4cbc-a649-ab078f232ff1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169274ca-fcd5-4d8d-bd52-4c8fc57f2ce7", "sighting_of_ref": "indicator--95c915fc-3408-43dc-b83a-4dbc004c3a8d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a01f84-4cfa-41ec-8ec8-8ca9861c944a", "sighting_of_ref": "indicator--67edb5a8-9e37-4365-ac0c-fc81e3eddff5", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075954f4-0831-45a2-929a-38953ed7eec3", "sighting_of_ref": "indicator--df55ef6d-3d09-4fdc-a87a-b23b3d31f17a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343de65f-1dba-468e-8f2e-706f8f745dc4", "sighting_of_ref": "indicator--c28e3d06-e184-4c3c-bc4c-71b56cccf404", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1206b2d7-a7e1-4918-a667-419f2fac4778", "sighting_of_ref": "indicator--5b04a18a-b99e-4da8-a89c-40a0ea2fb3cf", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fe300d-757e-4dd1-ab68-7d312620a608", "sighting_of_ref": "indicator--a58dc10c-a1fd-496f-807b-6b60a44d9a85", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521eb37d-e6f1-4417-be38-d726af97f5af", "sighting_of_ref": "indicator--82face7c-7eec-4983-94d2-85e42cbc47e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53b8d77-b4ef-490c-b8f8-f9fd5ca9d888", "sighting_of_ref": "indicator--83a8438f-1690-4538-aee7-52a81416e4ef", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6ba4a2-e6eb-4a73-a2d8-1124988c1be7", "sighting_of_ref": "indicator--2be7e2b7-6b72-4abc-9e81-7ded18dd10ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e8395b-363f-435b-b350-86f3080cd525", "sighting_of_ref": "indicator--f1e577ef-5394-4851-9518-ed1595b0b351", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2a5b7b-6159-4a76-a890-040ac72ce413", "sighting_of_ref": "indicator--0ebe4585-0091-458d-aba2-4c4295c8d032", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20baafc-0528-4553-b46c-30cf8c0ff7aa", "sighting_of_ref": "indicator--65351356-f9aa-4b73-857a-d823078e5f3e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8d9021-0dd6-4169-bb8c-2e384949ccf8", "sighting_of_ref": "indicator--50d389b2-5f16-427c-ba70-a2142efc2db6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2af704-232a-46b6-93a0-383a3e6e76e5", "sighting_of_ref": "indicator--4547c61d-2ad8-4a4e-92be-c7e8eac32d5a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b6c275-9d75-4c2f-9e67-d6ee1956ba2d", "sighting_of_ref": "indicator--e37d6046-6e14-450e-bf6b-49f3c2e335b6", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac2a0a3-78e9-44f0-9e92-0fb15e3261ef", "sighting_of_ref": "indicator--f937c88c-f856-401e-ae80-b75d90d82063", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967a959a-f1e9-44f2-ba00-ebdd7ee6923b", "sighting_of_ref": "indicator--2e548879-6e8d-4c26-8963-947550df3c7a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57db1a18-a12e-4593-8fc8-bd28a81d270d", "sighting_of_ref": "indicator--33eef636-5189-4eb6-bab9-166bd408d0e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e364d03d-992d-4643-9975-cc312b6d4218", "sighting_of_ref": "indicator--e5e4ca39-a299-4dc2-8b7d-6302366b4c51", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554a1eb2-4946-4cbb-91da-e07f38e33f9d", "sighting_of_ref": "indicator--95c86c4f-040b-4fe1-b650-94efa318e668", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea66dc2f-0dc0-4569-b53d-7dce333af9d3", "sighting_of_ref": "indicator--5ce689f1-d1c4-466e-89c1-a9d05a30fc73", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a4c7a9-e33a-4946-80cd-eba0925565ce", "sighting_of_ref": "indicator--32834ad9-5cde-40fb-aa04-7ecfe3cdb279", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d7ae07-7840-4b4f-ae84-07aab95c3711", "sighting_of_ref": "indicator--20a57ed9-f426-4b6d-8030-0b7597b5cf2f", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb2f814-9edc-4b8e-bf52-1e0b915b8713", "sighting_of_ref": "indicator--268222ca-c61a-4b55-9abf-882b7a61a143", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bdce5c-8dac-4ab1-b47e-0ee3286f0cc9", "sighting_of_ref": "indicator--f10b06b7-3aae-4e88-8b6c-f1f53d04b834", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5ce239-4d21-45c0-bba2-b45f67604193", "sighting_of_ref": "indicator--cefee336-8ecb-4734-a17e-05bb8696a080", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75036033-fa3d-43bd-9fd5-c049c292104a", "sighting_of_ref": "indicator--e734347a-8fdd-4ce9-b72c-c5e2eb6d3285", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff6740e-2bfb-4764-a78f-1e0094d99b7f", "sighting_of_ref": "indicator--7cfed9ed-11de-40bc-ad8b-c2839d541207", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28ac551-51c1-4a63-9f40-e65a6bd9f3ba", "sighting_of_ref": "indicator--68e0b1df-fdfa-4c42-a198-35de4742e9d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14c21f6-c28b-42ed-bafe-d093d0a2d8a4", "sighting_of_ref": "indicator--ebcdc276-5279-425b-90e1-141c922e4a1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9e1727-3449-48d4-b3f0-6415d7cd4360", "sighting_of_ref": "indicator--eba0e3d9-b27d-42d0-aeae-08f225c23fb0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bedbaaa-beed-40c5-9b3a-7d16f603e658", "sighting_of_ref": "indicator--41111a0c-e072-486e-a1cd-058058c85165", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78b1b5e-2f8b-4516-b20f-2d25afe8265a", "sighting_of_ref": "indicator--422e5e18-429c-4f8c-bbb9-b0e68ae32742", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35830bfe-9b02-4fe1-92b8-dc0c6910b4be", "sighting_of_ref": "indicator--916ea379-41d9-4c1d-9b44-2855a7c24b97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae6f1b9-c87c-488e-aba4-ea354186985f", "sighting_of_ref": "indicator--b180d80c-ea31-4cce-8fc9-bd6dfa5ac350", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e36e37-0ce3-4749-9a1d-546a3126e0c2", "sighting_of_ref": "indicator--0c538d1c-9b48-4f5f-8e02-c7dfab05b791", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55bd33e-27bc-484d-842a-675c59b8988a", "sighting_of_ref": "indicator--607f85ec-cab1-46b9-a34b-4ea80f43ce05", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a143893-4ff0-4d47-9082-ba2d131a8eba", "sighting_of_ref": "indicator--e310d4b9-d1f3-4de1-9a37-dadb152e58e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd98385-0bb8-4f30-9488-f262c0c33614", "sighting_of_ref": "indicator--dc5fa8f3-5bf6-42f6-9dd2-dabcb0269c71", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee908b0e-1c9b-44d4-9255-f98266bad162", "sighting_of_ref": "indicator--9fb164a7-a1a4-46bb-b77b-529f8a7acd0e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d564dacc-4b09-4cba-9d00-fb6d50d568e1", "sighting_of_ref": "indicator--ad440320-ac54-4b52-b55b-59463b8a9ed4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6662f932-fc1a-453b-b023-5da679e552da", "sighting_of_ref": "indicator--9865a52d-9e30-4b6e-b9a6-80d02e7f4e4b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c88b16-ae73-4647-9426-2edf0c26e1bb", "sighting_of_ref": "indicator--8f81b2e4-e057-4f6f-b7f7-f01b970528b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccf22ce-ca67-47cb-ba69-704bb5574666", "sighting_of_ref": "indicator--818acde3-4efa-4368-a86d-5f565fe6455d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349253a7-3f91-408e-9294-7381694e65bb", "sighting_of_ref": "indicator--276fc100-a15b-4fc8-aad4-6e5ea622099f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50c6bed-3922-4372-b428-f1a8c2a3fbf5", "sighting_of_ref": "indicator--078f0ec1-5951-4407-8733-8e965ab99940", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a7f164-e264-4805-9f03-f4cec5a0f723", "sighting_of_ref": "indicator--0898d015-36f6-4c0c-a638-7f1dce278667", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3e09f2-caf3-4cac-86c5-1153f945d68e", "sighting_of_ref": "indicator--5a9f6771-8666-42f7-9c2e-bc2d4cc6667a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afc2651-9697-46fc-b48e-17b5006c52ed", "sighting_of_ref": "indicator--98fe9404-a2ab-4aa1-a99f-7e88d2981d75", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d96564b-9c5a-4e7f-a6a9-85416518aa2c", "sighting_of_ref": "indicator--0ed3a91a-ace5-4a4d-bda7-b18a2e0672f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3412bf63-efae-4112-81b9-d81de18aece4", "sighting_of_ref": "indicator--bcc80de3-9fa2-4339-91c1-d6e1177d3b3a", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e10f73a-f190-4dab-a75e-dfbe1a4385e3", "sighting_of_ref": "indicator--8ec90baf-09a8-4b41-8b2d-7b492f33ee53", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e59377-e35f-4aae-a4ef-6c996992d617", "sighting_of_ref": "indicator--459922e4-5787-4f84-be5c-562c73c2a820", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6418a551-da19-4b8b-b71f-c23ac62d4083", "sighting_of_ref": "indicator--c2996e06-a75d-4ab6-9d73-412da76e12e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107f8839-4248-4700-bf82-aa3ba4538c78", "sighting_of_ref": "indicator--4f70f1a4-9813-45b4-be56-44854c38bbff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597fa537-7a14-46e3-b311-ee1fe0bb015b", "sighting_of_ref": "indicator--cb12f49f-fe53-41c7-9075-f32f359a468d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f3648c-2964-4a93-82ec-aedbb06d16e4", "sighting_of_ref": "indicator--b0d70758-678b-407f-974f-db80c6eb7be9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b47640b-c199-4c3b-a8b5-614d36cd4d6a", "sighting_of_ref": "indicator--c0b91a3f-63a1-4620-8ecd-c902b6ccdf3c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef1e825-bf99-452e-9981-e6477f307463", "sighting_of_ref": "indicator--1f8e5124-9c60-4bfb-9b55-2c5ff4ed5d62", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87491cc3-d8b5-4b53-9f09-f68d92036d0f", "sighting_of_ref": "indicator--8745ccb6-3033-4531-9fdf-f7bbdfacfbc3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7b0ec8-c923-414a-a9f9-4c3ed429129b", "sighting_of_ref": "indicator--42d9f530-13a4-49d2-a89f-8035c83a4946", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a77075a-d825-4152-b830-c50fa03dde8f", "sighting_of_ref": "indicator--a847de8f-1d9b-47c6-bae8-00e3cb1c0def", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cb5700-ccbb-44b5-9956-c2be0c53cc90", "sighting_of_ref": "indicator--a2cb9667-d300-4f7e-8ca3-492726e1e91c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248d77d2-59f3-4d48-abe6-2a7e7c34fc22", "sighting_of_ref": "indicator--bd0007bf-6a64-4c55-89cc-8d688fdd145d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c604e9af-20d1-4923-9d09-a0a1c95cdd63", "sighting_of_ref": "indicator--24dde0df-5f2e-4e37-a299-8ab10d00fbe9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36614ebe-cb14-40be-a9ea-797ed80a379a", "sighting_of_ref": "indicator--199ead6f-b701-4f25-8a52-037525bda1d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7770e544-beea-47b4-837c-7926d1da4170", "sighting_of_ref": "indicator--5bc8ea90-91f1-48a6-9c6b-3e270372a360", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3596469-d088-42ec-9e77-1b174643a82f", "sighting_of_ref": "indicator--298c7707-9602-4ff4-b3b1-48bb6156d1f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0649b56b-bfed-4913-bf2e-277c52fe32b1", "sighting_of_ref": "indicator--8f23f0d6-923f-4bad-837f-77568d727751", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3fee4b-de9d-4e09-87c4-33781eeab1ac", "sighting_of_ref": "indicator--7399ec63-e5c8-42a6-8c05-b2116e5b79ac", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b2cebb-a9c2-4efd-ad6c-4dc1cd5b4c06", "sighting_of_ref": "indicator--09a2bf69-f343-4390-9003-bd5968961bf5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739c0f20-10c2-4e29-bd12-8aa964bb5932", "sighting_of_ref": "indicator--35e1760b-9e2f-42f3-bb78-8213b8c6ae0b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca04d73-bf83-40f3-a242-ffd38eebfd64", "sighting_of_ref": "indicator--c0ce0074-7645-49fd-9b05-e50c4d50e71e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0a3c5c-eddb-47da-aa4e-7e4e0a633f9e", "sighting_of_ref": "indicator--6387ee0d-92d9-46e7-8bf4-88fe982b8f23", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3eb37b5-124a-40dd-aa9f-992d248bd994", "sighting_of_ref": "indicator--e234f9da-7e75-401c-81ce-d807b094db97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a317e2-47c7-46aa-9d1f-6e3129f4706e", "sighting_of_ref": "indicator--505a50dc-2328-444e-bccf-d8cbf33843d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9690e3f5-00c3-401d-92d3-1d1d4b4f199e", "sighting_of_ref": "indicator--902acdef-7aba-4de1-966c-d5ade8bbdb44", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51389523-be15-4d88-91f7-bc226337eaff", "sighting_of_ref": "indicator--381b3a82-58c9-4a3e-81ee-4f4580a610a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4327a844-27a2-4b19-9ca0-e4188731c64b", "sighting_of_ref": "indicator--91ffd0a8-d9d5-4331-91be-68bf9821a81d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a3147d-9612-4d71-b86e-753fec4da356", "sighting_of_ref": "indicator--353a464b-c145-4983-ad54-6e881f92427b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b86aa6-5f30-49ec-9692-31d480acc857", "sighting_of_ref": "indicator--8fa7ed7c-7816-4992-8257-f0cbfd9d04ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732785b8-8b21-41de-a900-d94dafd200c7", "sighting_of_ref": "indicator--8d398079-ca8e-4003-b917-aa58beb52036", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2ce2da-c216-421b-97d9-d1435a46c7a5", "sighting_of_ref": "indicator--af806878-7182-4b88-b060-f51433924544", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ad7125-7bc5-4de6-bb6d-6853ff132734", "sighting_of_ref": "indicator--0a815a19-9756-4602-b3b7-ec82742bd01a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa812c1-7ba9-4c0b-b370-42e495e71d5a", "sighting_of_ref": "indicator--166c3ce0-30c8-48fc-9cff-13b464540e6a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bb2647-b112-43e8-91cb-2aa3fb8370b6", "sighting_of_ref": "indicator--5fe1a154-2921-40b3-9f60-97f675e4bb06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db43cc0-1e71-4c9c-8575-79e4d8faa22f", "sighting_of_ref": "indicator--bd086901-fb9b-4a04-b5ba-59985625ffb5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79fbfdc-67f7-453f-ac19-d65bab533699", "sighting_of_ref": "indicator--e354b2b6-7c9a-4e3e-8c3e-4ac236edf149", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c2e782-128a-485c-81a0-5adaf3ce99d4", "sighting_of_ref": "indicator--dcbabbcb-7abd-4dff-90c6-b8ef26d2e08a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179ef3a5-0f6c-4088-8608-c1c10bc8114c", "sighting_of_ref": "indicator--d086d624-bee9-4694-ad82-75227f9fbd3b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e103360-f337-4850-bd75-a1580e1f25ac", "sighting_of_ref": "indicator--06c84b40-37a8-4b00-82b8-1dfe03a13afa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac90ee5-5b08-415f-8278-e66a158e126d", "sighting_of_ref": "indicator--8701350a-ddb1-4c79-a47e-4936df037c42", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365af13a-607b-4285-9a26-87765fd04b0f", "sighting_of_ref": "indicator--019f5b46-a7e0-40e7-9102-2148d78a2ffb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6da21a3-30c9-48b0-85f4-c2a1e22b15f4", "sighting_of_ref": "indicator--3684d64d-566f-4a7c-9099-34cf45977df6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8cfa1a-1140-48e1-91b3-ca1da5ede29c", "sighting_of_ref": "indicator--11328339-447f-427d-929d-b7b7acc16871", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3bdbe0-7233-4543-8d88-47f19d55328f", "sighting_of_ref": "indicator--a1e03c23-c6e7-4d6d-b343-70eb6028899d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435b7bd4-f5fc-490b-b6b7-fbdc9dc746a3", "sighting_of_ref": "indicator--2d768a9f-3305-48c8-9131-657eda6fc312", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ae7183-83df-402c-9546-5ae3b9ffaae1", "sighting_of_ref": "indicator--461df821-64cd-44cc-8956-5bbb6c858724", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cb1033-bb64-4620-a86c-3df58c73c109", "sighting_of_ref": "indicator--df768666-b87e-4c3e-8f14-9ff22417a32f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07bddc2-004f-4013-a850-cd8dce54430a", "sighting_of_ref": "indicator--c801d29c-1e4b-4ffe-a209-c4d07470ff99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b764c1da-5ead-4ead-a56e-69d36eedee43", "sighting_of_ref": "indicator--e277a066-071c-48b5-939d-ad98e58a4404", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d96db3-8483-44db-b45c-245c8eee3e1e", "sighting_of_ref": "indicator--2f7309a7-d490-4959-bc2d-b4beaf37dc92", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c65c51-4e27-42a0-8f90-8514aa1cfd04", "sighting_of_ref": "indicator--c16fa202-3689-492f-bbd9-ae3f6ce808d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2851477c-aa69-4ff7-a294-453435bdb135", "sighting_of_ref": "indicator--12fc912f-99ef-4a21-83a2-0f06565146b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910b756a-2809-4310-bd3b-ef1a8d7d6ff3", "sighting_of_ref": "indicator--fa8288a5-7930-404d-b01c-fa6cd1996961", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740adb9c-1d24-427b-8d42-106ac273fea0", "sighting_of_ref": "indicator--8189d3a7-c1a1-4521-90e1-2f0219f3c659", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c456e1c-f6cd-4054-9562-b32af1590e3c", "sighting_of_ref": "indicator--aef61448-8d06-4c56-b46f-ed4173eee469", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b60737-2913-4f6e-803b-d4943e42b9c7", "sighting_of_ref": "indicator--67d292cd-e5e1-40b8-a4f7-c2901df05331", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bd2db4-ec75-4277-ba67-2f53eafa93e6", "sighting_of_ref": "indicator--d6edab93-e88f-4b09-b385-d3f3ac548421", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b11f626-2083-40d1-8904-6990acfaa7de", "sighting_of_ref": "indicator--295ed1f1-be4a-45ba-a65c-6de3663d3800", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3756b3-3d21-4d3e-8715-087f93e9cc6a", "sighting_of_ref": "indicator--1ace6557-98f5-4317-8194-df917dc74808", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8151bf3-9288-45c0-aff3-2941512395d3", "sighting_of_ref": "indicator--20625835-4236-43ba-86df-600d72c6c83f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e0967c-05ec-4f4b-9f3c-9b189afcd2bc", "sighting_of_ref": "indicator--7d84b376-7b0e-4e15-a5b1-7dbb92ea1cdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc7c43b-7e3d-4dcb-8dae-9071eb48d33e", "sighting_of_ref": "indicator--dac1e6a6-11a4-4673-838d-5a24792908e7", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92984061-c29e-48e3-896c-5e445bba11b4", "sighting_of_ref": "indicator--3d3e8d2f-0ee8-41c7-8488-0480b77cfa99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7757ca-4343-4a02-bc1f-c8c6487ab279", "sighting_of_ref": "indicator--c0927c80-7390-4aca-abc2-842af135b7ef", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822259bb-9349-43f6-8d86-c1a6b26004a7", "sighting_of_ref": "indicator--01fd5172-f3ff-475e-9d7b-024400ffd569", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3054d151-39ad-41ab-b52c-f1a5a3de7a54", "sighting_of_ref": "indicator--01fd5172-f3ff-475e-9d7b-024400ffd569", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be8bb8b-9586-4d2c-b11b-a4f8196c2a2f", "sighting_of_ref": "indicator--882eadd2-de2c-46ae-94fa-597fc9e6e2f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4e62a3-3d29-4f3b-8b79-de4e1d25cd6e", "sighting_of_ref": "indicator--c72c7d97-7ee5-4b92-9f20-615e06e9b957", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcaef0d-e8e5-4736-9bda-1966ee0383e4", "sighting_of_ref": "indicator--644ebbd9-d53a-4b38-bcef-d66fcb95eaa5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eecdbbd-c70e-42c4-92b0-0a75f4b97d54", "sighting_of_ref": "indicator--665a5188-f538-4f15-ae33-db9ca3f4235d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730b59df-1fe7-4291-9d14-9a27adb4e440", "sighting_of_ref": "indicator--4285f23f-b17b-415b-9042-7996258e00cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32db93c2-e96d-4c3d-b8ac-1f7f3ea81bff", "sighting_of_ref": "indicator--b38455fe-53ed-4ad6-ae28-d75526ccce20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be96c5a1-9624-49d0-a055-5784cfeaadfc", "sighting_of_ref": "indicator--03c7c03a-15e4-462e-83ee-5fdcf0a72d85", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ded859-72f0-47fb-9753-d4dc89618582", "sighting_of_ref": "indicator--b6caf3f7-d6e1-4508-900a-bab4da1982c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db568402-c89f-4071-a5c4-d64e2e13392d", "sighting_of_ref": "indicator--39a8bfb8-7248-44dc-9cc7-8c9acdd10eac", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1f46ce-e9e5-4508-9f8e-ca3fdfa38132", "sighting_of_ref": "indicator--6d5cb13d-d253-47eb-adc4-7ac5fc6b472e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb616054-bde9-4496-9d40-c87e6fe43ab0", "sighting_of_ref": "indicator--e49fc6b3-e8c4-45dd-a37f-69675295dc82", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb818c60-932e-41f5-a7da-c99d8e57f162", "sighting_of_ref": "indicator--8185a2eb-87b5-4e18-b4e5-8460f1fd2794", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1376758-8213-4dbd-8233-acd6542a3288", "sighting_of_ref": "indicator--7e5b2bda-2fe1-4a2e-832d-922068df0b73", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90120795-0a0c-4918-aa9d-f0d57545225b", "sighting_of_ref": "indicator--e9e49ea6-e40f-46a9-8b55-8fc8020bc21c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced5fda2-88b5-445a-97d6-90761e8fdf1e", "sighting_of_ref": "indicator--6daf0372-a920-4358-aa66-a4007a4dff6c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913e1037-2839-4b2c-8ccb-4a7ead74fb2c", "sighting_of_ref": "indicator--71d9e02b-bf1a-4645-aefc-2449942ede9a", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8610ac8e-c657-4c19-a92f-fcc2b0174b1b", "sighting_of_ref": "indicator--7635f5db-d114-4dd0-8b6b-fbd7e6148506", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8841ff13-96f9-42ff-92d8-ecbad6291380", "sighting_of_ref": "indicator--30d17be5-4c0b-43df-9fcc-5077048eadc2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68128c8e-b087-488f-bd2f-f4378cf8a057", "sighting_of_ref": "indicator--787f916e-3473-4a0f-81cc-523edb431b62", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e07ad2-8605-4500-94cf-1772a8d93dad", "sighting_of_ref": "indicator--78a2f06a-b682-4e6a-85ef-ba11ee32395f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e92d32-aba4-4ece-a33b-b7e661f18c58", "sighting_of_ref": "indicator--a5d41a09-f093-4558-9122-c5c0cf3af187", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40035d4-15e6-4804-943d-5413c4dab2cd", "sighting_of_ref": "indicator--6f8c8450-0bc7-43f5-88cd-b7edaf42aeda", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5bea9c-f364-46fa-b997-a82a0395cf2d", "sighting_of_ref": "indicator--d9856133-f3b2-46e8-a2d0-55ca31261385", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824fd356-bc10-4137-ae7c-25449cc92d09", "sighting_of_ref": "indicator--58f685e9-385b-4317-9485-22ebfd889008", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcab930f-7489-46f7-b8bc-48f8dbeadb01", "sighting_of_ref": "indicator--14eecb21-93cd-4adf-bd0a-b2dae328f598", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136be9ec-2f0e-49b6-acc7-03c108438447", "sighting_of_ref": "indicator--3470737c-96b3-4928-b720-9255ab488ad2", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bf03ae-2db0-42b6-988d-3570ea427381", "sighting_of_ref": "indicator--0b6c6cbc-c473-4444-bf4e-2439b10d816f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd237dba-b005-4f24-809d-ffa55352c9d1", "sighting_of_ref": "indicator--d7a08992-ecea-4c71-8bec-dfd1f786d306", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6802e12-6134-4f2e-85ca-1985475c1e6d", "sighting_of_ref": "indicator--f3efc7b1-dd43-421c-94ea-8502237537c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16332e3-0f57-425b-99b9-c68b36124d1c", "sighting_of_ref": "indicator--252d7166-0f4a-4f6a-ba50-36579f491291", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abb6695-842c-4f4d-8e96-872e5eee64b8", "sighting_of_ref": "indicator--96daa6d2-e533-4093-aa29-f213c051894f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a9d4ab-73f1-41dc-9eaa-275fb56d23e1", "sighting_of_ref": "indicator--cf496592-a674-4934-95eb-90eb27ed54fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe4d241-4fa0-4dac-bfdc-eca71eaaefd9", "sighting_of_ref": "indicator--192aca9a-a377-4ecd-882e-1bbc979d705d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36a2d46-8621-4f36-ad45-64febe631481", "sighting_of_ref": "indicator--8747f520-9e2c-4b32-b717-5c6cff65a4f0", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2f169e-b4ce-4dcb-9b8e-89cbb9ed1387", "sighting_of_ref": "indicator--235642f5-2891-4b2d-8994-36e894e077fb", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12687de-9a1b-44dc-9eb0-0e3128fa292f", "sighting_of_ref": "indicator--82900186-9e83-418b-b7c0-f488927eec37", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6876f56f-ed10-4a19-8446-3c8736c9919e", "sighting_of_ref": "indicator--e34c1577-3402-4aaf-ad0c-4e8557fa5156", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f948a0ef-99ff-494b-a122-8d69aac58051", "sighting_of_ref": "indicator--66b04b69-66d8-4233-b676-569b5c300488", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a667b58-e7bd-4af8-9b61-263316e83782", "sighting_of_ref": "indicator--d27392b3-6b69-4b26-bf28-c078c3f3a940", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c269c78-712d-4072-a8f9-9722a119b20e", "sighting_of_ref": "indicator--f3de538e-e10c-43f8-8e24-8f28cbd43bc5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c343f21-2e7d-49df-9635-6ffc1e76a81e", "sighting_of_ref": "indicator--74cad676-9fa5-4494-9942-1cc7235099a8", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1185d6e3-e5be-4a95-a976-c5431a8d99dd", "sighting_of_ref": "indicator--d45f14ee-4d61-4920-b16e-f67d367b6bc3", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3eb1914-49fe-4921-844c-2a0ae28a50f1", "sighting_of_ref": "indicator--c6f9335a-20f6-40f2-8496-629517e24e86", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788e5279-efa5-42ba-97c6-a5f11b2d9ad4", "sighting_of_ref": "indicator--16bc6ac2-bcbe-45ca-b8fe-2d7173492dba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98a45ee-fdda-4f39-aebe-af739e262e52", "sighting_of_ref": "indicator--c650de43-501c-43e1-9f31-21c144bb8ac7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a151b92-9271-4c8b-a634-35b307e0ea1f", "sighting_of_ref": "indicator--7e66fead-0f21-42da-a3ec-e08c4eef1ae8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486b8846-2e70-4e21-8243-041e61376c49", "sighting_of_ref": "indicator--4e59ffd0-96d2-4bf9-a6e1-fcc552372d98", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18047d8-0b31-4970-8edd-6870586213e0", "sighting_of_ref": "indicator--b07933cd-72c0-41b5-b344-8a8dcbe86dae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fae35b2-a8be-4988-b7e2-eedf792e318b", "sighting_of_ref": "indicator--ca98c0f3-fcc7-42ec-bbc1-29daf3cd57cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0211fa8-c036-476b-92b0-02ba39401fa8", "sighting_of_ref": "indicator--24960ac3-4cd9-4221-adce-985a1d364581", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3910a369-3683-4177-a107-ed1c4a49d2ef", "sighting_of_ref": "indicator--ee0fc889-a62f-46ec-aa6b-08606b379ede", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c70fe1d-cbed-4d1f-bf31-cd8c67a8bb44", "sighting_of_ref": "indicator--95322096-c7f3-4375-9d5c-51dd82ce353a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2e78e5-57e7-4899-9113-9991265eccb9", "sighting_of_ref": "indicator--a9e026f2-1d8f-4185-a4db-06ff9a9d9ed5", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373839f6-c108-45c0-a721-74ca01387507", "sighting_of_ref": "indicator--20e55e58-8a24-4a31-b37c-d3ecd24d0364", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d28abf-2a64-4385-a6dc-7b82250b89dc", "sighting_of_ref": "indicator--cdde4a5a-5bdb-4933-bf2d-765a85fe08f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2390096-2394-4829-9eb6-26479e621b33", "sighting_of_ref": "indicator--c3432628-bfa3-458f-9c25-abcb4b147499", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0843705f-a368-4588-a8b7-329ce367133c", "sighting_of_ref": "indicator--f54db456-3f88-4ddd-8e35-8d42bd5ee128", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5da79b0-d79a-49ef-978d-d308d3e719c4", "sighting_of_ref": "indicator--9d1aa3ec-56d3-4f35-bc39-cbf3133e3764", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f082499-8d65-4961-9cd6-298f8de4ab81", "sighting_of_ref": "indicator--fa220e1c-781c-4e07-b7c4-e6cd45366ef2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4beca0f-9583-40df-9270-b447430294f1", "sighting_of_ref": "indicator--5626ed68-5384-481c-a0ee-da161fa2aaaa", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83827b2-5d31-4597-b334-e32e1d65009a", "sighting_of_ref": "indicator--f8656669-553f-4cc3-b086-3e38bb2f1a38", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ffa462-2deb-40c7-b3cd-352bde00f0e2", "sighting_of_ref": "indicator--9cd81447-e4d5-4cb7-a8c8-2e21a7337992", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de920a99-3175-4280-af84-0062374514f4", "sighting_of_ref": "indicator--084269fa-78c3-4e96-acdd-903e768c518b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ef51a6-d7ad-4b2b-980c-4822b7b51a29", "sighting_of_ref": "indicator--1bf8aa5b-f1ea-4a80-a3ca-781dcaab0042", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4c2d67-fab3-4c39-a6ef-2e2bf32903df", "sighting_of_ref": "indicator--d28cb27b-5217-47ea-ac9b-60314d19f1e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65b66ae-c920-4e97-8d56-86b58ff0e1c3", "sighting_of_ref": "indicator--32679105-6052-43e0-8535-a4890ab18567", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ff13aa-bee3-4bdb-93f9-4557239cf63a", "sighting_of_ref": "indicator--d1c83948-fca7-4081-9b3f-870d42579381", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5214de28-e320-4c6d-b06a-4b1ba1d82b6d", "sighting_of_ref": "indicator--956bec2e-c62c-4904-9641-bb64a63557a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a3edc5-4306-400c-96c5-c5eef6562719", "sighting_of_ref": "indicator--edd323da-2abd-423e-8efc-df0c4504dac5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72893f42-d2d0-44f7-8fc8-070f271d0c4a", "sighting_of_ref": "indicator--82aea44a-79fe-414d-80ec-cb124558c8b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d0b693-185e-44a8-b470-88f66ad58f9b", "sighting_of_ref": "indicator--00c61290-ba75-459b-abfa-e151a3d88c9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8a202a-b5d8-40f0-89f3-cecd970b6ebe", "sighting_of_ref": "indicator--bc4af55b-8a81-4454-afbf-413baa7e4996", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5426be4-602c-4d5d-8c03-2557f70a97d6", "sighting_of_ref": "indicator--dbb5c3ae-4a12-4c07-8456-83a12d10c99f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3c0d4a-ae23-49fd-97a5-cf9d6144ccc3", "sighting_of_ref": "indicator--dd0a0961-da67-40a6-af0c-d54e275277fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c310d7-02b9-422e-bc6f-619ba24fefd7", "sighting_of_ref": "indicator--8004a55f-ac2b-4a98-a8af-6c9366d4ad83", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53283f60-a47e-4576-b8fa-600cd6824ed4", "sighting_of_ref": "indicator--7e9dbe00-adc4-4d6d-aaa3-6042f46be724", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96217add-16a9-47b5-b205-6ca16548fe25", "sighting_of_ref": "indicator--18fab2f8-4e8a-4de7-bf85-750cc9d27d6e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6034c33-164e-4132-bb0e-2b5a79c85f0e", "sighting_of_ref": "indicator--43bf73f6-d9d5-48e8-915e-5a076c28a0d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7c1685-9417-4857-9601-6195fd8bb080", "sighting_of_ref": "indicator--b6921d8b-2a21-40f1-b1fb-01bb24fc527e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7de555b-edd5-47fa-ac17-9bc452a35e9c", "sighting_of_ref": "indicator--72328416-1ffc-47c8-8ccd-e8227675fb54", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82cecd5-83c1-41e5-88a8-c75e5a28ab06", "sighting_of_ref": "indicator--81abf8c5-d0ce-4b39-94fd-600255345dde", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27e2390-e23b-4c9d-a92a-28e328bafa44", "sighting_of_ref": "indicator--c82b04f3-3da0-4f09-b271-245edb619b9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0b594e-dd60-4607-9cc8-615fa89acddc", "sighting_of_ref": "indicator--1a2d5137-345b-4a80-a6b7-3c6a8145ecd5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805e05af-f51d-4502-84a9-1396ca84a4df", "sighting_of_ref": "indicator--8eacbc0e-e196-4bec-bc92-3a80937f727f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69bd9a3-b721-460e-a5cc-ccc302db15d2", "sighting_of_ref": "indicator--2d667ea6-df12-4c24-b8c1-2cdc07af8591", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ed6f80-6abd-4c89-a949-9452205a0920", "sighting_of_ref": "indicator--f4e7906f-724e-40a8-84ed-1079f80ea631", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aeb5572-872a-4573-8134-aad6c117cac0", "sighting_of_ref": "indicator--0a2d40e4-ecde-4dd6-afc7-a7a9e685177c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52dbc7a-54b2-417d-be3a-095ac436bf3b", "sighting_of_ref": "indicator--5572dcaa-6d1a-4aeb-82b0-f37140a54169", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d594bd-e7c4-47db-a440-42c740a63eb1", "sighting_of_ref": "indicator--47a38f5f-8d1f-4a38-a86c-9107c7742ff3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaff3307-2e63-4012-9fd3-5ef30556c8d6", "sighting_of_ref": "indicator--b670269f-e8d2-4ac3-92e0-02742d2f1d09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ca971c-7218-4243-b9fd-cbad2fb33300", "sighting_of_ref": "indicator--7e8c8a77-49f5-4dfd-a59b-1e1d23e120e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5128f437-0277-4ce6-919a-acafa1b33afb", "sighting_of_ref": "indicator--cda2ea59-84e6-4956-b10e-1b4e73fa00ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21616c1e-1856-45a9-ae8c-30b56e674256", "sighting_of_ref": "indicator--8382027b-cca8-42c0-84aa-297e2e962646", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25da0de-7353-488c-a2bf-1c84d3524ea8", "sighting_of_ref": "indicator--9cd35105-fb95-4ba0-b1a0-000506d3c2c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df93c288-3d45-40ca-95b4-a6622ef11c4f", "sighting_of_ref": "indicator--87754364-cfb9-44c6-bc7f-d8ecf26437ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7728c535-040f-421b-95e4-f3e4583b1f80", "sighting_of_ref": "indicator--4afd9c6f-bbe9-422b-be7c-58e65d3b5169", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526fe87e-09ce-4608-9593-10ac33bd06b3", "sighting_of_ref": "indicator--e5f9097f-d91c-419c-b278-528e3d2007ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3153595e-80cb-42ec-b75b-39c8c5289d09", "sighting_of_ref": "indicator--125ef046-e804-4805-90b2-858691d92863", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55755782-7843-4c6c-93ca-e65599bde49c", "sighting_of_ref": "indicator--1e5baa12-af97-411a-bb91-4c4ab52d98d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732394ce-bdaa-4315-ba33-e82eac6719a0", "sighting_of_ref": "indicator--4ab0db6a-7c19-450c-abe7-3d03131b2348", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9289c5e-b41f-4c5f-b1c0-3bb00f73bad7", "sighting_of_ref": "indicator--cdf4f1bd-58cb-4e6c-946e-6b2cfb6784f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537c2b2f-198a-4007-b579-732c871ea4f2", "sighting_of_ref": "indicator--89f0767a-c783-442b-855c-44b4ecd7e5c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef72c9e-d762-4476-a4f7-3bfdcbfb3b47", "sighting_of_ref": "indicator--3b40d8bb-5a90-4907-8756-109677777ea5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc722df-41ea-4268-ad85-300b95b35c13", "sighting_of_ref": "indicator--6004cc65-33e8-4615-99de-33213d0f0fac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6d3fc0-d756-4d19-aebc-361b2bdbdfe2", "sighting_of_ref": "indicator--c2d2fb59-8637-4536-b521-1ce5fc7280dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2803b9bb-506f-42e7-bec8-f4da7c9a1980", "sighting_of_ref": "indicator--a1a32b9b-dd64-4587-af32-1c6f8b591303", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77209a20-2c31-422c-ad68-233dd815fcb3", "sighting_of_ref": "indicator--1e7f1fdb-1477-4b9c-ba02-2e6fe64f8ca3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f74343-6998-4b89-bc0b-d3410bc8d318", "sighting_of_ref": "indicator--449bb158-590f-41a3-984d-b4ce5157fa1e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242c795c-93f5-46c1-9f7a-e9aaca4741b7", "sighting_of_ref": "indicator--be1ab65c-3475-4235-9907-01e136b974f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4273a7-f460-4e95-8b7b-8dd58146ee57", "sighting_of_ref": "indicator--725ae765-95cd-41fd-84cc-b0e26aa13b45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16524e6-9b31-49fb-83b9-ab9fc706e76c", "sighting_of_ref": "indicator--8c8ab0f0-b2da-47f6-ba2c-f5f1592111ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6bc572-5fe6-4319-bb91-9c9fc02a8570", "sighting_of_ref": "indicator--810a6ed1-07bf-446d-bfe7-8ad21938901b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ee5bbb-af8c-47a6-ad99-99d034deccbb", "sighting_of_ref": "indicator--4026116a-39b7-4f7c-ad53-57b335b2531e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749e1233-5291-43e8-9863-2f795890ba31", "sighting_of_ref": "indicator--54be8596-ef55-480e-9ddd-54526c1e53a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db34a8bd-eedf-4418-ba46-7c00003a8b02", "sighting_of_ref": "indicator--90c6bb77-32ed-4128-af31-945ef15e2a35", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237f0b6d-be33-4a9d-a46c-fcb9ffe23711", "sighting_of_ref": "indicator--3a159ad3-4be5-4761-b421-99e4412e4477", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fb9977-1c29-4622-88c8-cdff5a2c88f0", "sighting_of_ref": "indicator--c65ba560-957a-4cc3-b8e6-299aaeffe5d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d176c3-c5a1-456e-a4af-132934ca51a5", "sighting_of_ref": "indicator--f2a17dbe-acff-41be-b8bf-31f1c395fb78", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bd9b3f-0343-4345-ba53-a296df527759", "sighting_of_ref": "indicator--17bb2468-d3e4-433c-81d6-5c0f5c0ba14d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061fff5e-3c20-44e6-b534-c972ca6be374", "sighting_of_ref": "indicator--db52cff5-a152-46a7-83ae-a610f014b356", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cc32a5-fb5e-408a-9256-383899c018bc", "sighting_of_ref": "indicator--49cdaeeb-edd7-4c63-af27-c12b8ba9980b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf892dc3-7712-4a15-9c45-84866672a088", "sighting_of_ref": "indicator--71ae818e-53f1-4a70-ab0c-97991326ec43", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe5a67e-87ff-4c1d-a160-f77b3d1ff655", "sighting_of_ref": "indicator--cb8e5874-c16a-4fef-bd73-2b1148b3cf02", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe38f115-5953-40a9-b933-7ede96c740cd", "sighting_of_ref": "indicator--b8f156b7-a2e2-4c64-8873-35c97f8b1cb0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd479c8-9bff-4bb2-8e5f-85b7111b99ea", "sighting_of_ref": "indicator--ad9644ac-9885-4a5c-be0b-cbf7240891a9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29419ffd-cb32-4541-99a0-40f410aa1ba0", "sighting_of_ref": "indicator--6d786054-387a-402e-9840-dd01e139cd57", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feea26cf-b38b-46fd-af53-2f821e89ea4f", "sighting_of_ref": "indicator--55c1063c-48cb-484b-a99d-72ba0165c3b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb0d93d-de28-4fc6-81f1-50986e3ab760", "sighting_of_ref": "indicator--fc27077e-e47a-40fa-a5bb-8b8a33d74f92", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52860d62-a988-49a0-b543-59c0f61c8eb9", "sighting_of_ref": "indicator--fe1489de-9764-49e3-bc9e-0b6ed8f18730", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71278d7-cbde-487c-a88c-fe6ea2c20970", "sighting_of_ref": "indicator--e817be59-a400-440d-b0cb-9b8322dcd1ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228b335f-da45-469f-bdd3-609b48307e9d", "sighting_of_ref": "indicator--61a0b5b6-53d0-4b5a-a8db-ddb2169bafd2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f5bb9e-5326-4856-8317-66ce240e7c42", "sighting_of_ref": "indicator--61cfa950-1b53-4a2a-acff-42fdfb210826", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186b541f-eb1b-4e31-a87c-3bb12fbfe63a", "sighting_of_ref": "indicator--494656e8-3af8-4230-bbbb-6f34771c8efd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df718fe-596c-48d2-bbb4-4c6f9cd282c5", "sighting_of_ref": "indicator--aa0b067b-d7b6-4439-8ade-d3e69de4df4b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598ebbd6-84de-4ccc-93fd-2c41d789016f", "sighting_of_ref": "indicator--17ef3178-8ebc-4d43-a780-67cab0003cf5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377f3395-e033-4b73-b16d-eccaa50d4b2c", "sighting_of_ref": "indicator--81b9a529-bb96-42cb-9399-5c54eae7ba08", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a21d1f9-64f6-43ef-966f-50d865ab60eb", "sighting_of_ref": "indicator--165e69d2-e9fe-41c2-863a-7fceadc1614d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a492ff62-cd7d-43e7-b877-f1e8d5147fd1", "sighting_of_ref": "indicator--9835e7f8-816a-4207-af5f-c9867e0293d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018dce2b-d3f9-4fb0-a48f-c806ce6af99d", "sighting_of_ref": "indicator--f3be408d-b345-4bf3-bf18-933f09b52b9a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569ffc61-f709-4af2-ba95-88cee4eb6f64", "sighting_of_ref": "indicator--5554381c-adcf-4401-8e24-cc28fa50a4bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effc7ec0-3fa1-4020-8df5-aa2b6170bfd7", "sighting_of_ref": "indicator--5ae5eba0-c8b2-4ce0-9f45-38fb5ef027e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b0b5d7-8917-44c2-8f51-041107d27449", "sighting_of_ref": "indicator--aa4d93bb-b04f-4c54-9d45-3ee2b477434d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee79bc4-25b8-478f-a755-35006dc55b46", "sighting_of_ref": "indicator--4d3c3cd2-085b-43d1-85ab-498eb9920fba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d567b9f1-9f5a-4cbd-8d67-b52ac110b116", "sighting_of_ref": "indicator--60986ce1-a362-40f7-b7e2-bf5d960ddf58", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41c4d40-04c4-4635-bcd6-2c1e7e9943b6", "sighting_of_ref": "indicator--2ba62a07-a700-4b94-a2f9-03b871e812a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d030e0-4989-41e0-a9ad-4145c78c2ea4", "sighting_of_ref": "indicator--17f9ff22-4303-47a1-a195-495000895463", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1016ecc-76b1-4755-a9f3-ce2bc9e3bfb0", "sighting_of_ref": "indicator--7c211dfe-f835-40d8-b324-42f9b05ab9e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09eeae5-fd58-493a-9222-522ca964c3a2", "sighting_of_ref": "indicator--2a2341d1-cf8a-454a-9b44-cc8a852187ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de63724-8058-4095-a7f0-87cf62ee7ffb", "sighting_of_ref": "indicator--f5e7055e-9f48-436a-8466-f510ec00a041", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4130041e-ea54-4000-b9af-a6184c548893", "sighting_of_ref": "indicator--750741cd-3c37-48dd-a79c-ac9306cb3775", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb550be-7478-4882-bc01-b770f83a8c6b", "sighting_of_ref": "indicator--93961d7b-c4d7-4d94-bf4c-b94d8bfa1200", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13c7a10-5bc0-498a-8776-bdd42411cb97", "sighting_of_ref": "indicator--909189a6-61b8-4ba3-ab39-216f46bdf5ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc4f491-6132-4e4e-a9cb-783d3563b6b0", "sighting_of_ref": "indicator--9a13e5e5-8394-4575-892c-dbbad3216b38", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d24cc2-4a71-48a9-87d6-97fe7739d50a", "sighting_of_ref": "indicator--563e99d1-d061-4cc5-9d03-d7f30ac02657", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2280d5-f7bc-4798-9fc2-28634ca54764", "sighting_of_ref": "indicator--bf6dc2fa-0c8a-4b58-9211-bd034002afba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a490fc7-ab31-4dac-9685-3a8d8be83877", "sighting_of_ref": "indicator--28eef82c-461e-4cfd-bb24-799743690388", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ec5159-ea20-4404-9ea6-0d450725aa88", "sighting_of_ref": "indicator--fdbb85f4-b92c-414e-bcaf-7028f9dabbe1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8375d53-3aae-46cf-b683-be0569de3e96", "sighting_of_ref": "indicator--fa5cce2c-8d8b-4fa9-8f40-653641a1f461", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c0d8a8-dc74-4332-9c5c-68dbd2e06572", "sighting_of_ref": "indicator--66043d79-f474-429c-9cda-44e9157ab2f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8a2b3b-5b85-4dca-8ec8-3dd1428c994d", "sighting_of_ref": "indicator--70c50c89-19e0-45f1-bac5-e25c59492e3c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f705d78-cbfb-49e9-b0f7-2bc0df372c9b", "sighting_of_ref": "indicator--455ad3a5-44df-4bea-a792-70971f86f071", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721c8d66-1ab6-46d2-8154-14970f705b86", "sighting_of_ref": "indicator--8155f4b6-af2e-4607-8a14-cf55144d3c4f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d1d5d7-8eb6-48f9-bfdd-aa633564edb7", "sighting_of_ref": "indicator--b297ad9d-9cbf-419b-b256-7766b7ed1516", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485668e7-4075-4c44-b2da-faedd4d117e7", "sighting_of_ref": "indicator--9e993af1-9a86-4c2b-a59a-d08401bbf0e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f460585-4021-48b5-9079-a0178b90b5bb", "sighting_of_ref": "indicator--29a10c06-fd8c-4282-8706-142123f385dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab1f78c-1008-46ba-b84a-8188c463d69b", "sighting_of_ref": "indicator--788685de-94b3-4812-ace7-e89e011cca24", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138d66dc-044e-46c9-9a91-cd869a6dab87", "sighting_of_ref": "indicator--0b5920b3-8e8f-4bcb-805c-277ebd64b41e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3741b59-3790-4d69-88f5-14e838176253", "sighting_of_ref": "indicator--5325e38f-df71-4095-9b00-053ebad080e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d871a97-2b25-4240-8031-ffc02e621528", "sighting_of_ref": "indicator--912721dd-e00c-4806-9c43-825dc1abd598", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa747262-d9a9-4c19-912e-3a29121659dd", "sighting_of_ref": "indicator--2680a6a2-1b45-4d6b-9081-bd1e18889e7c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c592704-7574-4783-9d4e-b56de4a757a1", "sighting_of_ref": "indicator--462eb76c-d765-4354-9f8c-50339ebd3a59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fe1d7d-c56d-4a48-af69-19ff6f7bcdb5", "sighting_of_ref": "indicator--e1e90dcf-fecf-4dba-9478-9f53b024f319", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61bc9ae-443b-469f-b008-5e13211d6bab", "sighting_of_ref": "indicator--bd6bdde0-2e5d-4add-823f-1cc3c582bd3d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5cc2dc-4c17-4689-9751-34b79b95dc6c", "sighting_of_ref": "indicator--29871ed8-37df-493d-8b73-fbd9b0e85c26", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85622407-1847-4a7e-a6e2-e7acec3271f9", "sighting_of_ref": "indicator--e31861b7-6bd2-4464-ab8f-5215dbc9230b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbcfac60-0a57-48fe-b02d-59ba8a9ef7a9", "sighting_of_ref": "indicator--f6aa4bbd-b39b-4538-a055-6bf81fa9e8f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663aa5ee-277f-41e1-9d93-0598e5b3aeba", "sighting_of_ref": "indicator--6c770447-af7e-492d-b78c-8e7ef49c523e", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e733fc0-bc33-4b8b-9fb3-f043620e2176", "sighting_of_ref": "indicator--37963fad-75ef-4ba9-b3a5-4247e74b5f56", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f66e18-5446-41fc-a113-189c36557d1b", "sighting_of_ref": "indicator--e14f010b-c531-4124-9592-6a3c41974a2d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d91e1b-320b-4984-8de3-e6c24ebffa08", "sighting_of_ref": "indicator--bf2490d0-9d56-4407-9687-673861fc656e", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e02b5af-69ab-4d5f-974c-9259cbc8c004", "sighting_of_ref": "indicator--6843355e-f3ed-4dbb-ad66-163dedbeeb5d", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fdb8a5-7230-4757-ad52-c51cb6283f94", "sighting_of_ref": "indicator--e6d196a5-0c63-4c08-b5d2-c15c2650b8ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e250f429-2881-480c-825c-793e5449eac6", "sighting_of_ref": "indicator--e196e138-183b-47c0-b794-56e4cda82187", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dcc896-72b7-4fd9-bd8d-6dc6144b9804", "sighting_of_ref": "indicator--5209e04b-846f-4e7d-8bf3-438cd2ff251b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12eda113-db51-4472-a6ef-2f76f9e2a8d7", "sighting_of_ref": "indicator--46c4cda8-93b3-4879-bfef-2ad126a08bfe", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648a9a6c-887d-4882-807b-d999bfa7406e", "sighting_of_ref": "indicator--de2347f1-393f-475d-916f-f8971a923a44", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a870f5-5e40-4dc6-93e2-d51100784fd3", "sighting_of_ref": "indicator--1e8b8c99-c188-4123-98f9-d4fe9a14f5ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d455a2-56b9-44d0-a81b-8a1efb1365a7", "sighting_of_ref": "indicator--750a4554-b10e-401f-ac87-fb78e16e2594", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a990ab57-314d-4082-9156-70831c90c5aa", "sighting_of_ref": "indicator--91aa88eb-af4e-471b-8e39-3a35fea06306", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca39b3b-5f1d-4c28-9e51-5836fc98dd7f", "sighting_of_ref": "indicator--64162616-b13f-4cce-b557-68cf9a04278e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956d7582-2f15-409f-8bf8-5e2bd97f1d64", "sighting_of_ref": "indicator--c4c9ce97-7cd1-4917-9a6a-2b742f3cfcd3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc9518a-7540-4e48-8e4b-93fc8cb3516d", "sighting_of_ref": "indicator--316955db-d796-4903-ac66-2e6d1e684bf7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f10ff8f-689c-45a5-8a9b-be4587c4d62a", "sighting_of_ref": "indicator--9c83833b-61a1-45a0-b16b-8384470cdf25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a22f121-1892-4711-8107-f6d47a5db7e5", "sighting_of_ref": "indicator--d5288d48-a38f-407f-bfdb-4c8cfa3136b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b44a119-1a73-4280-bcdb-90012e0f03e9", "sighting_of_ref": "indicator--6838ba62-b46f-4470-8240-60f09e65b657", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d72ae9c-5689-4759-8700-a0c43f301fc7", "sighting_of_ref": "indicator--ab8ca6c7-d96d-43d1-b0ce-61b29369384c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836ceda0-cbc8-4e12-b19c-71f46e22c59d", "sighting_of_ref": "indicator--5d798963-9055-46ef-8dcc-073aca193b7d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7153a2c1-7e1f-400a-a314-1d74b18d2dd3", "sighting_of_ref": "indicator--c178babe-2b89-41fa-a8c0-523c86c6b16a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfe25a5-857b-4ff9-9a86-c8e9936922e6", "sighting_of_ref": "indicator--813be32a-3ec5-49f4-83c0-f90b6923e8ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6696ec85-f241-453b-a367-e8f95dc7ed7f", "sighting_of_ref": "indicator--a9094472-7e9c-445f-9f13-00e5d3dc9201", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9603a4a8-f793-4d33-996e-69bfab49a574", "sighting_of_ref": "indicator--eb60ad8d-b37c-464e-9e6e-19f7377da073", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf432ba-f8da-42c0-a5d0-09f1232d0f58", "sighting_of_ref": "indicator--23987c77-9f8e-4918-84f1-b3c86735cb9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21e42a9-c0e0-455c-88b8-1e43c71348fa", "sighting_of_ref": "indicator--1575cb55-21eb-4c22-8f30-2f5815dc81cc", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70805f4-4ce2-4b9d-ba77-ca2eebeab52e", "sighting_of_ref": "indicator--60d7ac43-db0e-478a-8e64-c960a9d86a41", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda591ba-f081-41f9-9360-4ef104be6ff6", "sighting_of_ref": "indicator--5e6da31e-8704-4f7c-b946-21bab9755a90", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473b59cb-6c88-4ffe-aa02-8c0d8d082ad6", "sighting_of_ref": "indicator--9d9fe559-7925-418e-9bf1-2f03715ea9c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d16c60-7580-4a72-91e1-db3a2624aa5c", "sighting_of_ref": "indicator--b7aec7a5-d974-40bf-9550-4038fc71b61b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c257f0-af6b-42d7-9c2a-b2244391d9a6", "sighting_of_ref": "indicator--27517786-9133-46b4-a5d8-3a6d0d7b2013", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722f081c-cc01-4c62-bd1f-f764b1773659", "sighting_of_ref": "indicator--e790b980-ff5b-48bd-a87b-9a60fa1168da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48654d45-9936-42f9-8320-d5e28cab7925", "sighting_of_ref": "indicator--07cc44af-7665-4e2f-801b-47edc30b4ab3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28427bce-15b4-4fda-b44f-4e7d89ff988e", "sighting_of_ref": "indicator--fbd8299c-2131-469f-bd68-f1ad765756de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f142e500-2a04-4920-beb5-77112a2af076", "sighting_of_ref": "indicator--0b522e4e-047d-43da-b6ea-e01899139f5e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08be733d-46a2-40a2-95e4-f59add7b8353", "sighting_of_ref": "indicator--592786d1-8c57-447f-b267-8176e15ae626", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca486b9-107b-4c85-9a0c-6e1018c7fd7c", "sighting_of_ref": "indicator--9edf4e15-f059-4829-afb9-c5cd5b959c39", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddea5896-49ac-4b29-a415-8dce0b1229af", "sighting_of_ref": "indicator--cfc0e4c5-451e-4a47-9761-51982b31bcec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5dcae4-b27d-4000-90c3-a662e791aa67", "sighting_of_ref": "indicator--db749075-eefc-4971-8a87-8c9a1f2f5a70", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc65e375-a621-48d0-9027-86b15af9c9ce", "sighting_of_ref": "indicator--fc61c248-d695-46f3-8f2c-7353d18c2d19", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2672730c-8691-43d5-830b-b4a34f498601", "sighting_of_ref": "indicator--053ec13e-d656-4ffa-9ca6-845db11b048f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d7bdc6-437e-4216-9b2a-99c65bbb54fb", "sighting_of_ref": "indicator--cc7718ea-11ee-4a13-9ff0-53f65b47ad54", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba849a8-0e2e-451a-a498-0d093ebc1503", "sighting_of_ref": "indicator--a2383813-0a29-47cc-b7e3-b2dbbb532bf1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df219fa-3f6f-4568-b366-0975765f9f41", "sighting_of_ref": "indicator--b1862041-0a3a-4a85-987a-853ee09e3e7c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcadf1b-3522-48a2-a589-ce5b8c784a28", "sighting_of_ref": "indicator--b5ade061-7b16-4d48-85e5-d33dbc232c58", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df9a7f6-d9e6-4a37-92be-45dbc89d3887", "sighting_of_ref": "indicator--f2b3b8ff-af9e-49f1-ac3e-edce49d5499f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7f69e7-ed42-417a-899d-451013cb04b4", "sighting_of_ref": "indicator--b41e1b20-f175-45a8-8e6b-7f229b9b1ced", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9245aa-ec91-4961-90e3-d78dbfa3b36e", "sighting_of_ref": "indicator--1e0e1828-9be5-4ba6-9ce1-fb36b051c8c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530e26b6-d14d-4bd9-9d00-f6c3b9f2351c", "sighting_of_ref": "indicator--c036263e-1b93-4407-aa47-6496ac03ba51", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4c3cbf-8b0c-4298-8bbd-a7afabd0392c", "sighting_of_ref": "indicator--77c519c7-4115-41b9-97cc-4fa762a26e86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7c455a-45b5-48a0-8716-cbbe9a4dff14", "sighting_of_ref": "indicator--4b689057-bcee-462f-bfe7-2571e804daf4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab79a5a3-72be-4749-9215-26584767613b", "sighting_of_ref": "indicator--545627d0-632d-4526-9144-266310a091b1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3940b22-4bda-4643-980b-2f30c89db4b7", "sighting_of_ref": "indicator--f8a4b2c5-5674-43bd-9e29-35d72408a009", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4218bc7-cae9-4d7c-bdac-40b7917917bc", "sighting_of_ref": "indicator--7b8e0810-eca5-4b08-b348-95ff844f84b5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f0679d-a8bb-4d7e-a034-be3ea3f552ad", "sighting_of_ref": "indicator--9390705f-9c10-4a19-8129-71d6bec1e16d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07138031-d98c-4c3a-933e-e66b7f05eb4b", "sighting_of_ref": "indicator--f8f85d00-d5f6-4c74-a076-3ca033106387", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8dd994-8ca7-4fdd-87e1-e996895b73c6", "sighting_of_ref": "indicator--696fcf17-12fe-4d33-b15c-03d79a7ec535", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5549398e-e07b-41d8-a337-8ea03e07140f", "sighting_of_ref": "indicator--ed068058-858d-4ef1-af44-aacce0de795a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fc2bc1-1406-46cb-940f-129e8f5910c6", "sighting_of_ref": "indicator--f262ebd2-ba9e-45e2-a037-4111a6391cb9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64abb6d9-62ec-42c8-9732-ef5ee3afaf03", "sighting_of_ref": "indicator--c18a7f96-e903-4bf7-9e4c-a04029eee9ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa2f47e-095f-4292-8cf0-c00743692af4", "sighting_of_ref": "indicator--37e4187d-20e1-4609-9016-4735c7edf19a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7d551b-19e9-4dd9-a7c1-61cc7bd3e289", "sighting_of_ref": "indicator--04b4eaaf-d2ae-441f-8536-adf236807054", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5b96e2-9cdd-48d3-841f-0b3a3bc096ac", "sighting_of_ref": "indicator--248c0170-9bf2-47aa-9ab2-b82d9c631537", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17da2f24-edd9-449e-886a-529bca92c6e2", "sighting_of_ref": "indicator--b4791522-7ff4-4582-852b-a0ddf5ce4c73", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86f005c-c6a1-431d-973c-ae0840662ecf", "sighting_of_ref": "indicator--3a1faed9-59b8-4bf3-ab7b-1c1006a57c45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac04f63e-c32f-4554-8cff-27c9cbd33570", "sighting_of_ref": "indicator--ba5d7baa-9126-4497-a0c6-1731fd7c6143", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8f1ae0-9a18-4c30-be77-bca7de2dbd6e", "sighting_of_ref": "indicator--2f9d0f48-04e6-4aea-b71c-2b7af63acbae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d711a9df-6390-47df-ae56-93acc1224198", "sighting_of_ref": "indicator--f48ccd7e-1114-4625-84fb-af8ba6cdf58e", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0758f1a9-9c3f-4178-a2c6-4925d3467803", "sighting_of_ref": "indicator--12232ecc-6166-4f82-9e1f-f1bef4189954", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727fc8da-7cfc-4688-8f15-813304b615d8", "sighting_of_ref": "indicator--4cb3b9cf-3cb1-4203-8929-bfd560580fa2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b8da7d-beb1-4d13-9afa-c98586e52952", "sighting_of_ref": "indicator--4cb3b9cf-3cb1-4203-8929-bfd560580fa2", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01fc5a3-4257-4120-8a33-b70bba213cd1", "sighting_of_ref": "indicator--4cb3b9cf-3cb1-4203-8929-bfd560580fa2", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db95bef3-a832-42fd-9457-c78401ebe714", "sighting_of_ref": "indicator--ff7d487a-b521-425a-abb0-ff91b29baea6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79677820-4460-4740-bc5a-2db05d5b3ad1", "sighting_of_ref": "indicator--cccf1a4b-4f39-43b1-9065-7da27c9ad0e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8d8838-49bb-485b-92eb-edbee2d10204", "sighting_of_ref": "indicator--5ac894e9-65fe-4253-93fc-dacefd10b94e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4acaa7-c14a-4761-8017-7a6a0df61f69", "sighting_of_ref": "indicator--1f0dbd86-2202-4c80-bdd8-29ced8ec8f34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f93109-0c89-4952-8a58-34bb9add8a22", "sighting_of_ref": "indicator--1ef478a4-1a1a-4e0f-8275-1f33f1a47b2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7147034a-2cf2-4478-90e1-4a4579fe616c", "sighting_of_ref": "indicator--da84fedc-177d-4862-b476-d80f2cc174f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe02f227-0efd-4929-a8f9-f77dfe8f5bfa", "sighting_of_ref": "indicator--a1436483-d55c-4e65-980e-c77b6c8c5a9c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3052bb0-26e1-4afa-a05d-d987be69f114", "sighting_of_ref": "indicator--0f45e6b5-5726-40ad-957c-da2db0f74173", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0dd986-983c-4302-84a4-acb3c2bffc1e", "sighting_of_ref": "indicator--aea6d6e1-1d88-43a1-b6bc-8fe243da9c09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0990495-b75a-436e-a2b6-aefda3106b6e", "sighting_of_ref": "indicator--3c53fcd8-387f-4512-917b-a59201b2d423", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a575a7-9708-457f-8198-6252408f9c8e", "sighting_of_ref": "indicator--b17c5c37-cc30-45e2-9e9e-7436ae4319e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e231b2-625c-4d66-a095-1bf913e27792", "sighting_of_ref": "indicator--801e4857-29ae-462a-9538-a05aa7180ab6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d7246a-9416-4016-a785-497835f8b977", "sighting_of_ref": "indicator--9b3d1074-6b3a-405b-9958-8c86bcee1ce8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a164c61b-0ade-4ef5-8ea4-d0eba21cc421", "sighting_of_ref": "indicator--4b090b6b-eae8-442d-9795-61983102d9fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768f70de-7377-4ea5-938b-30e7a9a99d89", "sighting_of_ref": "indicator--7089703f-b563-4c33-a76d-ec30bd829521", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73730159-0666-47b9-906f-6a29af891b09", "sighting_of_ref": "indicator--4b766db0-43d8-4cbc-8fd8-864fa210ebc7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c576a2-4634-43dd-9955-17c980881050", "sighting_of_ref": "indicator--08921590-91ce-48bb-8513-6b170f24661d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597e8220-d74f-4765-b80b-b2668778381f", "sighting_of_ref": "indicator--694ecdd9-ce3e-46a2-ba8a-ae606e0da3f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1c2994-0167-4699-98be-04431524e04e", "sighting_of_ref": "indicator--af295d51-f3d8-412f-8913-69e6fa8c719c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0eb1a32-1291-4f51-ba8a-a1c1c0507b71", "sighting_of_ref": "indicator--225a8c06-3f6a-46c8-ba50-1b866f27ba3d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959118e6-834e-4808-a066-cfe87041df4d", "sighting_of_ref": "indicator--58284988-f837-40f6-8050-8688b3434171", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8635cba4-0696-44d4-82d0-a370290163c5", "sighting_of_ref": "indicator--a5ccdc21-4069-401d-a1e0-b2bac5835da1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03cfb5c-2158-45f2-bbe6-d7761f4d61d2", "sighting_of_ref": "indicator--10ea3fa4-87de-4b15-af00-60a1efa59117", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481108c6-cee9-40c5-940f-1344e35d120d", "sighting_of_ref": "indicator--7d7a343e-6dba-41ba-ad83-b6bf032fdac3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cb758a-2ae8-4073-bc4f-9a91f19e0827", "sighting_of_ref": "indicator--45a87855-d918-45ed-ae6a-c23a5366bee7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc154713-51f1-4718-a806-4f2b38b3c7f8", "sighting_of_ref": "indicator--3f48c3c4-0e15-45ba-82a5-a6810e070ff3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8784e1d-3633-4214-94fe-b03433ecb8b1", "sighting_of_ref": "indicator--dfaea65e-6059-4142-9948-df6a45553574", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bb6063-f58f-458e-b8ea-47e9e030623b", "sighting_of_ref": "indicator--825e8316-44da-4b8e-863c-f1500a5b5499", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4ea17d-3ebd-430b-898b-9f0009ee3ff0", "sighting_of_ref": "indicator--9f0f6aa1-ccef-488a-aa2e-91f0d04536a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e36628-2836-406c-81be-2763f7aeaf71", "sighting_of_ref": "indicator--fef76042-a65b-460b-aa73-72c3265f317a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46325225-631b-4969-8fb0-ea6331107d6b", "sighting_of_ref": "indicator--9f2cdb4d-0ae2-4713-ac09-19f991d2e42c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3972f7f-cecd-4495-b2bd-99acb472e13e", "sighting_of_ref": "indicator--9d8bdb26-b7ab-4da2-8b08-4dd8f8b11b2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec19473-56b4-42c4-9fac-b168d693b9f5", "sighting_of_ref": "indicator--9df463eb-9e88-4fe0-be7a-6dfab3e5def9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8ef0bc-d111-41fa-8f20-40cea06e6936", "sighting_of_ref": "indicator--0f00d4d2-cd08-4829-9145-272d4ca9c3ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37d25cb-ec8a-401e-986f-f1c98fb5dbe0", "sighting_of_ref": "indicator--543c9cde-dd23-4070-a17e-a7def634a33f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ba0f55-1235-42df-a9c3-649780dc1d6f", "sighting_of_ref": "indicator--05fae702-fde6-444c-a333-d33eec5c6020", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109650ce-7070-496e-8c15-b42e8d80be76", "sighting_of_ref": "indicator--2e3d4da9-14b9-456e-9754-d492a704e8c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c3607a-8e0d-43f6-89e3-5182c29d3c25", "sighting_of_ref": "indicator--bae4a8a0-f67d-416d-9839-d111211c57e4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3c18e9-3cf3-45a3-9692-2ae5407cb86c", "sighting_of_ref": "indicator--da63cc67-3b1c-479a-ab35-baefe8100e72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26314038-ab46-4b07-b51c-b8841c0f7f0b", "sighting_of_ref": "indicator--de1e1f80-25be-40aa-919d-995096e9d0b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b040882-7648-45ae-8563-e18559913541", "sighting_of_ref": "indicator--f9c26973-ddcd-4912-a711-221721dcaa11", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f013a91-94b4-4a25-9859-e24ef6f3eb98", "sighting_of_ref": "indicator--e58901ac-ee5c-451b-8b0f-5f87ad0dda0f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ab81e0-e855-475c-940e-4cf842f41b9b", "sighting_of_ref": "indicator--b1169a25-062c-4c62-b279-1207d2364271", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64aab6a7-bf90-4004-955e-5c63b44a3f21", "sighting_of_ref": "indicator--41d527c1-29bf-4243-b4ed-081824f2e2f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d159c88-89c6-41fb-890b-e5cee7802943", "sighting_of_ref": "indicator--8a8330da-7133-4a1d-b069-ec51f94f45e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd57c8bd-20e8-4344-9355-3e9eb3f4f30c", "sighting_of_ref": "indicator--cd9c5e4a-732d-4c95-af4b-68c2803491b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f41249-2d2e-4441-a4f2-e047b2c615bc", "sighting_of_ref": "indicator--6661b200-56c2-4872-b596-e57c5e7e954a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ef967f-0b56-4899-8676-4effd8bd90d9", "sighting_of_ref": "indicator--0338ed86-9907-4e12-a801-18b482253cf4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56e0a0c-80ee-4e33-98b1-b748cabd8bb1", "sighting_of_ref": "indicator--918ae315-912b-4e99-adf6-0149a88ef4e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f7efad-cf8e-41d2-9b4e-28f34c311ec6", "sighting_of_ref": "indicator--37dc9984-0767-435d-aef2-2ea6d065940c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1505a982-b3f2-4e42-857b-3f70c901c95c", "sighting_of_ref": "indicator--6576977c-8231-43f4-9803-ce4eddc02a15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e0e424-cf20-4aee-86c1-171789a81a56", "sighting_of_ref": "indicator--d7bbc8d4-ae7d-4504-975b-bada68d96edc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2f9ffd-f9f5-49db-95c3-ca8cb4dfaafd", "sighting_of_ref": "indicator--c10ca294-f0c8-41fa-bb03-d134e8fd1873", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584dacd2-a164-4d67-be7d-f66f61dc15d9", "sighting_of_ref": "indicator--c10ca294-f0c8-41fa-bb03-d134e8fd1873", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f596003-2532-49dd-8064-5673e9d28adc", "sighting_of_ref": "indicator--c10ca294-f0c8-41fa-bb03-d134e8fd1873", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd718282-4ece-4e53-973d-6364fbf86df1", "sighting_of_ref": "indicator--95e49c53-99de-4dfc-9663-40485db47ea8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6b0921-ba31-42b1-a5ae-5d2b10143688", "sighting_of_ref": "indicator--aa12c34c-6c69-460f-b1ce-4593f3bdd0ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2476cb-5305-40aa-a905-20e99c4fa389", "sighting_of_ref": "indicator--ba3f867c-a00a-4754-b035-d095ff5a30a1", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c057f558-eba1-4269-8a89-28e68e7a81bb", "sighting_of_ref": "indicator--3fe86374-425b-43e9-8b2b-07584d4a6d16", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8504a368-2a4a-4f31-a07d-dfa506488f4d", "sighting_of_ref": "indicator--29d1cde9-2a8c-4902-839d-3d8be23dd097", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897c3c0c-522e-4796-8ee6-f3d6ec000afc", "sighting_of_ref": "indicator--fd96f871-9e1b-4508-9252-6973cfcdae7e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e871fd-9627-4510-b9fa-a5557440c31f", "sighting_of_ref": "indicator--d61335d6-e140-4c04-8a78-79e4d3904e9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97dda12-cfa6-4f48-b0e1-f1d876b8d59f", "sighting_of_ref": "indicator--aeb04321-54c7-4878-9a49-bea064e1b2f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f99e1f5-0229-4f50-9e7b-69792e083333", "sighting_of_ref": "indicator--1b59d3ae-47ba-4716-832f-44ccc39d3800", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0660ecdd-c1f6-4f23-afdc-6d422cbccb5b", "sighting_of_ref": "indicator--692c4937-fd3a-4f53-9df9-3889ed19c76c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b0eb35-46c1-499d-b5fa-bc0f55cc6d59", "sighting_of_ref": "indicator--4523d809-a64e-43b1-a8fe-a38634d0569e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8517c612-f7f9-4aa2-864a-22f99031b174", "sighting_of_ref": "indicator--0e1fc5af-d043-46d9-bfab-bed9f774f77d", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f987865e-9fcb-4430-9291-bd0e9825cbf9", "sighting_of_ref": "indicator--fde790bb-e0c4-4892-9a36-c3be10a9a70b", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdda70f-b18d-45b6-95e8-61db0d8e345b", "sighting_of_ref": "indicator--ff7fc297-d308-42ea-8492-f2017358619c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabd355d-1ea8-465f-a8bf-d18161120079", "sighting_of_ref": "indicator--36d44eef-374a-4b99-8fd2-df4a04a4db4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9054892e-c267-4972-b171-d9567454f41f", "sighting_of_ref": "indicator--78ea9ba9-2aaf-4c38-8dad-04fcba813fff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef6c99a-66a2-47db-a4c2-9544217d56c9", "sighting_of_ref": "indicator--1846ea01-647f-4bcd-bda1-d2a710de7595", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e1dd5c-14d4-4e8c-a4a6-a65be812d679", "sighting_of_ref": "indicator--39cc8122-df91-4104-abd3-a7c44f9a016a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d3a6e2-7981-416c-bfc6-3f8878ffb229", "sighting_of_ref": "indicator--ca2fed5e-6ea6-4864-ad4f-f323e3690142", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801c0096-c8e0-4783-91a0-d9b5081419ab", "sighting_of_ref": "indicator--e24ede41-2558-49c6-a2a3-78402989264c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3805a602-d5b6-4d39-a3f7-33a93ce649ac", "sighting_of_ref": "indicator--383ecc23-55f3-4ab8-a1de-6a785bc700f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29e5af0-bb60-4f6e-b8d3-8a61b8a70459", "sighting_of_ref": "indicator--1a9a323d-ca46-49b6-938f-aed00f2ffbfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e31f89-9b7c-468b-a48f-0a81f412f1c0", "sighting_of_ref": "indicator--383752a3-a3b7-4896-99c1-bdc158882f87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821bbc60-7b9e-487f-8881-64218a5a165c", "sighting_of_ref": "indicator--4504d63f-5316-4da6-b1bb-572bde0c6461", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da81cd40-85f7-4849-a286-15b4ee8c8c02", "sighting_of_ref": "indicator--0d0eef5e-43f9-4c00-aa71-10e35a5eafbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a014d1-8e74-4285-ad03-84d20749a857", "sighting_of_ref": "indicator--578010b6-cf40-462c-80be-6d2e65b32914", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c84931-a852-4371-80f5-7defa25452fc", "sighting_of_ref": "indicator--71c328a8-a59b-4e4e-91e3-873d2902add1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88700fe-fe2e-4e3c-9769-4b30cd55137c", "sighting_of_ref": "indicator--b16778a8-fc8e-4847-aba5-3c83f6e88b45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4de89a-5e1f-40e8-ac44-36865785418f", "sighting_of_ref": "indicator--7f89b320-c462-44c0-88d8-432315c0d90c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73c9130-1a9a-4466-bc2c-346b96ff339d", "sighting_of_ref": "indicator--3973b926-253a-4e6e-b9a0-4b33c0f23826", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385324f8-9c37-402b-ab3e-25f3ca48caef", "sighting_of_ref": "indicator--be3f36d4-01c5-4f56-bded-7a5127c5bb88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4241cb6-1b9c-48d4-aec7-f20cb3f5ed47", "sighting_of_ref": "indicator--3546e8d8-0bf5-4328-9875-89301ea59748", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe7aeea-984f-461e-83f8-fe5795fc9bb3", "sighting_of_ref": "indicator--cac0f103-795f-470a-8f4f-fc5ced76d348", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29aae8af-81a3-4b0c-928c-7b0735c52db1", "sighting_of_ref": "indicator--22713829-a8ec-486d-bf41-bb417eabdd0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b0dc8d-23d1-45ca-9527-586fcb8f7b65", "sighting_of_ref": "indicator--c9c3c57b-0c25-4735-b5e2-361051e12bf3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4177ef6-34d1-4f37-b231-971a830be1ec", "sighting_of_ref": "indicator--4111e530-e705-4373-a157-38ad95be136e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38326f5-373c-41ce-b814-17ce55f17512", "sighting_of_ref": "indicator--11c6b11f-fbe2-4ed9-8b36-597224d97cdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c725b8e2-0bec-42cc-897f-66db11fc43f1", "sighting_of_ref": "indicator--05602503-0dac-42ce-afdd-112a5b161e7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786ef13d-595e-4742-86e2-ab332c459bcc", "sighting_of_ref": "indicator--7cdbe083-a913-4983-8f0e-5c47c37a714f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb61b09-d216-4a4f-8f07-fced86dddde7", "sighting_of_ref": "indicator--11a77e3e-3112-4e5b-9174-73b2da5d4858", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc32b05-12aa-46c6-807a-cd3bbf9381c9", "sighting_of_ref": "indicator--db4ded76-5cbc-4d5b-8b82-de9f2e6d02fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e2a5dc-6b67-4b2b-8420-0b97f23fb894", "sighting_of_ref": "indicator--92f169fd-a6ae-4953-8e8c-872c94630517", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcb71c3-c571-471e-976d-8d5999bd75ab", "sighting_of_ref": "indicator--264fdfef-68e6-4a44-b741-1808c838a81b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec8a4bf-1f74-46a5-8f4e-3ad0d1573565", "sighting_of_ref": "indicator--13cee8c2-7d80-489f-97aa-20d56c810602", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373e8be0-4312-4f9f-aaec-84b64ebf1303", "sighting_of_ref": "indicator--1805dbd8-82bb-47b2-bc92-fc49a76af4ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b36cc22-8b26-43d3-9df3-b2491fdc9b95", "sighting_of_ref": "indicator--64d18a02-a285-4459-b6cf-67c2902c82cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49dce83-d80a-4ee6-bafd-a90a18c85ca1", "sighting_of_ref": "indicator--2137cf7a-466a-460e-8a4e-153788c436fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad299063-e7ea-4161-8bec-0b498ef04182", "sighting_of_ref": "indicator--0f58840b-2ae6-42b9-b8bd-94f4c5c20333", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c6ca47-bce4-4505-bb3c-bd68a11d0403", "sighting_of_ref": "indicator--72abbf47-7f0a-4706-9896-6ec67bd3baf4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2621acc6-c24b-40d9-84de-3e9ec0c2a72a", "sighting_of_ref": "indicator--921325dd-0108-4706-a780-8a1585b11793", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e4747b-1fed-454f-ad62-7f84a843b510", "sighting_of_ref": "indicator--82429600-5b80-4eee-bf8c-352f92b0482d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3866ade-60a4-468e-b335-ee72420183e5", "sighting_of_ref": "indicator--36284412-ad5d-475c-b3d8-47a1779c89cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd65b2e-06c5-4cbf-a49d-30d0ed430d2b", "sighting_of_ref": "indicator--f0af6787-d846-4f23-9209-4ee93864d936", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f356b5d-c6a9-4753-bea9-32550d807cef", "sighting_of_ref": "indicator--c9378f81-f5ea-4b23-8190-a2bec9dcc2c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5583c055-062c-44d7-83ed-7bbf120b9537", "sighting_of_ref": "indicator--1c38e616-9e0a-4bee-b6c9-ea44b2749746", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48758937-0482-44e5-8395-1bcd326dfe01", "sighting_of_ref": "indicator--5285d6b0-020e-4a62-b939-0b77b9153cd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f169d6a8-63d2-48b8-9fc6-d953893ff991", "sighting_of_ref": "indicator--e925926b-561b-47b9-b1c2-65708b49465e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30769a01-d621-4e37-82a8-765cde9fda90", "sighting_of_ref": "indicator--58b21ba7-6664-4877-9b7e-e542f4101dba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9800f16-b173-4ff4-b74b-61ff4cfdec09", "sighting_of_ref": "indicator--ea731591-31bd-4ee4-b4ae-d0941a3f49f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef8a619-ed96-4f40-981e-ba130a6875d3", "sighting_of_ref": "indicator--ea731591-31bd-4ee4-b4ae-d0941a3f49f8", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b1d952-79e2-416f-91de-becb028ae735", "sighting_of_ref": "indicator--ea731591-31bd-4ee4-b4ae-d0941a3f49f8", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f993412b-9b01-496f-bce6-ac08b36e9084", "sighting_of_ref": "indicator--e78128b4-0b1e-4fdc-ba27-0c6b9b14064f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41371d57-cdb2-4dd8-9e58-03c176151a10", "sighting_of_ref": "indicator--0c450148-728f-4351-962f-79fb3c6091c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159ce1a1-5a77-486b-8c32-ab9ac302b091", "sighting_of_ref": "indicator--97093ce3-eeb7-4ed7-b3e7-fea907622fcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ff7ae8-056f-4f89-8ed2-4db42ef3f098", "sighting_of_ref": "indicator--ea49aa82-2858-4c7a-a243-328594f51683", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a866a1-242f-4d70-a4f0-1ef4aa63bf5b", "sighting_of_ref": "indicator--1ea94156-dda6-4c91-833e-c5a70733c71a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f37dd9a-4bb3-4736-9592-c8d63ca6e6e3", "sighting_of_ref": "indicator--7b71fd3e-2f7e-4c6b-8627-dab140159f19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fdbc22-427b-4897-b104-e346b17fbc01", "sighting_of_ref": "indicator--bad15646-ce27-44ba-99cd-1208c525b57e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee8fb11-b4cd-4b78-a528-9f42cb06384d", "sighting_of_ref": "indicator--4f912113-b4a2-4e4e-aacb-e1c16e3dedc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49dcb1ba-c087-455c-8b61-595ff3c3c96c", "sighting_of_ref": "indicator--a0dba249-5793-4ba6-a3f4-9e225410701c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909e3f09-679e-4ece-b37d-dc002b6088bd", "sighting_of_ref": "indicator--3e101900-c767-4abd-8c68-15079e13a249", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d8a711-4da1-40ad-846f-17aa5e57d765", "sighting_of_ref": "indicator--052d3ec5-9465-43f8-a984-b604a9f00d75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f26c85-5bd1-4456-9c10-cd884f988665", "sighting_of_ref": "indicator--cbe29653-aabd-4813-a5ff-3c8d920cf79f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975e4586-7e05-4e5b-a46b-762df2a072e4", "sighting_of_ref": "indicator--2fca26da-9cc5-43c3-90b8-cf9909e6a327", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1df4cbd-f05a-4abd-9cd5-2927e6bda61d", "sighting_of_ref": "indicator--b8947bc7-db9f-4c6d-a0b6-b07a6f912afd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba85613-422d-4235-a5b1-2830ad43d890", "sighting_of_ref": "indicator--29abe02f-ec1e-4b24-840d-5ad73f353822", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c1e957-8e2c-4622-865a-786e637b8786", "sighting_of_ref": "indicator--d727342c-68b0-4eab-89fa-77192bd218db", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3815fc-36b3-4ede-acde-eb09d7b5808a", "sighting_of_ref": "indicator--7b105eb7-a2d0-4fce-9971-15bf7c2e8cbc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910647df-3b65-4790-ab97-35db0b71d8d2", "sighting_of_ref": "indicator--daebd799-26dc-4a92-976f-bbcdf0fe2c27", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280cdb57-6c87-4c9c-b250-7b5e5701076b", "sighting_of_ref": "indicator--bd1437fe-510b-40fc-a4f5-bb09ea6092d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5153e0-82ce-4baf-8744-cda486f7daf0", "sighting_of_ref": "indicator--3f0af19e-8672-4fc0-8bdc-f89bb1bf2718", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c84c58-0175-48b4-a2e1-99ad0a1cb075", "sighting_of_ref": "indicator--ce23ec4d-2979-4d25-8940-ba73d96e34f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d909c5-13d5-4222-ba4d-6f0caa7f6978", "sighting_of_ref": "indicator--a39d6191-d622-4894-b467-8e6103aa0ade", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe17793-97c3-46b9-9bcd-95b75299d107", "sighting_of_ref": "indicator--2c1bc5f8-3efe-4a51-aff4-2488dbd1265a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a19d6e-76d6-4dac-ae89-f243b12cb587", "sighting_of_ref": "indicator--f3cf0e2d-61d0-458a-8024-818d5afaacb4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ac8350-cb51-4e3c-b3e6-d1d36b281691", "sighting_of_ref": "indicator--06e6db15-f67d-4a79-9c22-1c7495dfcdd4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e1fbf6-a337-4044-ab85-33cc60a77b7d", "sighting_of_ref": "indicator--102e613a-3e79-451c-9bb1-71029a81d381", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aeb0a74-ee98-4215-8908-dafe1a37ea9b", "sighting_of_ref": "indicator--a028b3d0-0bd3-4a56-9e3e-ac50e9c2c4c5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b247efc-9e27-4932-9d6d-793e25f62462", "sighting_of_ref": "indicator--5361e35b-7f45-45ea-89df-af3200097f84", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e02495-a12a-4042-bef6-5b9eb3b11cfb", "sighting_of_ref": "indicator--c8918c96-6357-4dab-9ee8-9ced02972cac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16327bd8-ed18-486b-a953-b168988d5dd9", "sighting_of_ref": "indicator--14303c04-4c15-431b-b78a-26d0befd3c44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee91af5f-0448-4ea8-9e67-5569d8010c81", "sighting_of_ref": "indicator--6582ede5-c301-4378-93e2-f5ea311ce932", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71d3df6-70e2-48c2-9ed9-f58f057efd2a", "sighting_of_ref": "indicator--3b31d32e-e4ef-4ef8-a018-7a5395606ae6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1563886-fc2c-425c-8659-62661cb6cae4", "sighting_of_ref": "indicator--769fbd42-9554-4ef8-a3e4-bda988a2b106", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0eec002-29ed-4cd7-a210-83060ccfb36b", "sighting_of_ref": "indicator--073e9af0-5707-4b16-bc91-96f287a967c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cc471a-2580-4b94-bf3f-407381a59aeb", "sighting_of_ref": "indicator--8808e550-75ca-4e9d-bf7d-0ecedc9cbcc2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6722b1-e418-488c-ac6c-b693eef1ca01", "sighting_of_ref": "indicator--2eeb7499-223a-4271-badf-38b5de9735c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076c5e09-467a-4f90-ace8-e223e8b1d9d1", "sighting_of_ref": "indicator--72969966-8f44-43e8-b508-9f1419557a19", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abfe392-a153-40f4-a697-dbda4d8d24a1", "sighting_of_ref": "indicator--ccc9e301-2a50-4ed8-ba79-c14f3bbb7384", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc4bbd5-20d2-4474-b4c6-81855403c66e", "sighting_of_ref": "indicator--22b5e6b8-f0a0-4103-b522-9c87f5a14bcc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b5574b-d65f-4d3c-83ab-8cbceda15305", "sighting_of_ref": "indicator--2fc19db0-1039-4c5f-bd47-bcdc3c657904", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3086be63-136c-42c9-8924-4a37b18bf5db", "sighting_of_ref": "indicator--2fc19db0-1039-4c5f-bd47-bcdc3c657904", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedc3057-8720-4bc9-985f-268139bef5bd", "sighting_of_ref": "indicator--2fc19db0-1039-4c5f-bd47-bcdc3c657904", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2e3d9a-ee8d-4931-b0c0-fdc87adc57c4", "sighting_of_ref": "indicator--a6eb0f0f-bf46-44c0-9a55-32a931065b48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08264ed8-8a67-4773-8445-17d6b1bba4ea", "sighting_of_ref": "indicator--a6eb0f0f-bf46-44c0-9a55-32a931065b48", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429034c1-43f0-42b1-9196-7515c3291334", "sighting_of_ref": "indicator--a6eb0f0f-bf46-44c0-9a55-32a931065b48", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37605bad-232e-48b3-9200-40ab9bc32940", "sighting_of_ref": "indicator--d5a8dd68-4e05-4c3f-b3ed-72f09cba5af5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da524e0-faeb-4c09-94d7-bf8dbf057d4b", "sighting_of_ref": "indicator--d5a8dd68-4e05-4c3f-b3ed-72f09cba5af5", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d29ac72-035a-4410-8cda-a4a06647482b", "sighting_of_ref": "indicator--d5a8dd68-4e05-4c3f-b3ed-72f09cba5af5", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50c6a77-b4f3-44f8-8971-594fece5c357", "sighting_of_ref": "indicator--ce019b2b-bcdc-4111-9a99-79f0709203e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6942147-b8ee-46f3-a8cb-059cec686225", "sighting_of_ref": "indicator--ce019b2b-bcdc-4111-9a99-79f0709203e5", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71acba8e-4f6d-4dfc-a387-d81832facacd", "sighting_of_ref": "indicator--ce019b2b-bcdc-4111-9a99-79f0709203e5", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f46d606-714b-49e8-82aa-07e9eef9d1f8", "sighting_of_ref": "indicator--dd9ee5fa-7376-4c93-b32c-27e8c9265b4d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a48fa3c-8d36-4d0b-bdd1-094f994a4e21", "sighting_of_ref": "indicator--68e96de5-d82b-4265-8698-331ac05738bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55235aba-f051-465b-a260-21136e7a43c9", "sighting_of_ref": "indicator--cbccd3d8-9b22-4f93-b379-553130dbb9f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb15b3d-fe5a-4a49-b3d0-faaf2894789d", "sighting_of_ref": "indicator--53f71f28-c260-43ba-94b2-117a0c262523", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f531320-981a-4e9c-b5a8-9fdffd56a999", "sighting_of_ref": "indicator--577fc8e0-e1d1-4ae4-9c05-a58ecd6b259c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1aacf9a-0782-484d-b0d4-36a37b746a59", "sighting_of_ref": "indicator--2404c90f-bd9f-44ac-b817-8cadd4b1746d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de851e61-c632-4274-8374-799e565ad1e8", "sighting_of_ref": "indicator--32d87bd4-91a0-4656-909c-abca0b376fe0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b19590-98cf-4f89-aa18-4a5e3688389a", "sighting_of_ref": "indicator--d2d74d7a-ee6d-4495-b277-c8b7c9164478", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f0c7b4-5b8d-458c-9068-001aeceb876d", "sighting_of_ref": "indicator--ff5ee315-8feb-41a8-8e99-63e22746e11c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2425683-87ba-4a1e-b758-194718c4c8b2", "sighting_of_ref": "indicator--7b97a0ee-7362-4cb3-b259-536c81269cb4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fd3875-f330-4051-b664-d24a5989c892", "sighting_of_ref": "indicator--5a90eef3-24d5-4fb9-9487-888efda35cf7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26aa53f-abb1-4c8f-967e-7bf2cc7b0a36", "sighting_of_ref": "indicator--5daa9f65-a2cd-4217-b6c2-ab17007eeb01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2e9499-2370-4b01-81a1-3fcda757cb2f", "sighting_of_ref": "indicator--82f30bce-717b-44d7-9240-d654e9f38ab8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b241d6d9-058f-4270-9972-a856ed1035eb", "sighting_of_ref": "indicator--b6b57ac5-a6db-47bb-9e8c-7731593cfdbe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685c5264-9dd3-44c3-b145-fed801100915", "sighting_of_ref": "indicator--bf4f1fb8-5829-4382-8253-164faa18cdfc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9bc830-d51d-4a61-a0e1-141c7e83d3fb", "sighting_of_ref": "indicator--df4264c9-596f-41bb-9909-51451710f70d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da848fec-3200-43bb-91c4-34a252aeaeac", "sighting_of_ref": "indicator--b48a5fd0-d8bb-4718-929d-7e67fd995e33", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a86f008-658a-4719-a7e6-54df00c4a848", "sighting_of_ref": "indicator--f7da826e-9ada-45d9-9808-7f4565a2290f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba86c0d4-572c-41ca-896b-70e58b5f971a", "sighting_of_ref": "indicator--a462cb31-8b28-4e5c-81d8-4d7cc8cf74a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad908378-fd2e-4acf-9f71-e9658962d9a2", "sighting_of_ref": "indicator--0e260d46-8646-47fe-97dd-d2c4610be294", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408dff82-e3d3-45df-bc46-16f5fc3e56ca", "sighting_of_ref": "indicator--fc46ddb5-c4d6-4dac-a7e1-102ee0e2a358", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21284a98-8e9a-43c1-bb21-e4995836ca67", "sighting_of_ref": "indicator--60ed4be3-7cd3-435e-a28d-ff6f25f5598a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df47cfc-4fde-4d01-8d68-c85c88586100", "sighting_of_ref": "indicator--c4db7b16-aa9d-4742-81c0-12d749e8c10e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b8a2d2-7476-41ce-aeea-457c4c6bd417", "sighting_of_ref": "indicator--5d3cee5b-bfb6-4076-a518-7f0ff2dc9a30", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6330a9-6d27-4cdd-8318-1065b8f17c0f", "sighting_of_ref": "indicator--8c224e62-d845-4f8c-a30b-1ebe5c905f3f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750839d4-69a1-46c6-b9f0-85938729d84c", "sighting_of_ref": "indicator--46028604-90b1-4a98-b4eb-faac5d112695", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71525dc1-684d-4be9-b8d7-b1f195cdaf67", "sighting_of_ref": "indicator--d17c898b-f721-44b0-b7a2-100816421b43", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d94bcb-bb55-40ac-b40b-aa6f6ffea1de", "sighting_of_ref": "indicator--035080d0-13c7-4f92-b981-1710fd66e909", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d22042-d710-4fe8-8542-8305deb99814", "sighting_of_ref": "indicator--308bca3b-f32f-4d3c-9255-906e97a2f6b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f22dc77-d36f-4d35-a36f-51fe6e6b650f", "sighting_of_ref": "indicator--ead5da76-9ebb-492c-b3a7-c025439c2a05", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae8bd4d-f93d-4cea-b19a-8678b7d5bf54", "sighting_of_ref": "indicator--83de02ad-56e1-470b-b28b-042ba935b81f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48efb843-e8fa-46c7-8c6d-59c7575b4516", "sighting_of_ref": "indicator--dc473a3c-c0bf-48f7-8fe4-ff4f3b2c183e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46add53e-0f84-46f6-9855-897026b68919", "sighting_of_ref": "indicator--b915c794-6498-40ef-834d-7598355b60d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cedb182-9e27-48a9-afcd-6b19220390d5", "sighting_of_ref": "indicator--bfb188a6-efa3-4526-a4c1-682eefd12bf3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319c5f4b-2a12-417a-b120-643054dea189", "sighting_of_ref": "indicator--a9468e17-d71b-4860-8428-262acedd9f18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aefc26c-169f-4dd1-8868-7ee3d2fadcff", "sighting_of_ref": "indicator--b026d616-f5ad-4cdf-86f9-5f84f9c7ed45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c36371-fef8-45a3-9f83-a1922fcbb0f9", "sighting_of_ref": "indicator--25478bf0-2a06-405b-889f-d0fc43eb0a34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941ac7a5-aeb4-47e7-9151-c22247f58d78", "sighting_of_ref": "indicator--dc5516ce-65d7-4633-95d1-73e0b45d8289", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0509c548-113a-4198-80dc-6e4ddac2c850", "sighting_of_ref": "indicator--7c610fbc-e970-4bd6-b9b0-84be779b5ccc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84938e98-1ae4-45f0-8b86-13c66992b949", "sighting_of_ref": "indicator--31095e04-5d92-40ff-9cc1-1b0f146a1ad2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f455a5-b71c-4ab6-8939-5b69472a6dd7", "sighting_of_ref": "indicator--9a0f11f3-0c54-4fe4-aed9-51186146634d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4821270b-b49f-4678-98ba-7e5d2fa5bf82", "sighting_of_ref": "indicator--69e240f8-6808-4a91-8f73-faf1d25e8ebc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298b097e-f232-408a-8954-e07bd99fa9d8", "sighting_of_ref": "indicator--859811d9-4428-4629-854a-2bb71cfa252a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a09adf-713e-4279-9b7d-8106819b26f3", "sighting_of_ref": "indicator--19a2d1b7-3bbf-4396-b8f9-dbd9a3cb3517", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bc3cf1-9adb-43f8-bb44-392867e8ac35", "sighting_of_ref": "indicator--6ef1b3de-6674-42cb-a6cf-dc973fc80aa7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c35922-2fa2-4e5b-a4bd-2481e8c5095d", "sighting_of_ref": "indicator--e0ec8aee-dc68-4ebe-bd7e-6e9befbf8676", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0e095f-751f-4c70-97dc-20020c20504c", "sighting_of_ref": "indicator--89565023-06b4-4296-ae85-1548b89929ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608f814e-6460-4502-b386-124f33167b60", "sighting_of_ref": "indicator--eeceadab-fac5-4b95-bee0-d5913857e2ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54416af2-59b0-44cd-8239-6802068832df", "sighting_of_ref": "indicator--f237edf3-60d2-410a-bf29-cc317f962f70", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a1cf19-fcc1-452b-9c0a-cccb21239d56", "sighting_of_ref": "indicator--7cc32e94-d3e8-47a8-8af7-4ebd0f7028d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b0f6c2-3faf-45b5-87cc-51459bed7edb", "sighting_of_ref": "indicator--903203d6-7315-4767-b4ca-8557a2fd1d22", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdac1cd-01fe-4694-8498-d42b1ca82460", "sighting_of_ref": "indicator--7e858721-50c3-4537-921c-3d62c92f91b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2a8729-09af-4c50-8d06-2054ff94d88b", "sighting_of_ref": "indicator--7e737487-f0f6-4e1f-af30-db6adeeafdb3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44498ca1-ed4f-427f-92ef-717960a5d058", "sighting_of_ref": "indicator--4a3e1fa4-6db2-4b3d-bfb4-c9348227e27d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ae97ef-6a43-43f0-a974-06810f7dd543", "sighting_of_ref": "indicator--ef38dbb0-ba20-4061-b34e-99c923fc78d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff747cb1-d576-4dd2-ab24-eab1ec500370", "sighting_of_ref": "indicator--4baa743e-785c-44b7-9f43-352d6571335d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c40be58-2a15-4863-be7f-91ce305881b4", "sighting_of_ref": "indicator--6a4ed53f-ec5d-45cf-a98d-e4b4928d4ed4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3334b4-f079-474d-b9cb-4a46346acae7", "sighting_of_ref": "indicator--547f84d2-0576-4964-88a3-f96f4fcedce2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44726c47-0140-4b8d-92de-fb62940b10b0", "sighting_of_ref": "indicator--ab961c1b-adb9-4b29-b944-bafa0ac68fb0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9627a235-ee74-4c02-be97-a35a63527268", "sighting_of_ref": "indicator--b26fb237-9bbd-437b-8d45-01007e2d97da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53033085-9dc9-47e5-adcc-20da9b2e70b6", "sighting_of_ref": "indicator--fbfe1e9d-9eb1-4832-8a00-4401021b3ffd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a2ac96-b0b7-4b34-8016-dd9d9ef2bb2e", "sighting_of_ref": "indicator--89bfdc27-400e-4cfe-96fe-73e4e4db6ea7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba95ba36-6b48-4867-8ceb-9ac2719e8090", "sighting_of_ref": "indicator--f8be8c22-027d-4819-9c4f-0dd6832497f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbd63b6-794b-4670-b65c-cd9ddc5699f4", "sighting_of_ref": "indicator--b48a8b49-cf15-4e12-920a-2837a6972071", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274bce7b-9fc9-4df0-83d9-e6f4f55f703a", "sighting_of_ref": "indicator--ed72cfeb-6c11-415f-a3ba-437467291a95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8e6a0b-de27-4f32-940f-454eb11bc5f1", "sighting_of_ref": "indicator--51497633-3c0c-4e88-860c-d0e6d66b500e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb67c402-bc74-49b7-b9fc-c3f343ab3d24", "sighting_of_ref": "indicator--2259a1d3-1f5b-451f-a33f-dc5018a96975", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081ce409-5ac1-47be-931e-98cf7e6828d6", "sighting_of_ref": "indicator--e0ca3a90-d54d-4ffb-b8b8-0cc822849dfe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955904db-87b5-446d-bbb7-eb5e61864596", "sighting_of_ref": "indicator--e0ca3a90-d54d-4ffb-b8b8-0cc822849dfe", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49b2831-d8d5-406b-89f9-62be6acf28f8", "sighting_of_ref": "indicator--e0ca3a90-d54d-4ffb-b8b8-0cc822849dfe", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58271f64-a5a7-4c99-b4e1-78adba8e0eeb", "sighting_of_ref": "indicator--7f14090f-a444-4054-88a6-cdc243a3f505", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09331e17-8365-4152-8052-ba93a11c1205", "sighting_of_ref": "indicator--e5373ebe-bc8e-44a8-ab6d-b5f9f8f59e83", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2f67c9-1fae-4738-b66d-b15237758ce7", "sighting_of_ref": "indicator--352a1ed4-6468-40b3-afd4-b3fb36e64e81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46146e3-4432-41ff-8461-0a81eed89831", "sighting_of_ref": "indicator--a0682be1-2b5f-4272-9ee2-d7b6253a565f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a5c7ed-a10f-4d66-abed-ec9ede1caef5", "sighting_of_ref": "indicator--11fc84ab-07f4-4448-ae71-ab2cadc6d2a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5858913d-4e07-485f-9bf6-eeb3dc81e7cc", "sighting_of_ref": "indicator--560749db-4626-4717-814c-e5bf2c53dd98", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bf75fc-f5d4-4fea-ae48-0b766b27bc16", "sighting_of_ref": "indicator--a01634f5-e249-4f29-abc6-78802517881b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99e1386-460b-4c3f-a25b-5a5febd1c10e", "sighting_of_ref": "indicator--7d3139a1-ea9e-4833-bcd9-b9b6c05d3e1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0056c4e-40f7-4062-afa7-a9d4b684614c", "sighting_of_ref": "indicator--f25fc4e9-3812-4ef6-a57f-92129c5203f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39531da0-b0dd-4ff1-b778-1b0d80c8c43a", "sighting_of_ref": "indicator--04ec870f-203c-469b-8631-da2393b2cdfb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82e808e-3d52-48a8-9352-cb983b0b8971", "sighting_of_ref": "indicator--89d3ddc7-dd4b-4214-8ce8-1b171c82c3aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf07389b-e1e5-43d0-be8c-20ecb9cc0c7e", "sighting_of_ref": "indicator--d8818fd8-95a7-46c2-92af-6a553e10f6ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e453b0f1-9468-4a04-9ade-a831dc70d59d", "sighting_of_ref": "indicator--c5f28b4b-0d48-483e-8a94-d08693d8e832", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda993cd-af55-4c6c-a7d2-cd72d7e4579d", "sighting_of_ref": "indicator--bc1cbc44-f682-44dc-b02c-7511a33a625f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ead143-ac13-4fac-877d-b7eb7b6dd845", "sighting_of_ref": "indicator--ad6df302-1189-4fe1-acd5-71d4ad8567db", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551bff72-4016-492c-bb11-856f65a02199", "sighting_of_ref": "indicator--ad6df302-1189-4fe1-acd5-71d4ad8567db", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9c339e-30e4-45ef-b988-b45697c79de5", "sighting_of_ref": "indicator--cb233ee7-e65f-4209-b8b6-a7468c71c571", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac011576-8e33-4708-be22-3f2499adc04f", "sighting_of_ref": "indicator--a01b190c-5ac2-4e8b-9e0d-54ac5288f8f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d679846-0bac-4af6-a66c-127e7f93aa40", "sighting_of_ref": "indicator--a396fd40-ec14-4763-96d0-d60c3f67fb2b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5625fd8-cd2f-46ab-88a4-7cb22f47014d", "sighting_of_ref": "indicator--9d67426a-bd16-470c-8cf1-f67bd16778ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b08ad18-de02-4533-aa65-e9777061ed3c", "sighting_of_ref": "indicator--f1585825-361b-4a25-8cf6-69991789f132", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283076cf-6262-4b82-8d46-d64787aeeb24", "sighting_of_ref": "indicator--9c30bd4c-b9ee-421e-8d66-9bcd8771eeba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671980b7-bce5-4e99-b503-2d65d8c5de52", "sighting_of_ref": "indicator--eb122476-68c9-4550-b4a9-d42c4ea25d71", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2eda7e9-8471-434a-8482-4c04a277d6d5", "sighting_of_ref": "indicator--296a8046-d685-4049-8c60-6549dfcc98c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e595e844-e54d-491c-92a1-c93611588d74", "sighting_of_ref": "indicator--f1bb6218-74f6-4690-8c93-dc775d2a45a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3406f16b-08af-4464-9694-359be75c744c", "sighting_of_ref": "indicator--07a1d5b3-c8ea-4fbc-b438-435c815d51e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e389acc7-fd71-456f-bcbf-040d5975998c", "sighting_of_ref": "indicator--68967f92-4481-4f92-a22a-eb931d646dd1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc14af9d-a6da-4b7e-94f5-3e4c4205346c", "sighting_of_ref": "indicator--69849db1-eda3-43fd-827b-6676ba29995c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdc9234-3fb6-4a81-a33d-4830b7606aff", "sighting_of_ref": "indicator--7d3b2aca-d99e-4acf-b92b-b121580a2ef2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e19604-962b-4e2d-a958-b74806683367", "sighting_of_ref": "indicator--3ef8b0ae-d089-4b1d-a1b6-fb40c3cb19d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8fb2c2-06e6-4d7d-b16a-c550c3390be6", "sighting_of_ref": "indicator--ab50ee29-1451-4304-8691-dc18a979db40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6568558-7d1e-4a07-9c7c-45fa7584b442", "sighting_of_ref": "indicator--acb22b19-ad63-4b83-838f-3f027129c178", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d992cd4b-167d-478a-bebc-1d132327753e", "sighting_of_ref": "indicator--a9300e71-1658-4a35-bed7-3f3f3647bac4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714d0fe0-a920-436e-b9ad-9cc0659507be", "sighting_of_ref": "indicator--9a78ed87-9b07-43c0-b302-aec145e1195b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd35688-3c33-4884-87c2-f12323f41272", "sighting_of_ref": "indicator--8e6f3304-75af-48c8-9ecd-791deba47efd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fae2f65-e36b-4f35-9386-23a4304a973e", "sighting_of_ref": "indicator--8950781d-dc21-4f24-818e-2b8f3dade355", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d39dfe-89e0-4ccd-adcc-0dea582c55e2", "sighting_of_ref": "indicator--af818c02-87c2-41fc-84e2-b5017f18b0e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4922adf-7551-40bb-918f-eeeb531403d9", "sighting_of_ref": "indicator--4e1ac279-7ed7-4338-9fb2-2884ca998a27", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15168628-aa37-4071-af82-e71a69c3125d", "sighting_of_ref": "indicator--fcb983f0-865e-4667-8742-10cf35354e6c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f0cfef-0580-4cd1-b291-1b5264ef6adc", "sighting_of_ref": "indicator--cdbe940f-c642-466e-9305-beac16ea9b34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd65b9e8-87f3-4a16-af0a-ef2f57a89085", "sighting_of_ref": "indicator--391634ce-b280-4d8a-8bfc-a49ba1bc8b2b", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612f99dd-e004-49cc-87ac-762919b507fe", "sighting_of_ref": "indicator--113e2141-a087-4f95-92b6-c68a9b6c970b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd01f3c-d39a-40b3-b894-e6b95b6075fa", "sighting_of_ref": "indicator--29c085ec-c212-4011-b773-1631c5a57ffc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc96a3b-7b96-48ba-bed9-aea4dc9bea73", "sighting_of_ref": "indicator--936fb784-87af-4b06-bccb-dd3c7558d574", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0925dc-678e-4cb3-a55f-d507222b7ccf", "sighting_of_ref": "indicator--86ea3fa3-9cf6-4ecf-bd50-b633d83963d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2032aa59-1d3f-4ae7-b466-5b6635779e64", "sighting_of_ref": "indicator--ce96972b-3d00-4534-bfb3-34aa1e060b02", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af50ed31-c76c-424a-81ae-7f6596280bc0", "sighting_of_ref": "indicator--f4bb9e68-6669-4e6c-a11f-536cd5b62bf8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cec144-3bc3-41f9-9c3d-6d68e75e6b76", "sighting_of_ref": "indicator--9c10cb61-6e59-4318-ae08-fe2a7cab375f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fbd5a9-865c-4be1-87e1-635379e3395e", "sighting_of_ref": "indicator--87e3cd2b-9b8e-4851-ad20-bcb697f953e2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa12f10-42a7-418e-8b9d-a24bb37bc082", "sighting_of_ref": "indicator--8237bf70-9b23-4175-bb08-f8e8096e3a84", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87877c10-3b3a-4669-b681-103ad99cab53", "sighting_of_ref": "indicator--6e4bc58a-0b4d-42d3-82ed-53d4f3be9b9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797a88b0-55e1-40cc-8711-82880687cd68", "sighting_of_ref": "indicator--6e360adc-cf81-473a-8baf-d4672cdc5082", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e78819a-0ec4-4b50-a566-b3ad68b5f55f", "sighting_of_ref": "indicator--98873bdd-4af9-4467-bc2e-a2233440006d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93ea9ce-0690-406c-aab0-d6fda5f5cb1f", "sighting_of_ref": "indicator--e1d4cc1e-438d-4264-8eea-13bb0e716aa9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85de04bd-9dc6-4748-be15-293b739de13f", "sighting_of_ref": "indicator--f190d60c-846d-4476-9323-bccf3929d888", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc5197d-1880-40b7-b390-000988c966c3", "sighting_of_ref": "indicator--2cc4ec1a-e4f3-4004-8ba3-aeb96a79dbb4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52cf1ae-7d83-45f9-8f33-6a39391a423f", "sighting_of_ref": "indicator--9e5d666a-4a5e-4a56-b74f-b1db02b6e825", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d13e61d-7f15-40b7-9aba-697fe4d353bd", "sighting_of_ref": "indicator--c8f8eccf-7658-4dcd-8cf7-9d16e0919792", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab7ea40-0e7f-4dcc-99e6-59024d9b96df", "sighting_of_ref": "indicator--c9c12f6e-1b49-44b2-b51a-9e97f0996110", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d49d538-d737-4632-ae43-38cc6213d160", "sighting_of_ref": "indicator--66027d1e-7513-440e-807d-562071cbcf4b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd8cec2-5113-41cc-ade3-d7d6c23122bb", "sighting_of_ref": "indicator--f262b17b-ff7b-4146-b863-bc6a16ae391f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f82c6a6-fc8c-4182-90b1-357bd3eb5504", "sighting_of_ref": "indicator--7d131cd3-8baf-447f-8ff4-bbbed6b34963", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e879cbf9-0b6a-452a-8899-84b4752c4b28", "sighting_of_ref": "indicator--1cdcf408-25f6-4801-81eb-595f438d41db", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4592f19f-14de-4228-9760-4ede4ecb1eda", "sighting_of_ref": "indicator--d80f6ccb-9adc-44cb-a8f9-23e47e9f59f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20917bf8-2edc-49c8-8f57-55939117f660", "sighting_of_ref": "indicator--30962a68-6bd0-45d8-9059-8811f5c49b50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b84be3-89b5-4736-b61a-6dc41170bd94", "sighting_of_ref": "indicator--f04778bc-a767-4127-b89e-17f7e13a513b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792a23fb-3e0e-49dc-8518-fd6ed87fd8ff", "sighting_of_ref": "indicator--125987bf-c2db-4fb2-9b55-f6969695bf28", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef53b305-d37c-4214-9990-74cb806c10f0", "sighting_of_ref": "indicator--e72a58d6-a258-4d12-b302-0e2e5b77c47f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ea9ed2-4ac1-4fb2-9b3c-011c48003c33", "sighting_of_ref": "indicator--564e6692-bade-4c4b-930f-d5db399ba5af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09b1261-30cf-4723-bdfd-d143d5cb1bd0", "sighting_of_ref": "indicator--4f5483a9-a3bb-4d66-934d-71cebc8fd69a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5b1365-cf3d-4f6f-bd97-c73cfb934d58", "sighting_of_ref": "indicator--3c9f8104-0850-427b-84dc-6e6ac9905fd7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490c9196-89c2-4a86-82d9-0b9e45ba04c4", "sighting_of_ref": "indicator--7828900d-2038-4d24-9042-8f3fdff2f7bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68560a2-55f8-4557-88ba-6725925276cf", "sighting_of_ref": "indicator--a4565bb1-0476-4b39-823e-e5d97a725c48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d59ed35-655c-4b25-a5c5-58ab1012a622", "sighting_of_ref": "indicator--f0d25f15-cd8d-434e-b46c-e76e5ff7d355", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6750c9-d81c-4093-a1b7-9d346f7f5c42", "sighting_of_ref": "indicator--cca69b7d-c8f6-44a6-97e9-278b1168222b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241a42c6-dc38-4e23-8f91-1c8295b868e5", "sighting_of_ref": "indicator--cbb4a220-5571-4e4f-b63a-e223fc8fa749", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b203677-2f00-4a2f-842d-27b85aa4c65b", "sighting_of_ref": "indicator--c287f5d5-f187-4033-9811-ccc8889db70d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e6e151-3464-4409-a943-f1c2b607662f", "sighting_of_ref": "indicator--133cb744-a1d0-4a5f-b1b8-fae8565b55c4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b3e056-5373-4d4c-9d45-dbb72692e447", "sighting_of_ref": "indicator--8b4815f3-eab1-4a0a-a896-3b2c056602a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa344f95-60fa-417e-90bf-4039093813c8", "sighting_of_ref": "indicator--fe8af0d8-6241-4b1a-9151-10d105a7836d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c812ad1-e42d-49bc-831b-118d72e4c986", "sighting_of_ref": "indicator--c4145c50-0b84-45be-a632-7bfc443ac4fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854f3d80-3045-46ff-af9a-b69a1d1dffa9", "sighting_of_ref": "indicator--f36d874c-7719-418a-a0dc-56863bcc0614", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d92a2f-cc63-4cbd-b922-a760fe2cd9bd", "sighting_of_ref": "indicator--0c4eb345-ebea-486e-85ed-f19aa632cc50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6731d79b-ec65-4877-aaa1-202524ffe92e", "sighting_of_ref": "indicator--50131425-903b-4586-9bdc-98ef879d1949", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496d1336-9bb2-4d06-9ca8-b2d8dc781c89", "sighting_of_ref": "indicator--ef49030f-12e8-474d-9e1e-7013be47ee2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bc0f36-9115-4309-8112-8c40ab978d50", "sighting_of_ref": "indicator--53ec7034-307a-43f6-ae75-9be2c6f5286f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e9774b-1a69-49bc-b8ee-ce8b9dc6805c", "sighting_of_ref": "indicator--f1e7b722-614e-42e7-bbb8-9406a8353744", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddd9206-79dd-4b70-ad73-8fe5775b4ead", "sighting_of_ref": "indicator--38d1ddb4-f26e-4cfa-8194-2dba1c60eb9d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c5a2a7-635d-4cd6-ab1c-ac0cb110146c", "sighting_of_ref": "indicator--3e34c4ae-788b-496c-8efb-66541fed7d99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6dfa13-e4f9-4e54-97d2-b52b176e4187", "sighting_of_ref": "indicator--af401456-c220-4793-b710-a49416c26984", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08c79dc-298e-471f-bb6c-8a82a9dd0045", "sighting_of_ref": "indicator--ff64f98b-7135-4777-848f-417eca728214", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb193dc-dd2f-4af4-9c9b-d3172f4b348a", "sighting_of_ref": "indicator--303db442-0c58-4910-bbc7-89059eca29c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836c8ce5-7485-456f-94d5-b4b21494f196", "sighting_of_ref": "indicator--919fc8e4-8629-4bdb-98ac-ac6c264f9f1a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189e85a2-6b75-4f40-bc7d-4908ea147c11", "sighting_of_ref": "indicator--33d2ada0-79ef-424f-ba33-a7012d4d0d52", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e145b2-19e4-404a-83e6-657ca1d9b217", "sighting_of_ref": "indicator--0f491358-1a21-4edd-9f45-6b3c970f7ff4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a450a5e5-e4b2-49a5-b193-9f44d73d034e", "sighting_of_ref": "indicator--25759c84-c40e-479b-806a-fdb5e4c6da63", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25bc6ab-5f20-4814-b561-a518964c333c", "sighting_of_ref": "indicator--61cfd334-d555-40cb-9d29-24a85737336b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2dfaf8-eeff-4ad1-b34e-694adbdcd2c5", "sighting_of_ref": "indicator--8ce1310b-f50d-4185-a4f0-4b3dc9f88a21", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c8d355-bfa5-4fc0-9906-15ccda184dbe", "sighting_of_ref": "indicator--b3115f79-e08a-444b-ba95-1181b42a2c88", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e055ea-8136-4bb2-a81f-4fcc8192c9af", "sighting_of_ref": "indicator--7b1a88a6-073b-4bc9-9b9c-2f5dfa55d816", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05af8ad3-37bd-457f-89ef-6950ce5a3c26", "sighting_of_ref": "indicator--6f56c3bd-8b92-434f-89f9-dee4eacea072", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c81c37-69c1-435c-87dd-355e56eb494a", "sighting_of_ref": "indicator--0380930c-620b-4066-a38b-ce373b6d41a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1d5dbc-243f-4d63-8080-fbf224ec12d7", "sighting_of_ref": "indicator--e83eb406-d8f8-439c-8b32-70fcf4816bb9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a76f02-68ef-4be4-b9ad-829f06e5cdd9", "sighting_of_ref": "indicator--18fba6ce-5c5b-47b4-a781-ba0839533700", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120c531e-0a86-43b6-8bd0-02d5fa604fe4", "sighting_of_ref": "indicator--571046e3-3a0c-48e2-8e63-eef906c6e694", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16df544-f9f2-40c1-970b-8eaf9103f2c3", "sighting_of_ref": "indicator--572c10c0-96b6-4777-8046-30fedacd5099", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ab18d1-71d0-43e6-bad3-323100945d60", "sighting_of_ref": "indicator--7c0c6119-11f9-4109-8190-86843538f5ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ea6711-96bd-4fec-a9d6-3932a8bf1160", "sighting_of_ref": "indicator--c7aca7a6-336b-4799-acc7-7262f9b49c76", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c34edb4-b095-41a6-9a19-3c827815baea", "sighting_of_ref": "indicator--d01f6247-4f57-4b3c-91ac-90a7335450f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6128129a-dc29-407b-8431-bf3a0169d327", "sighting_of_ref": "indicator--59189457-0fd8-44a1-8755-96e16dc67c65", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170b7d3f-4b5c-489f-84d8-002f0c488306", "sighting_of_ref": "indicator--edae7896-aa7d-48c9-9b8d-261258b6d7b8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa202492-c75c-480c-b07c-9c528529f478", "sighting_of_ref": "indicator--30e4238f-51f9-4480-8df1-fa57a89bc5fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3860c10c-7be2-421b-b045-d2de0c97069d", "sighting_of_ref": "indicator--70135e75-19ac-417e-9168-21d916a3aec0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc83d44c-9044-4356-ae6c-12ebad5f5ee2", "sighting_of_ref": "indicator--6539ea78-e67a-4007-b02b-aaea9ad9895e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc399933-d386-49a6-832e-090ae4d28c6a", "sighting_of_ref": "indicator--57509119-d3be-415d-a423-6282b39bfe47", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6046a7d-92fc-45c8-8b73-765c41dec84c", "sighting_of_ref": "indicator--e480404c-4d7d-457e-bd3a-46257eef8589", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d6ac34-84c9-4846-80cd-bcac00df146e", "sighting_of_ref": "indicator--e706b102-970a-453f-a169-322bb1dbf5ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c8b3d6-4d55-4fd7-813e-1ae55eda4380", "sighting_of_ref": "indicator--ee297b3a-edfa-4fa4-9b43-2d432f46100c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e27b4a-6a7d-47f6-b5e6-47c1a9d9739d", "sighting_of_ref": "indicator--55a48b5b-2636-4392-8caf-775b060d17d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fee800-7950-47a6-88ba-c4c384da7389", "sighting_of_ref": "indicator--9b6b18b8-7982-4045-9a06-5cc8e1fe785f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68f85c6-1081-4f25-b37b-fae1760bf1ed", "sighting_of_ref": "indicator--0f4e6acd-c799-4a3f-a892-95af22fec056", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347498b5-c628-4574-a443-05c461b10e3f", "sighting_of_ref": "indicator--0d1456f3-52c9-4e6f-a212-4022426de75c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7a8618-497b-4cef-842c-51d70c9327a6", "sighting_of_ref": "indicator--509ad39b-ecdc-4659-a37a-dc4b0f8fb0eb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99e3002-f415-4b7d-ba04-f89a26a99a0e", "sighting_of_ref": "indicator--9ea31f11-92a7-4b6a-bacd-2dfa02c99b96", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157ed2a2-b1d0-4157-952a-7c8146e17375", "sighting_of_ref": "indicator--3ad11dee-a8a3-435f-9dbb-4993197c8ceb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5023a14a-dab8-422f-880a-ec222b43dcaa", "sighting_of_ref": "indicator--e1cbf0d4-b919-437f-9ef8-fdac878f4ef4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62988f7-49f1-423a-834e-3aee4f6386c4", "sighting_of_ref": "indicator--99451b2e-3897-4f93-a3de-7b135fea5dec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a42a855-5f98-4b51-9f02-0d65543f5928", "sighting_of_ref": "indicator--d510ddda-62dc-4780-a87b-05c7396902d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da37b2a2-0602-4fff-9935-d3e9e758425a", "sighting_of_ref": "indicator--19360c09-0349-4de5-b7d6-3309276764d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b86956d-f180-4063-b653-f916d6138704", "sighting_of_ref": "indicator--9841d573-80d1-4b6b-b27a-02bdec1da9e2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0be044-2d59-434a-8ef4-6cf533e43d48", "sighting_of_ref": "indicator--f3ac34d0-916b-4c51-b290-90b9f0d6c560", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86188325-5c83-480b-b6ae-32a28615a749", "sighting_of_ref": "indicator--39c01aa3-d419-4926-b0ec-b97205f995fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25760722-359f-4497-9f48-f8fff61f6c40", "sighting_of_ref": "indicator--b22955ca-13c1-4faa-bbb0-d2de5a16a37f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79b791e-788f-4660-b08f-3778aaafe354", "sighting_of_ref": "indicator--6f49f9d8-35ef-4443-8f63-df4d1191f9f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9484d1-4b36-407a-a379-70410f708083", "sighting_of_ref": "indicator--7456803f-db79-41f8-98cc-8708bb88303f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430989b0-65b3-49ee-b764-48d7347aadfa", "sighting_of_ref": "indicator--8b97c0ab-413a-4155-80f3-7ff14432e821", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8908165d-bbe4-4caf-a04b-2e7c6bb62135", "sighting_of_ref": "indicator--446e94c7-46d7-4415-a3bf-6e5a22ac588d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee48a36b-155c-4f79-91ed-47c5b1fd5d7e", "sighting_of_ref": "indicator--446e94c7-46d7-4415-a3bf-6e5a22ac588d", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22454851-1915-4a44-806c-f60263c41f40", "sighting_of_ref": "indicator--446e94c7-46d7-4415-a3bf-6e5a22ac588d", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3915c784-34b9-42c3-877c-5d6c5ec65906", "sighting_of_ref": "indicator--e979b680-7226-4887-a2bd-99a83e46b746", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bbee30-7262-4047-9ccb-cfec168b0873", "sighting_of_ref": "indicator--54b5b70d-f948-41ae-bc8f-bade5ceb8d40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa87a74-e81b-40f0-b1fd-cf46fbc2f034", "sighting_of_ref": "indicator--354c7582-b2a0-400a-81a7-e81061bad8fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45b4fb8-3388-40df-a292-25a50dea35f3", "sighting_of_ref": "indicator--c7738d68-197a-4977-b9aa-f33b7c7436c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ce1e94-c7b7-44b3-a964-45ea7b22b86d", "sighting_of_ref": "indicator--d3a68444-7e91-4780-a98a-082be062e7d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d134d7-db8e-476e-9d4f-2b08ef55b1ba", "sighting_of_ref": "indicator--386cb756-a7de-4c37-87e9-a16ed56f5296", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b48067-4800-44d3-a80d-aedb878f8a6a", "sighting_of_ref": "indicator--c45f1712-e9f6-455d-836c-7d99259875fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c161f0fc-db81-44e4-b2a3-da3a6952eaf2", "sighting_of_ref": "indicator--5fa431d9-ec0b-4c01-b12c-80ebe5298186", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ab4902-ef28-4aff-957d-8010b4a27207", "sighting_of_ref": "indicator--4418624e-f0ea-4af1-bcb6-b910940ea245", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e120b2b-5655-478e-9022-f4c7a795b280", "sighting_of_ref": "indicator--8d2fad72-cb3c-4afd-a7cc-b62621275005", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ce3b0d-fa01-4cc0-bd59-19a6c43fa3ab", "sighting_of_ref": "indicator--31d8a9d8-8459-489e-82eb-9cc1b73aab95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9b9d1d-a137-4e65-8c8d-0681d836f9d4", "sighting_of_ref": "indicator--caec749c-7082-41b5-99f5-e597597e0ace", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91955f6a-32f0-46e9-b494-dce8ad0ed976", "sighting_of_ref": "indicator--57aa1964-4184-4c70-83f4-c53fad0685f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccdb983-361b-49ec-9868-8d95dc25d382", "sighting_of_ref": "indicator--a283cca0-1857-4093-91da-8916f4b9930b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef04d82-b647-4310-8c2e-420b891e29e0", "sighting_of_ref": "indicator--bda0853a-3b29-4da1-9902-c1d6204a5806", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26de8b8d-265f-49b0-93e2-ff98c58b6636", "sighting_of_ref": "indicator--58e4ea1f-f3e4-416f-b4f5-aceb46b6d1d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1258ba22-173c-4f68-8bcd-9e030ccea381", "sighting_of_ref": "indicator--8223e418-1056-4b22-9b54-a365ef95eb53", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae02fac-d9eb-4134-9fc3-3a712b09890d", "sighting_of_ref": "indicator--39fed68e-3fdb-42c8-9e2f-20dee408d85f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13250798-defa-4539-8d3c-65be44012718", "sighting_of_ref": "indicator--dfde3f47-ce51-49f4-9e4f-82271e16c41f", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ddf0aa-6639-47c3-b56a-08d7fc526840", "sighting_of_ref": "indicator--9419770e-4caa-45b1-81e4-07c03ad06c97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3c639a-b1d9-43e2-82b1-8b9147caaecf", "sighting_of_ref": "indicator--52b98597-9cdf-4a31-be6a-915fe1fb2fb7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b508ec5-535f-444e-bd2b-9dc9f34bb9d4", "sighting_of_ref": "indicator--42cc0e70-038d-492e-abb6-c933c068147f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf90aaa-483d-4640-9276-3787e1c393e7", "sighting_of_ref": "indicator--b317cf6b-fcee-4c4e-a027-fc033d588e97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb079548-c2df-49f6-951f-23fce8eb993d", "sighting_of_ref": "indicator--186ecf97-fca1-4705-9e20-c819f85ba6a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392195b8-4fa8-4788-ad93-c538e4c68ae4", "sighting_of_ref": "indicator--c88f9852-8962-45e5-86f7-38cb62b571a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06da1553-415f-45a9-b88b-2f23374fbe36", "sighting_of_ref": "indicator--36c1e1a9-e98a-41e9-bf00-816ca5970820", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ed2a96-a6cf-4dcd-b167-3f72302c5164", "sighting_of_ref": "indicator--cc89afc5-d4ce-4c22-92ca-2e583b022451", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90a9ba5-9ce1-42f7-9775-8384cfe63a9c", "sighting_of_ref": "indicator--88f78de2-5e08-4986-a640-18e5e552dd5c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff0eee3-28bb-46aa-a64c-ae896409ffa1", "sighting_of_ref": "indicator--dff73772-bb1e-41e9-af16-ec4e5f149631", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d9e560-93ec-406d-9029-741d05a6b7f2", "sighting_of_ref": "indicator--b86cb435-fee0-4240-be5a-7eae9066a156", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5c946a-dea3-4a2c-a5e0-942bddb2304c", "sighting_of_ref": "indicator--3f6453c8-3c84-4319-a935-d566dc45b5ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034b000e-86a0-401c-9268-af64b8e0e1e4", "sighting_of_ref": "indicator--60a1fe16-d5b9-48a6-9485-fd753c2b1468", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7be5b53-a5e4-437f-b9b9-2fc426b6aeee", "sighting_of_ref": "indicator--b0871095-3095-41ae-898b-172d54911695", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e97356-327c-4e7d-85a3-4bb810cf798c", "sighting_of_ref": "indicator--57502214-d239-4d95-9718-615ad316817d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18e13e8-9be8-4054-8e60-d89b9ee5a75f", "sighting_of_ref": "indicator--3722a126-39ba-481a-9b5d-512c8e9eae68", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f78ff3-c5f8-4f82-a9f4-36a159b4d090", "sighting_of_ref": "indicator--8d42e0f7-12e7-46c4-8d4d-5b53bb31f0ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257adddf-c2e5-4bf9-918a-bb7db9d50e68", "sighting_of_ref": "indicator--7abbd088-8b99-4f65-b362-2aaff5eb7eb3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9766cf35-0801-4d8f-9635-ba8fde635b3a", "sighting_of_ref": "indicator--d1dc7cea-ea07-43c7-9df2-9d8a2c623cfa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7a852e-25b2-4c20-9c11-386b6470f57a", "sighting_of_ref": "indicator--a546cb8a-4bf0-4823-9509-28d07f19c5cc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dd7fd2-6c42-454e-9ad9-93f8d691ee67", "sighting_of_ref": "indicator--8bbb0004-5ff2-40b0-ad4b-641b52b6d24a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3216d505-350f-453a-834e-1174c47891f1", "sighting_of_ref": "indicator--c7029a25-755c-4699-8521-40e6f492ab4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20338b4c-6798-4b14-9b76-e9138f32e073", "sighting_of_ref": "indicator--b9793f0b-41da-41bb-87a1-7449b652019c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7f7dff-b4f0-4fb3-a528-0c4de697a718", "sighting_of_ref": "indicator--629c7927-57b7-4229-b44e-e1e0b9f6b17f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c948507-2575-406d-a6b7-a5666013f1b2", "sighting_of_ref": "indicator--bec90ccb-ed3e-4eb7-959c-a857f321a7d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281cd560-6580-4e8c-b87a-f67a1104cf1c", "sighting_of_ref": "indicator--4e649c74-ba94-4b57-ba6b-603d01e24aa4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeab3fc5-50ec-4458-8294-6a27142a8fd5", "sighting_of_ref": "indicator--b8fc1004-7284-41c1-8eee-b1260f4c00de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12685cb1-0f5a-4475-8f31-d6351afa5b4d", "sighting_of_ref": "indicator--367fc31d-236c-440e-ba22-0d2415f3e60f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85eb23d-7e87-4499-b582-904e3f9b9fa3", "sighting_of_ref": "indicator--4c9a232d-da44-4a39-8284-e0c187dae78e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8ef280-8f8d-42eb-82c0-fc19bf43ee6f", "sighting_of_ref": "indicator--addf72d2-5014-4765-b394-9f61e8635e2b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4747f8aa-b46d-4a2b-9c2a-36714a98d7e5", "sighting_of_ref": "indicator--ccbb60fd-1631-4da0-93c9-b249f2112889", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9599f3-c308-480d-b798-c83c6d01d0c2", "sighting_of_ref": "indicator--5ac728d2-df42-4128-88fc-b2b65445f6ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988e0b74-5c3c-4723-885e-5e37334b3407", "sighting_of_ref": "indicator--6a2830cc-3605-4aaf-9958-c70bb3ee1c37", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8be65d7-812d-4ac0-8601-c63d47009759", "sighting_of_ref": "indicator--9910170d-66d9-40e4-aa51-cbb794c220da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83aa331-7d36-4d12-8e11-c69d0ac59094", "sighting_of_ref": "indicator--7db830af-57e8-4bca-8d37-ae9949ad5b15", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4903b61f-3331-4bf9-95db-c1d6c023743d", "sighting_of_ref": "indicator--8425a127-e16c-4d14-83ee-e8910dcadc80", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de901ea2-e518-4ba2-ac3b-7f6ea229a9ed", "sighting_of_ref": "indicator--4471203c-3d95-44fe-8e9e-67ae14e46f31", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529dafbc-d19d-4e26-aba5-ce67653202b6", "sighting_of_ref": "indicator--56d457b9-d315-425f-a136-ef4b6d6adf7d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009efcec-9025-4877-8431-a1757463765d", "sighting_of_ref": "indicator--4b712cc9-8f40-4baf-bd1c-771a75a3198c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65671cc-7aef-4a9e-8a64-010c01c8624c", "sighting_of_ref": "indicator--59813ffc-03e9-432d-a3aa-ddefa7cd72a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f09d532-eb53-42e7-84b2-35cecb263c90", "sighting_of_ref": "indicator--8d7c3635-4f6b-4f02-9c41-307b1883008b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533a15d7-2bd4-4944-bbd7-aff19256b7ba", "sighting_of_ref": "indicator--0845e1c3-d6c5-435f-95bf-42dabfdec6b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb71f23b-d5bf-4e35-8228-21ac52daf225", "sighting_of_ref": "indicator--a913bc92-6421-4c20-b30a-9e6e7bd9e7d2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f13b7e-cd2b-4742-938f-ab1e3e22b278", "sighting_of_ref": "indicator--363132e4-b8a7-41e6-b3e5-4e663717de32", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca01f1b0-7ee9-4f40-8e12-b7f7a9790387", "sighting_of_ref": "indicator--d361f8f1-00f8-452d-9eef-26c2d4fda1f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848a8ba9-d081-4c65-8471-fe27c1bdd8e3", "sighting_of_ref": "indicator--b518d686-3942-4cfd-b208-509759e70903", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9820d12c-4d71-41ef-917d-bc4f7042adfc", "sighting_of_ref": "indicator--b78f50c8-be79-4b43-9a10-f43a69d96fe2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea750eff-240a-4f74-8633-dc601f3f5f78", "sighting_of_ref": "indicator--78bd1193-0cf0-4c03-8fb8-51382e9806aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc5b586-4bad-4ff0-9020-9ceaa6071a19", "sighting_of_ref": "indicator--88f3cc54-974b-4a75-b300-30cf343d0aa9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b678844c-d77f-472f-8f86-59c0714b8f70", "sighting_of_ref": "indicator--bfec3088-5ebb-4ea0-92d7-99f8c3c06bc7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7703df2c-46db-4210-b27b-906b8be64f46", "sighting_of_ref": "indicator--3c4020b8-2c18-4367-b48e-46da0fc64254", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572ce9c8-39d8-4455-9b53-0598ae2edb56", "sighting_of_ref": "indicator--f3e0746a-de91-4103-893c-283870cbe85a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b50b10-6bc8-4880-8261-a88db22f1727", "sighting_of_ref": "indicator--1db161ab-02dc-4d0e-8ae2-1ba339a975a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85d7ad0-3164-4fcf-9704-61a0b44857c0", "sighting_of_ref": "indicator--54fa6cb2-bc94-4317-9de8-d6dfb168bf80", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575c84f1-6908-455f-816e-e60b3d54fe10", "sighting_of_ref": "indicator--d9f1334a-8bcb-44b3-b951-e17ea3a0637c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9cc1c1-1c72-4ab0-a03d-5f6163a05628", "sighting_of_ref": "indicator--85e4f9a9-07a2-4397-b12c-3989f1e476d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc34308b-a624-45de-96ec-59a0a7931b01", "sighting_of_ref": "indicator--2e8fc695-cbe3-475c-acc4-c15c95d05a70", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb847f28-7b7a-4544-8b18-23bf030e2cd8", "sighting_of_ref": "indicator--2064fcbd-9673-412b-a033-b68e862d00b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45a70f7-a6f4-45ee-98a7-89fa60eaebc8", "sighting_of_ref": "indicator--4e660427-e706-4917-9ff2-bb1bb8994439", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31975d1-0afa-429e-9125-f156d3843668", "sighting_of_ref": "indicator--9cd61530-ae03-451a-82c9-a13ee7a74240", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f63c42-c10a-472b-95ae-61541a972c2d", "sighting_of_ref": "indicator--cd0d4640-955e-46c3-a4e0-d22cce1b9c04", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcd9367-e832-4a07-86eb-c3d52f52e4a4", "sighting_of_ref": "indicator--4ffbe5f2-ab19-4e32-92bc-31fca303d9eb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95947154-feb6-4bb6-93fc-3ef25246ca55", "sighting_of_ref": "indicator--cf176a70-2f99-4294-b1ad-3dc652d8163d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1053908-19c8-4dd3-bcce-4c545d52bd41", "sighting_of_ref": "indicator--5f05ba90-e458-4424-8a82-eee4261804f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7244cf-8d86-46c9-83d4-606eb7034ffb", "sighting_of_ref": "indicator--88eb485c-f231-4d91-9209-45d666f4677e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf8190a-2ae7-4375-9243-90406fe7674d", "sighting_of_ref": "indicator--1999e2eb-28eb-4df3-9216-78aa59d84533", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2dfa26-fa32-4026-ba07-f1b711e04383", "sighting_of_ref": "indicator--c41a9401-a568-4002-a4e9-8d1869be371e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6ca53c-41a6-4a9e-aa74-72456e526a35", "sighting_of_ref": "indicator--a6843906-cf78-42e2-bc79-18432e5fe740", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcd68b6-1d1b-403b-87af-a1a35005433a", "sighting_of_ref": "indicator--974b4624-f3af-4b1f-ba14-b84d5f5315fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb044c4-79dc-4651-ba96-56435f88b033", "sighting_of_ref": "indicator--c3f35a20-f0b3-46e5-bd32-9730225bdda9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d92e2e1-754d-45d7-aa27-1320dd4c21a8", "sighting_of_ref": "indicator--d61c3f23-50e3-4837-8367-9d779aba935f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1c2d93-5139-4250-aa9a-52fb07dcb02d", "sighting_of_ref": "indicator--7b5925f7-3845-466e-beb9-536ed76afc0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302040f0-9424-4d30-bdb3-3d937b4b30dc", "sighting_of_ref": "indicator--d0e41d25-90b4-49a8-8272-55f03d4d5e90", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef91342-b5fe-456a-afd3-61eb4d8a9943", "sighting_of_ref": "indicator--3305f184-7e53-4e3a-b669-5f6938b1fce9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a65ece8-f677-415b-b013-ee22868a03c9", "sighting_of_ref": "indicator--4782c0f3-2e9d-4a4c-a7ff-8aff29e85e87", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beab9d1c-12a4-411d-8e06-b4bb5e9a79a2", "sighting_of_ref": "indicator--f22a7a1d-d06a-42e2-b604-f5c6da416b07", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fed8e3-2bb5-4e26-8832-ad117dc7609a", "sighting_of_ref": "indicator--1f8288c5-8548-430a-a981-2c014729dae6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918e5408-e684-412f-9f65-078836c81628", "sighting_of_ref": "indicator--628950d1-8efe-4e24-9735-c138108a6560", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43b4a4c-3d1d-4e31-aa7d-290973a90b94", "sighting_of_ref": "indicator--dbd9346a-a4ad-4e67-b149-345743347e4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ec219f-c8dd-4c84-a283-c480f2576d86", "sighting_of_ref": "indicator--ae73ca79-4f75-4fea-9129-b5ce90a0ffae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d743a7f-f9a1-454e-8fe8-37adf538591b", "sighting_of_ref": "indicator--ab73fe54-3c9e-4ac7-ab11-13ef337904ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65d34e3-ae0c-4115-9985-ff03ff92fce5", "sighting_of_ref": "indicator--c212a5d2-4132-4ca0-867b-6a82cadfdea1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de6c365-1233-4735-9f13-143659b701d5", "sighting_of_ref": "indicator--3c2cacad-da62-4591-86ba-e6a96aa99518", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916b427f-e608-40d3-8434-27f3c5ec77bb", "sighting_of_ref": "indicator--7bf24340-e3e6-4306-8542-8463ddd23bfc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1f4785-4c6a-4f51-a68b-4cd591b62bae", "sighting_of_ref": "indicator--1e75a960-cb14-4391-8e81-63c7d8b2ade9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434db6be-9d45-46cd-a39b-eabe20d255bc", "sighting_of_ref": "indicator--eefca3f3-9537-41c9-a0fb-f2ebefc23abd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea37c1e-61d3-4255-b2db-04cfcd939bf7", "sighting_of_ref": "indicator--8d0be440-8bc3-41ea-8113-67eb8132536b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc35b176-7788-4c42-81bc-f95c1b5914b4", "sighting_of_ref": "indicator--79f9d062-5e75-4e02-8866-0701b4028bf9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8651b335-959b-44d7-b276-8fc11ade3046", "sighting_of_ref": "indicator--b1808d2d-474e-4275-bee1-9944c12c55dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c3a14a-9641-4115-b599-6a86e5226d40", "sighting_of_ref": "indicator--6358b1a7-0ba6-4cde-b799-3551091347f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945f61d7-c660-4b14-9dc9-8516f7d44dd5", "sighting_of_ref": "indicator--31326eeb-d793-4cd7-956e-9801deb57bab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05fe8fb-e251-4a2f-b1f2-e061059cde7d", "sighting_of_ref": "indicator--22d1fb21-7e67-4b2b-bcf1-01a63b4fa6d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00356ed-b211-4fd0-8533-46ca7a0ae1c1", "sighting_of_ref": "indicator--77f3e474-da1a-4c5a-a1ff-6bbd83c822cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30acde46-ce97-4136-8f2b-343092001351", "sighting_of_ref": "indicator--adb5e9e5-ea5f-4595-b9aa-9021ac0310a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7707f5db-beff-47ea-845d-3cce4f06784c", "sighting_of_ref": "indicator--457fe9e7-fbb4-4492-8e8f-36a667593a34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34cb328-8e88-4be2-951e-47c2e15551ed", "sighting_of_ref": "indicator--baf0f34a-9068-42d5-a546-c49cf9b3b02f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33ffe5c-ccc5-405c-aea5-4a9fb083a343", "sighting_of_ref": "indicator--6e509d17-85f3-417d-a4de-6474d718f832", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e59a86-c252-42e7-832c-b2d06a61d043", "sighting_of_ref": "indicator--52bc6a37-9cae-4c5f-b621-294698a1ed9f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a468eef-5796-4fdf-81b9-cc503f7b2551", "sighting_of_ref": "indicator--ffe75bed-b9a2-49ab-a6ff-59e75ec85527", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704ce55e-b4bf-45c4-927e-097228e6983d", "sighting_of_ref": "indicator--595bbc9c-da7c-47b1-aee5-0301288556ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f10416-6e6d-40b8-b67c-c7ee17a520e1", "sighting_of_ref": "indicator--8499a660-bc3d-4e4d-b6f6-88fda82fa2d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca28b115-d79e-468d-9c0e-2560187e878e", "sighting_of_ref": "indicator--f9d7db47-d827-4dc9-8644-11575bf8c022", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec1c15b-2f25-4f32-869a-2c9200ef9eb5", "sighting_of_ref": "indicator--21a671b5-5c8c-489a-bcaa-469ff6dbe171", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0ed692-e0c7-4039-b9a9-f4af9f84bd4e", "sighting_of_ref": "indicator--a05b546b-aa11-4ce0-9c5c-8b227a0cddb1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfb2cf4-7a03-4eac-bf98-3279d645e2e3", "sighting_of_ref": "indicator--95d74eec-a8c8-4ad1-a509-48a2d425fb62", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcac7b1-74be-47c1-8298-5d60b8feb6a1", "sighting_of_ref": "indicator--1394266f-2846-4667-a61c-a040986ef4e2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d51cb4e-7499-47e4-92ee-edf98246ab3b", "sighting_of_ref": "indicator--7018edf2-f855-4490-9714-698dfc37b673", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a599b6-13b5-4b6b-a21b-f3b635effe52", "sighting_of_ref": "indicator--36e8e5a6-2e8c-41ba-a488-edbb10757231", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a420cde-dfa3-4203-b910-ea26484ce0da", "sighting_of_ref": "indicator--a294a7f3-7293-4e4a-8d0a-92a764f2f87c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c91a0d1-c5bb-4bf0-baa0-750fd3fe8fe3", "sighting_of_ref": "indicator--5d5dcaf7-92f7-4753-90c7-ec7e392d3600", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fcd2d5-a455-407e-8cc5-391437a741f7", "sighting_of_ref": "indicator--52dcdf48-8f45-4a95-8c7b-956641b05152", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a7401d-ccb9-4ed6-9451-46c54b402d27", "sighting_of_ref": "indicator--a946449c-3dbe-4cda-8e5f-0e9451bbe80c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79d919a-b718-4237-8970-0a6cb6104160", "sighting_of_ref": "indicator--1ddfcb97-797c-4989-ad83-21968dfe5869", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc97fa3-60e8-4c10-90d3-9739aa18aef7", "sighting_of_ref": "indicator--5d9bef60-4fda-40dd-a40d-0bb506fea7aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4c8a43-2419-4030-b482-314d89811a66", "sighting_of_ref": "indicator--331f4d2d-82b3-4808-81fa-d90c634fb8d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17e8548-ac42-48ac-8673-17d5a969e48a", "sighting_of_ref": "indicator--bd50a4c2-66b4-46be-8672-f34fb779915a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a904ea-0599-4664-b64a-3cbfe9c9f7ae", "sighting_of_ref": "indicator--b1d5288b-0398-4be9-827a-e176ea9db873", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35e70f1-f864-441d-8ed7-0a36a5e9da48", "sighting_of_ref": "indicator--3f648e38-f9e3-4761-86f8-c992d2b809bc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e12061f-fa10-4a19-b85d-f79ab678f18d", "sighting_of_ref": "indicator--e7f12824-420c-4648-9aff-258322e2d25a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4c49a7-b39a-407a-b819-741439690ef2", "sighting_of_ref": "indicator--50bd1d1b-6a75-499b-8eeb-6924086e92cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9648ff2-ad37-43d8-9aba-c1b10051dd68", "sighting_of_ref": "indicator--7e75f7c8-80bc-478c-8d05-ad537ca19715", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31626d36-7ece-47df-8532-95dffd526c02", "sighting_of_ref": "indicator--72560bce-7b4d-4fb1-b51e-acf1e267fe83", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e0aaa2-c766-4310-b035-819765546f64", "sighting_of_ref": "indicator--1f5d85e6-a429-4497-968a-a7fd877a3211", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19a837f-6d59-4683-9b08-99cdff789603", "sighting_of_ref": "indicator--9658e5cc-22cc-4d54-9494-95be92145969", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a0326f-711e-4f92-9ce5-97914b708e3c", "sighting_of_ref": "indicator--b354c901-747f-410f-bebe-1111eae9b3b2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17d70d5-1454-457b-97e9-62317993301c", "sighting_of_ref": "indicator--2cc5d2f4-3e52-43c3-8334-1b2ee7d7206a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc521a8e-1c12-44dc-9d0a-457d5a03dea2", "sighting_of_ref": "indicator--c12a84c5-fcbe-4247-aa96-87ca51c33add", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663923d8-9e57-4d24-a9f0-6c2e60f3612b", "sighting_of_ref": "indicator--61c102bf-b3d3-487b-90ae-f3d3306bb280", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddfca8a-4555-43ef-9357-35a7297069bf", "sighting_of_ref": "indicator--b388dcd1-2ae6-4eee-8cf3-e5aa45c39596", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272cc677-08e7-4f68-85b9-f76475fa5807", "sighting_of_ref": "indicator--54fcfbad-4030-4f19-b13a-24b1da0a25b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dcf122-50ce-426b-8abe-bfdec3f73723", "sighting_of_ref": "indicator--86eff03b-01ba-4fc9-99f9-54fc9a07b94f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17769f00-21e0-427f-b1fa-7190b23b2b46", "sighting_of_ref": "indicator--3d34615c-92f2-46e4-9873-601dc9f173f4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b77ee5b-f393-41eb-a1cd-b285964d1218", "sighting_of_ref": "indicator--a6bd37d9-4042-476d-986c-60aed4cafcc4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594c3a90-63a7-4b51-8f22-99fab87d9810", "sighting_of_ref": "indicator--af7ad86f-04e8-42d7-b8ef-4e463405ac7c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf66c0b-5844-47f4-b3f3-f00e1a30074b", "sighting_of_ref": "indicator--b2893d7a-d75c-4ccd-9012-3fb79d914d46", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc101e2-4e3f-4b39-8924-630b8332a78c", "sighting_of_ref": "indicator--30985c10-6692-4e1c-b57a-d40e2b95fd0b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0261e4c7-cd9a-49e3-9fda-29acbf03a46a", "sighting_of_ref": "indicator--d7c094c5-3a75-48a9-9564-5f98a6d97536", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8bf47f-28c3-4eef-9d8d-15b750e59ac0", "sighting_of_ref": "indicator--d0fb5ee5-6f63-4db5-a536-da78052c8ac7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1690dee-1e72-4db3-89d5-ddcdf4ad175d", "sighting_of_ref": "indicator--cfff528c-e807-41ab-b3fd-79e10bf5cbaf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc345d3-dd6c-4acb-abc0-25daeb3f9b82", "sighting_of_ref": "indicator--d1870d0c-b6d2-4eed-aed2-7e0c43290cf6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7828888-6da5-455a-9e7b-8383ff6272f8", "sighting_of_ref": "indicator--5c51894a-5b1e-446e-92d0-7233bc2c23e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d0f27c-9326-4fde-b3e6-175c37d03fee", "sighting_of_ref": "indicator--a75b04de-0a03-4d2c-a097-666dcb7e4391", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7247c118-9a24-414e-998a-69d6f4fe019a", "sighting_of_ref": "indicator--3907bd26-d5fd-4f77-9ea8-0c46a89727aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbd927d-997d-4486-a18b-f925da073439", "sighting_of_ref": "indicator--535d1285-6583-4fd2-8189-7a673854e1c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e097f0-2022-4296-837b-f9d6fea08696", "sighting_of_ref": "indicator--c8561767-728e-44bd-a0d7-4329d71d0e25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8106a6c5-cb18-4651-b1b6-f12b8b177c1a", "sighting_of_ref": "indicator--ebb94f5b-f426-40cd-9af5-39d5bd98b881", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c67515-b8ce-481a-aff5-ec9c2f231a94", "sighting_of_ref": "indicator--8ba92748-1e12-40d1-86b2-503f5d593da9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ccb90f-a61a-4331-b530-9048f7950b96", "sighting_of_ref": "indicator--1e5585d2-c735-4687-8b7a-a70e18e5d7d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176d7264-ef59-411b-9232-70c623e8bc25", "sighting_of_ref": "indicator--64acf4d2-5ed3-48e3-b2e6-fa35360e1ceb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68ac661-85e9-43c6-89f5-ae142a7ccf06", "sighting_of_ref": "indicator--ea29c058-b287-4f1d-8fde-974dec9792ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2431f5b1-22a7-456d-8376-63048802fac6", "sighting_of_ref": "indicator--f830d24a-0376-4d23-8e8d-f159a1cfa2d5", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2e4b49-4911-4b1d-83d9-c44f6657e478", "sighting_of_ref": "indicator--dbb24dec-2ff9-426c-a50c-f538921eeb60", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a213e906-76f7-49c2-8705-878423e4e404", "sighting_of_ref": "indicator--f6261417-15a7-4fa7-813c-e7d924e54799", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aba70b-a86f-49d6-a040-e0fb93e75a5a", "sighting_of_ref": "indicator--6d7ff765-3498-4651-8e1c-1f76dd0f8628", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4aa9bb-74e9-4b5a-bc65-5f1073331d80", "sighting_of_ref": "indicator--58bbdfc2-1a6f-44fd-b11d-bfc1d2fc770f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c8be61-cb8e-4a2b-8a2e-540a89498927", "sighting_of_ref": "indicator--e3622f22-8c29-44f9-8fcd-567b889fbd84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30a164d-b910-4701-acaa-aa3fba4d059c", "sighting_of_ref": "indicator--3dbb2dc0-27ab-4f16-81a5-fa1780802503", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eff0778-eecc-493e-a8ab-7b3ed735d152", "sighting_of_ref": "indicator--d71f0a44-b614-42fa-8407-cdc8fe9b3d81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ca82da-7df3-4db3-bf34-5bd774891fc8", "sighting_of_ref": "indicator--9bc4fe64-36c2-4ad2-878f-1451ca4ba2b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9536c15a-26ba-4b2d-a696-2ef5a564c092", "sighting_of_ref": "indicator--4d15dc66-0d0a-4e95-9989-b82f56e82a69", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c32df6-a508-49d6-8766-442c70df1819", "sighting_of_ref": "indicator--5b09d9d3-2630-4b47-af88-4db42722860b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fadf33-9738-4089-9bdc-da20db4417eb", "sighting_of_ref": "indicator--f63fd68b-b98d-493a-95d3-fce85db6e9e4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac44c12-651b-40f8-822e-75c0653751e4", "sighting_of_ref": "indicator--3676ade6-9362-4376-bb25-0c6521e2d2e9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12d27ab-223b-47d1-a638-bce1247e0cc2", "sighting_of_ref": "indicator--61780efe-3899-42ab-bbbc-fd2a7dbf11bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e134bde2-840f-4d15-bd76-e33e9032385a", "sighting_of_ref": "indicator--3ddb277d-5adf-4315-8216-49d07b9dba9e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a72e8a-5427-49dc-8315-1fbe3af4ffaf", "sighting_of_ref": "indicator--2ea3d6f2-4c21-4f45-bc8b-a5a53e69c09f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe69ac4c-30d9-4c60-9d34-177f312bf9b0", "sighting_of_ref": "indicator--0783970d-5475-4c4b-8a5e-c71aac9fd5a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5970cd71-1e7c-44aa-9726-094a02a896ec", "sighting_of_ref": "indicator--4d0d3e4b-9802-40ff-8605-b4b26e746b59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e88cefb-c8d3-4841-825e-d79f2acbb8bc", "sighting_of_ref": "indicator--d7d4ab12-aa01-4a24-8350-524c6ace9cb6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2c0d47-0f8b-4d93-ab8e-1c553b97439d", "sighting_of_ref": "indicator--dcde111c-40ec-43c5-83ea-55f7571a69de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79af4125-b007-4f71-bc63-e336e8d3a7f5", "sighting_of_ref": "indicator--dcde111c-40ec-43c5-83ea-55f7571a69de", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efaab1c-8cdf-46cf-ab2c-65be2e878e12", "sighting_of_ref": "indicator--dcde111c-40ec-43c5-83ea-55f7571a69de", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556cef87-e11f-4a35-a12d-d6f67a132347", "sighting_of_ref": "indicator--9c09b06b-e5e8-4f82-a7f5-d51df4877bc1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28987dff-2815-4aa5-b149-58815fbeeeea", "sighting_of_ref": "indicator--e892b8f1-04cd-436b-8b6f-de524f4a17d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bb9fa5-6a41-4caa-805e-9f9556ee7250", "sighting_of_ref": "indicator--b4290085-d89a-41ec-b6ca-9956104fdb53", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668a7893-8295-485d-b85e-d305b8ef92eb", "sighting_of_ref": "indicator--b51bd981-85b8-402e-aac7-c3ce8e1ae6f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14a2681-b80a-48e8-8fce-36a76d522d63", "sighting_of_ref": "indicator--97106c82-1054-41df-ba40-af27e92bcaf0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dda3514-991d-490d-b857-89600bbdc57a", "sighting_of_ref": "indicator--fec5470a-9c81-4df1-9505-7a65e18d8108", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70aa1c82-d782-4104-b1a2-bbfe5c9c761e", "sighting_of_ref": "indicator--405886ba-96d4-4caf-8f4f-ca9170fda540", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eda3f51-b1be-4858-8e64-f97a47f79f45", "sighting_of_ref": "indicator--2655287e-a156-4670-a3f9-1e49cd67ba6a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d233a7-47e8-4b08-bf10-cf86ee8d2107", "sighting_of_ref": "indicator--54796870-5ed6-461d-958b-22fa1a11a375", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a18574-42d8-410a-8295-a36d4ca05a7b", "sighting_of_ref": "indicator--db7b9803-79fb-4eb2-9e99-11d11b775161", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cb91a7-4441-44c0-9790-5df5b41c406b", "sighting_of_ref": "indicator--fb4bc7b7-1e13-42c2-ab49-bd6057a1c133", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f215586d-e091-47a0-9944-812637fff193", "sighting_of_ref": "indicator--d9fb69b2-0e35-410a-b6cd-0d32d2fd4496", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506da17a-777d-4d46-ad21-316a90fbc05c", "sighting_of_ref": "indicator--36e9730f-084b-4c9f-9d34-9ebaa316f135", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6aac738-34eb-439e-a01c-d9408b2f26c0", "sighting_of_ref": "indicator--14ff9802-fa21-47f7-82c2-d7ec2149cf69", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529d636f-abb6-4d5f-a006-00c96bc89c57", "sighting_of_ref": "indicator--33627c35-ae81-4199-bc6e-ade7bbc70e60", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5cee54-c6b4-4820-85d0-cde8b5f41936", "sighting_of_ref": "indicator--dc1904eb-d236-486f-848d-377721cffa03", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c7a753-9bf1-496c-9e04-a1727a4b1abb", "sighting_of_ref": "indicator--dbcab393-6f63-4dfa-8c07-2db19b02fe78", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4fdb5e-0e7f-44f2-ae8e-561761f43e36", "sighting_of_ref": "indicator--e7f6c767-3522-4e61-bd3c-fd8f007e6e46", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b310b3-b949-49ee-b44f-d01903b89836", "sighting_of_ref": "indicator--e7f6c767-3522-4e61-bd3c-fd8f007e6e46", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220b97cc-cb32-48c0-9db4-c9f084c8f59a", "sighting_of_ref": "indicator--e7f6c767-3522-4e61-bd3c-fd8f007e6e46", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207f3de8-2cca-4ca7-9a9e-f2f2d5b2f64c", "sighting_of_ref": "indicator--81c7dcf0-6c3d-44db-b910-06340854018a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf63f794-55cc-462a-a965-0c9535519b16", "sighting_of_ref": "indicator--5e05321b-b5a4-4b34-be4a-932d40d3ed77", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cf484e-0e29-44e1-a637-554b3cdcd8d6", "sighting_of_ref": "indicator--21619b2c-fefe-4b83-ad90-0a7298247590", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc39a45-7505-43e0-bba3-4600d8f5a399", "sighting_of_ref": "indicator--d224b390-df6b-4a02-9674-13a40f74e49a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2b15d9-02bd-4a87-bbee-3fa6472ede42", "sighting_of_ref": "indicator--fc4e9756-b3f0-4082-a9ec-b3df02659af1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695dd6ad-14e4-4ecc-90ca-812f6b0567ea", "sighting_of_ref": "indicator--45d6a167-ae65-4f86-9d4b-f3e5a02b33f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6e92de-9e64-44a5-8f41-cb09b9651028", "sighting_of_ref": "indicator--6874c73a-c92f-44b7-ab25-013c9277b043", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e4e3b7-c103-4a8e-91b5-46a5060298e2", "sighting_of_ref": "indicator--c5ff1930-c31a-4326-97f7-954765654d70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e490a2f9-40db-4841-9a8e-8e6a0c0530d7", "sighting_of_ref": "indicator--8fa5eb6f-a081-45d7-8e6a-81829186977e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7451de-b6f4-4ee7-aefb-642d6bd75733", "sighting_of_ref": "indicator--8fa5eb6f-a081-45d7-8e6a-81829186977e", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bddcbd-a95c-492d-bfd0-350acf239f41", "sighting_of_ref": "indicator--8fa5eb6f-a081-45d7-8e6a-81829186977e", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b010a78d-6c4f-4f10-ba9a-2fa1172010de", "sighting_of_ref": "indicator--c927bee8-3a20-49b0-9f84-359d50bb9f7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d57ae0-2289-4c10-9829-421b02d4a4b6", "sighting_of_ref": "indicator--c927bee8-3a20-49b0-9f84-359d50bb9f7b", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df694fb-6fff-4340-a191-0d92bbdedfb3", "sighting_of_ref": "indicator--c927bee8-3a20-49b0-9f84-359d50bb9f7b", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ad8a83-9ecd-44d9-9651-1dee79066097", "sighting_of_ref": "indicator--77743dac-4042-472b-899e-a5960588cc8e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b137da-bf99-4990-9c2f-69b0e84c0c54", "sighting_of_ref": "indicator--77743dac-4042-472b-899e-a5960588cc8e", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c51bb3-3b1b-4d80-9e7c-ea4762d96fdc", "sighting_of_ref": "indicator--c7349549-d3b2-455f-b2bc-9bf44ffb6ab3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58f5aa5-d1c5-48be-8ed5-835e889ab103", "sighting_of_ref": "indicator--c7349549-d3b2-455f-b2bc-9bf44ffb6ab3", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90adae32-248a-4079-83db-f92f1b638554", "sighting_of_ref": "indicator--c7349549-d3b2-455f-b2bc-9bf44ffb6ab3", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91930e15-3a5c-463a-9788-6bffd1aaf9f2", "sighting_of_ref": "indicator--6cf6bf3e-9f48-418d-867e-0d28ceac39d6", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdaae31-6af1-45ce-a248-ac524e225c02", "sighting_of_ref": "indicator--1c4ba238-8cba-4e71-abc7-bcc65788e75f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd90b92f-1642-4f05-8531-168d2f375516", "sighting_of_ref": "indicator--7e0660a9-f7bb-4ef2-bd29-b867119cba37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b67c6d-aac7-4400-968f-ab1bf6fd18e8", "sighting_of_ref": "indicator--eb1ae57a-4b9a-4c63-be74-6bd964ca0b35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39636a88-0358-485a-8613-c3e721d7fbb5", "sighting_of_ref": "indicator--09e3e868-8ecb-4649-aaea-f755267ee545", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6cd42a-4af5-4487-a1d5-3ed52712f6e0", "sighting_of_ref": "indicator--81e6eebf-b9a1-42e9-8eb8-a8e907e8686d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d631b4-a383-4c0e-be17-d0212b20ae91", "sighting_of_ref": "indicator--81e6eebf-b9a1-42e9-8eb8-a8e907e8686d", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1e97e1-975d-4eb1-9adb-b0217c653584", "sighting_of_ref": "indicator--81e6eebf-b9a1-42e9-8eb8-a8e907e8686d", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2059e953-98da-44c1-af5b-4e266658cea4", "sighting_of_ref": "indicator--cd975549-8523-48d0-bc68-57cd41a25b91", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d89548c-e2f3-4e99-a946-e00152d8853b", "sighting_of_ref": "indicator--cd975549-8523-48d0-bc68-57cd41a25b91", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda162ac-8aba-4aee-951c-be1f1bce0b6a", "sighting_of_ref": "indicator--cd975549-8523-48d0-bc68-57cd41a25b91", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42323130-c703-48f0-b25f-30cc70d01656", "sighting_of_ref": "indicator--cc31d951-8c4d-432d-ad72-c5b956ff10fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4669275a-ac53-4b7a-b564-e873b46df30c", "sighting_of_ref": "indicator--d33c54d4-c5ed-4e89-bbfc-ec53aa378a8f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b9fc2b-a23c-48f4-9984-653f6f41d811", "sighting_of_ref": "indicator--d33c54d4-c5ed-4e89-bbfc-ec53aa378a8f", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e2f0a8-4a13-49b4-9ce6-3eae4e65ba8c", "sighting_of_ref": "indicator--d33c54d4-c5ed-4e89-bbfc-ec53aa378a8f", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fd6e7e-58bf-4f42-9b76-664f167dcdd4", "sighting_of_ref": "indicator--5a2e1201-c031-42d6-a94a-9e86e1b1256f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50fb1e9-a613-480a-a066-1842443ec787", "sighting_of_ref": "indicator--5a2e1201-c031-42d6-a94a-9e86e1b1256f", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef428b5-2d4c-44c7-bf65-dee9020d05cd", "sighting_of_ref": "indicator--5a2e1201-c031-42d6-a94a-9e86e1b1256f", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c5dbd8-bf82-4f60-947f-8f477055f40a", "sighting_of_ref": "indicator--6ab53a2f-443c-4e5e-86e4-64c257cd7924", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e4a07d-176e-4a35-8297-4bc6ae0d571d", "sighting_of_ref": "indicator--6ab53a2f-443c-4e5e-86e4-64c257cd7924", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132174b1-7cb7-46eb-9efc-bcf9c368071f", "sighting_of_ref": "indicator--6ab53a2f-443c-4e5e-86e4-64c257cd7924", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca4ba55-18b3-4488-b5cb-60e7ae652eaf", "sighting_of_ref": "indicator--1639dd57-e381-4abe-84f4-c074bfd88f9c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc055900-a4b1-4d51-b16f-eb4492c79365", "sighting_of_ref": "indicator--249b9200-bdb7-4e46-9aef-1266a8df578d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0496f9cb-03bb-419f-bc6a-fe3f9a108e1c", "sighting_of_ref": "indicator--f3a0b7cb-c976-4b16-9161-a836cb0c27b2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246ce0f2-c197-4800-93db-dadf75ca9fef", "sighting_of_ref": "indicator--4f686c61-76ac-4478-b416-d213e6d55cab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5900d5-4c9d-4bed-9228-da2b2caa2189", "sighting_of_ref": "indicator--c23b9742-d56c-4ca7-8c1c-ca411d98a5cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7283479f-e9ee-45e4-9585-9d3e5898c44c", "sighting_of_ref": "indicator--df06a518-5511-480b-9acf-93edca54f424", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d684f653-b3d1-4adf-8c8f-d16bdb3b5994", "sighting_of_ref": "indicator--df06a518-5511-480b-9acf-93edca54f424", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ae6378-df4f-499f-99fe-335074793a49", "sighting_of_ref": "indicator--df06a518-5511-480b-9acf-93edca54f424", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c795fb-e23b-467f-aba8-bac29431a203", "sighting_of_ref": "indicator--ba7eaeb4-c9cc-48a3-b086-69382ca5a09a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0482ff-00bc-4b59-9840-a914a6f8d3b9", "sighting_of_ref": "indicator--123897d7-f5f5-404e-b91d-33837e445e82", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f276d85c-942b-40fa-8937-c9a26c682ea8", "sighting_of_ref": "indicator--2e206e83-1e11-480a-9698-e093960e8624", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3944b726-67dc-4461-8a3c-446f2d64e3a3", "sighting_of_ref": "indicator--2e206e83-1e11-480a-9698-e093960e8624", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e422e7-b2ae-4a9b-accb-3f0347b79b25", "sighting_of_ref": "indicator--2e206e83-1e11-480a-9698-e093960e8624", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892cf5ca-4c2c-4037-b13f-4669ae525d14", "sighting_of_ref": "indicator--36d4a8f9-95e2-451b-a69d-ed54ab24c336", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d13831-6887-45bf-99e4-9cbe84847c3d", "sighting_of_ref": "indicator--36d4a8f9-95e2-451b-a69d-ed54ab24c336", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69051eb9-b6ee-495d-8d61-12fcb8e7791e", "sighting_of_ref": "indicator--36d4a8f9-95e2-451b-a69d-ed54ab24c336", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c56cde-5b14-46d0-b46f-3e3a4761a636", "sighting_of_ref": "indicator--1472942c-dcef-48f5-9b3e-a6b8d0198fbf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121cb06e-1442-4ecf-b4a8-a22456df40ec", "sighting_of_ref": "indicator--a670143e-72bc-4587-8018-11a2f187968f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c698e65b-4a52-414f-b1c9-329933a7c7d3", "sighting_of_ref": "indicator--531c93e8-ade4-465f-a0db-de2f454e5cba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e1c3a2-4af0-46e5-9937-fc344c6e9b53", "sighting_of_ref": "indicator--596498d2-a97b-4624-8384-ca6fc4d172b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955d780b-f1a4-4c0f-94e5-49fc611ee0bd", "sighting_of_ref": "indicator--6cda1f47-97b8-47e5-a0ad-8925a323a814", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4798d564-36dc-432f-be99-73c2ba90c5bb", "sighting_of_ref": "indicator--c64c77aa-658c-4610-8b9b-fa60c9116fba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e233298-0922-431a-9494-44df9cdfc870", "sighting_of_ref": "indicator--3a9ae02f-1d9a-4f3e-8a3d-68d2a670cc3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc45849d-4a4f-4f92-9a15-ff2c27523d97", "sighting_of_ref": "indicator--18bf3a66-9163-4d96-b0fd-0f4999e4966d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f77627-0f3a-4a09-9497-ecc5616b52a4", "sighting_of_ref": "indicator--dd74e3db-338d-47fe-958e-da07b25998ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa20646e-c965-4be5-ad8c-5d8e7a7df32a", "sighting_of_ref": "indicator--99ab4814-cc9c-4860-8bd1-569e97f10304", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7a07d1-e782-4e17-9eab-2a07afa8190d", "sighting_of_ref": "indicator--61015335-1865-49c5-b954-7259c17a63ff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2a7b99-c162-48dd-b453-ce21938dc727", "sighting_of_ref": "indicator--b662fbe6-65ba-4bc9-9ad7-50ee694df360", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c954096-a94c-48c2-97b7-7d0998d1027d", "sighting_of_ref": "indicator--e7b87e97-4504-4c5a-b6e6-fbd576eab85a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f3f8f5-3f9a-4807-8c99-84ea0384d78a", "sighting_of_ref": "indicator--a53e2670-418f-4ee7-ac0b-45a2fc4cdb59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b83c875-482c-4e2a-a3a0-271d3f91069c", "sighting_of_ref": "indicator--6cd4c938-e270-4872-a3fd-094113317b8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b842cab-82e9-4cc0-9248-4276fcbfed98", "sighting_of_ref": "indicator--3fcd3107-ebbc-41fc-8a3a-aedd7e25d517", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de7570b-9481-4c3d-82a7-731b2532c79f", "sighting_of_ref": "indicator--ccef116c-15f1-4847-976f-aa8748f5b0e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ff16c1-066b-48e8-a429-7adbe3144d85", "sighting_of_ref": "indicator--d6dbd03e-6966-4c05-9d31-2172403fcd96", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09839bf4-48e9-499e-b3f0-d8dcf0d217c3", "sighting_of_ref": "indicator--bcf20111-c564-4e4b-adde-ddaa646eec17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f457c7-577c-44b9-8a32-1b2223506507", "sighting_of_ref": "indicator--34f07a58-92e3-4032-abc9-3162b7284e04", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ec7e9d-8a3d-4bbd-92c8-11737b4937e0", "sighting_of_ref": "indicator--9c86776f-5dfe-467e-a202-7c958a2c4a5b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3a50c5-95bb-4545-99a6-9cc8b2f1831b", "sighting_of_ref": "indicator--fb0bc465-7916-46bb-8760-493750a90d88", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d490ad-cff8-4afe-bd7d-7b459408c31e", "sighting_of_ref": "indicator--03f8a63f-1cdd-47e9-ba23-4c881bffcb49", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3d349c-44d1-43d5-8e3a-cc5cc36a393e", "sighting_of_ref": "indicator--bcb28907-0267-4ac2-b30c-03eee7e9374e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a2770c-fef4-4936-b9d4-e98413e87de8", "sighting_of_ref": "indicator--3dbff42f-53ed-44ca-b157-40f6bed98499", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690a16a4-b42f-49e5-9e94-57e5e8928ac4", "sighting_of_ref": "indicator--183dff89-fe89-4711-985f-d153e60d1c14", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5399b8fc-ea5f-41d2-b99f-66d77aec57e3", "sighting_of_ref": "indicator--688a2c4f-cf2d-4e94-89c0-422ca2d1a78a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1508b5-78c2-4e76-b46b-e54df4168cf8", "sighting_of_ref": "indicator--02e26dfb-1c35-4087-8ec7-6a0bdf743997", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb2ab5a-35fb-48aa-9bf8-16364906571a", "sighting_of_ref": "indicator--f0421ad7-d206-425c-aa91-04b1f8b79d81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b2280a-659d-4800-9699-4c8fbc003de8", "sighting_of_ref": "indicator--306c34ca-bebd-4747-8caa-3d0f46965e0f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac555384-6723-4343-93bd-d94c449e42c1", "sighting_of_ref": "indicator--204f9113-c84c-4e7b-91d9-821c9b353b94", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8961f37d-6b43-4e24-83c8-611830a3ea03", "sighting_of_ref": "indicator--ad41dd5e-4813-4a83-b2ee-11b22fd1eea0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee51ce71-2f56-4ea1-8e91-3e78854deb85", "sighting_of_ref": "indicator--bdbca9d1-bd3d-4142-97a2-8b3445f4eff3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c10bf7-90ac-4dc9-becc-845eb1e84882", "sighting_of_ref": "indicator--d537d325-9f70-45f8-8360-689c3f4e7ee8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9a8382-4f19-464d-ac7f-fe3718c30a5d", "sighting_of_ref": "indicator--d537d325-9f70-45f8-8360-689c3f4e7ee8", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff2de4f-b4e8-40e0-ab9b-3a1c533a2870", "sighting_of_ref": "indicator--d537d325-9f70-45f8-8360-689c3f4e7ee8", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54b7836-93fd-4044-a6c3-0d5dcca868d8", "sighting_of_ref": "indicator--14fe9a7a-c6f0-47eb-a4fd-78014e516644", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c02b530-8f3c-47bd-b662-3dba33bb4267", "sighting_of_ref": "indicator--14fe9a7a-c6f0-47eb-a4fd-78014e516644", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5846e8c-ac08-4097-8570-bff2f96f98dd", "sighting_of_ref": "indicator--14fe9a7a-c6f0-47eb-a4fd-78014e516644", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d37f38-37cc-4a9c-bee2-8eeb867c4996", "sighting_of_ref": "indicator--55e9a2d1-a764-43b8-afb0-8f798bc631ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9385267-6b76-4433-8e71-169d13fbc782", "sighting_of_ref": "indicator--dcb73a63-2b71-4af6-8e5b-978e493d5962", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf24f53-dac7-4bf6-8bbe-b1fbd93c2870", "sighting_of_ref": "indicator--c394e323-1e55-4a94-9609-bc879ac7934b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c1b7c3-1606-4d59-8ceb-3623aef269b5", "sighting_of_ref": "indicator--a565d3b7-35a6-4f21-a7f0-06d7f6d540ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54b0c88-de9c-4761-901d-847b58e5b453", "sighting_of_ref": "indicator--0476c21c-d3d9-49c7-ada6-eb3af97fa968", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5ea660-0fa7-4b56-ae24-a6b27ba1e325", "sighting_of_ref": "indicator--fc51f14d-5f5d-4971-8e31-f7913c454f1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577ffa6d-7a14-402e-bcff-53d025c90e2c", "sighting_of_ref": "indicator--466392c2-de0a-47e5-9985-091d6b3cd5b3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb92881e-162f-4e3c-ab6f-58a57ab91645", "sighting_of_ref": "indicator--bf97ca77-cc03-49d1-94d4-b8ed3e342217", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee9227a-3782-4ddd-823d-e844902d0e27", "sighting_of_ref": "indicator--7af154f4-5a64-4954-b193-58bc2133f270", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25de4ee7-c810-49df-8ece-6d8b5103f1f6", "sighting_of_ref": "indicator--f140971b-9d13-4f69-8ce9-f4f558aef4a5", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dc98b0-6521-416d-a583-f4d7a671592c", "sighting_of_ref": "indicator--70cd3070-b531-401a-add9-d068a1d3541c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf323ab-a1c9-430a-acd9-f322189db063", "sighting_of_ref": "indicator--33283beb-b07d-4437-a4ce-faa4abc1e2df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42158f1a-f8df-4662-b8c5-1d8d0640edc5", "sighting_of_ref": "indicator--33283beb-b07d-4437-a4ce-faa4abc1e2df", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc5dc04-99c5-4e6f-be9c-25169756440b", "sighting_of_ref": "indicator--33283beb-b07d-4437-a4ce-faa4abc1e2df", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925fc631-56ee-4625-a1bc-3cb0a5869b6f", "sighting_of_ref": "indicator--7dc67024-ff42-47ae-bb4b-39b064e6237b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf638f8-47d1-4d23-8100-658517634531", "sighting_of_ref": "indicator--83afb584-5f3a-4b59-ac32-8ed1ddd4e7ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e448b2-643c-437c-88f4-2c29862f26ec", "sighting_of_ref": "indicator--2a26d0fe-fed7-426a-85c9-84462c6cfe11", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059b36e4-2da6-444f-9cd1-8272e5b94e6d", "sighting_of_ref": "indicator--5ff060fb-0e18-4a3c-b028-7f6e41ec39d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2107be05-1d6a-4a64-be14-d9eafee9bbec", "sighting_of_ref": "indicator--5d326ed5-c6e2-4a2e-8b1f-6bfc820034b5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78db2a0-ba86-4541-b150-436f42a90b3a", "sighting_of_ref": "indicator--dea869de-48dc-46b2-96b1-5484ea7dd2fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0b1aa7-b732-45b8-870a-49589cb5431e", "sighting_of_ref": "indicator--1055c95e-50e7-4eaa-ad45-2ce6f79d8447", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccba190-17cd-4b8f-b3cb-39ed8f67aa74", "sighting_of_ref": "indicator--41ebb20c-cb38-401d-b892-5d82c8f08f7b", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ccfac9-c8c7-406f-ae2d-57c92268d521", "sighting_of_ref": "indicator--2a7daf2d-f11c-4dd0-ae47-a8543451ca1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48e5cfe-42f2-4c6e-a9a6-4e634810d7ee", "sighting_of_ref": "indicator--8fcdf897-3335-4112-9bd1-5e63a24410c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21568f3-bc9d-478c-b938-acb8cda96f76", "sighting_of_ref": "indicator--1e037609-7422-46d5-b78b-2b3398f22b41", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae41df7-d270-4129-b656-5df980a738b1", "sighting_of_ref": "indicator--fbcba403-7404-4478-8cd3-a7654474803a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9e5a17-fa3b-4eff-8d57-0f43219a21fb", "sighting_of_ref": "indicator--e4f28347-80a7-4dad-8786-c9222fc82b17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd1bfc8-05a9-49ed-8edb-0a33d9fc1a27", "sighting_of_ref": "indicator--7849823f-2c64-4329-82c6-e6b4a6339fd8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65f6b47-7254-4cde-907b-3f022c2601c0", "sighting_of_ref": "indicator--b5bd2327-3b28-4b27-b114-0c03307d908c", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e629ff8-afe2-47e2-a5f5-25fb7c69af1f", "sighting_of_ref": "indicator--cae36ee5-2a47-4fbc-8f35-b8d327d8c910", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a1d2c8-cabf-4129-b51a-3243f7e07d33", "sighting_of_ref": "indicator--3070430c-d749-44ad-a701-d2bacef3c1d7", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eedda18-ff64-4577-900b-cde40489a653", "sighting_of_ref": "indicator--0127a0d3-ec79-4708-84da-e682212072ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620856e6-5331-420c-bfdc-fc35b429ed65", "sighting_of_ref": "indicator--0127a0d3-ec79-4708-84da-e682212072ec", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51568781-d89d-401b-9a36-c602b3106c7d", "sighting_of_ref": "indicator--c6e4a5fc-07fb-4c7b-9ed1-df9303057aaa", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e2069e-022b-4f12-876a-91cba0a34ba3", "sighting_of_ref": "indicator--cf2f2d91-3bb5-4210-b9b7-766f88a67a73", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0070da71-b058-447a-9312-2ec9453ea6a5", "sighting_of_ref": "indicator--f10e7085-9509-4a12-9391-18d9a6f77809", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc84518-9012-46bf-aa41-b4b8488bf09a", "sighting_of_ref": "indicator--ec33ab6d-fad4-41f1-adb8-6d14c61b4d4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d964a4f4-1e4d-4ced-aab5-3145fa9fd765", "sighting_of_ref": "indicator--86c8bab3-b9cb-4ede-963d-d00a0ed3eac2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab4a25f-483d-47b6-bc87-a5cddf974f6a", "sighting_of_ref": "indicator--9fbe4d81-926c-4db0-b75e-15ea27a2e7d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2c997f-e7a0-4a98-a8f1-42ef8462eeb7", "sighting_of_ref": "indicator--44ffb19b-44df-42ee-8573-2ace4a497269", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd66a07-ee66-4d02-b674-d55719f89fe6", "sighting_of_ref": "indicator--ca0a7c5e-8980-49b2-888c-769c96b4604a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d7295b-6c6e-4f76-b48d-ae5ddfd28802", "sighting_of_ref": "indicator--02c00da1-f9bd-4b8a-8805-dafe10cdcb7f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c503ab-13ea-4f88-bf10-222f43b32df7", "sighting_of_ref": "indicator--5715d74b-dd10-487b-8d77-89f044150498", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742833a5-72ac-496e-94d4-066716531e74", "sighting_of_ref": "indicator--414bf3f4-b4ac-4c1b-b7ad-8fa5e119cade", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c0fbb3-8009-4ebf-adbe-1c8db826b8fb", "sighting_of_ref": "indicator--414bf3f4-b4ac-4c1b-b7ad-8fa5e119cade", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c03e95-d6ff-4aa4-817f-ef37f73884f0", "sighting_of_ref": "indicator--414bf3f4-b4ac-4c1b-b7ad-8fa5e119cade", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cef974f-bce5-4bf5-8cf2-a043641f1187", "sighting_of_ref": "indicator--cac2eb3d-3164-4751-b88f-cce334caf330", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1d05dd-2e98-4ae7-9008-633ed912d128", "sighting_of_ref": "indicator--31134826-bdc5-44c7-b1a0-44871f0f62f3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44778b89-00f6-4af5-b0e6-c434e7b6b148", "sighting_of_ref": "indicator--31134826-bdc5-44c7-b1a0-44871f0f62f3", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de97d0fe-24ac-4c5f-a9cb-897608acfbc6", "sighting_of_ref": "indicator--31134826-bdc5-44c7-b1a0-44871f0f62f3", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9222d586-4193-4210-87b6-556259bf513c", "sighting_of_ref": "indicator--75287b89-a48e-4d13-8a6d-68c3b4406b2a", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c927594-365e-4778-b95d-4bb3ded5d8ab", "sighting_of_ref": "indicator--4bdb577d-5f02-45fa-b302-ce9a9923e969", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa36069b-633f-46a4-a548-1b34571d3023", "sighting_of_ref": "indicator--423440f4-9112-499e-9f4b-df09da5d4ef0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87c251b-d004-4dca-a0aa-0a112562326f", "sighting_of_ref": "indicator--7447a62a-6274-464a-affb-59682565a0b2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18309ca-5fa3-4d8b-a41d-2981c9357eae", "sighting_of_ref": "indicator--20eb45ec-4698-46c2-b137-bdb6b7986204", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ae30e7-94b5-4444-b001-eee14f0862b8", "sighting_of_ref": "indicator--895be419-bdc3-4be3-aedc-bde3ad2dbfcf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f490e173-6f34-4dc4-9844-8906341c00af", "sighting_of_ref": "indicator--1465eff9-7f34-4a14-bbce-e5e90b03b17d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36abe501-3808-4269-9963-6aebe709694b", "sighting_of_ref": "indicator--02ade87a-f704-4848-ad82-c79c50ea19de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33200939-255b-47ca-b17a-6b3b74a7a1ee", "sighting_of_ref": "indicator--dca453ba-7bfb-4c5d-ac58-f299a6765eae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471898b4-9c89-4f5e-b0a8-9e2ea44a05e4", "sighting_of_ref": "indicator--0fa68867-3e6b-4a0c-8523-80eab5e68de4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5a9ca2-44c8-4b6d-a28d-da256a10f717", "sighting_of_ref": "indicator--bf28d6f7-89db-4e55-b67f-cbf5e7485a8c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745cc297-30e4-4157-950e-0b04cc399322", "sighting_of_ref": "indicator--16707e57-9022-4e9e-9526-7bd7ea585931", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf303a9-0233-4e1e-a659-cefdd9fad088", "sighting_of_ref": "indicator--34a452bb-4cbc-49d1-8c79-4119f0a23991", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac8bfa1-f4e9-411a-a60e-5452fd45740e", "sighting_of_ref": "indicator--cb6c468a-651a-43b8-8707-480afb549a45", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9053676d-dabe-4e3d-8680-0572474bcd36", "sighting_of_ref": "indicator--d38136bc-8119-43b0-8c23-16499f377035", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dbf7a3-9b64-4b25-93e5-0519d96d0993", "sighting_of_ref": "indicator--b4d639a4-c342-48f2-9843-d2f581f74c65", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae8f103-3120-4179-8e57-105f7905d5df", "sighting_of_ref": "indicator--d0eac1b7-1c99-49e4-acfa-d37b3befd65c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86670940-d72d-4708-8a22-c5fcd675292a", "sighting_of_ref": "indicator--2339ec50-4c43-4cfc-9b97-409b641c7f00", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c947fbf-bc30-49e0-8213-65e211ae811f", "sighting_of_ref": "indicator--32fadf0b-2072-40dc-8bcd-7ab91a10db1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7444bd00-5edb-4ddf-9c1c-db57b8843d51", "sighting_of_ref": "indicator--ce0a25ff-3753-4d08-a1f3-a36bfca539db", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a1e818-144a-4598-81bb-2b2da90c099f", "sighting_of_ref": "indicator--e5ce05e2-31de-4317-9110-978d9adcb051", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbf6e2f-0a07-48a8-8862-961b12ae130c", "sighting_of_ref": "indicator--38389740-4c33-449a-b882-2a3d817ce478", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dd59df-1740-461d-b734-1fcb978d49af", "sighting_of_ref": "indicator--dddd14a1-cc13-4d25-b614-8c2a177ca61c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5519e4be-8a89-4aa1-87e2-4e4389d5bd69", "sighting_of_ref": "indicator--e6a6f89e-65e3-42eb-8003-48ca11678589", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78ca2c0-831c-4ed3-a940-76fe336c331e", "sighting_of_ref": "indicator--dbb09b03-238b-476d-8c6e-de7780857a78", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42661f9f-cea5-46f1-bae5-6064210e44a1", "sighting_of_ref": "indicator--7473cf4f-b4c9-49bc-8fdc-b623f52a2e2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5be09d-4fc8-4041-aec4-774e5a90395f", "sighting_of_ref": "indicator--e4fa9e49-4f9a-426b-8388-94017cd1b81e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bda8d04-fe4b-49f5-857a-a283b6324a65", "sighting_of_ref": "indicator--e5b29b77-7b5c-41a0-9b0c-21257acff84b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7739a8d-e0ff-4f2d-961c-0bbd4dbdf006", "sighting_of_ref": "indicator--4d9b2260-fa58-4e8f-81e7-1b1a067a53cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ecb333-bf48-4508-9de7-4fda484671bc", "sighting_of_ref": "indicator--2706b3ff-db00-4482-b567-7826c4726484", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc8585c-c71d-4427-8c84-f67596c155f4", "sighting_of_ref": "indicator--09fb24f2-2cef-4355-8d62-5b964d080931", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7969a68c-6160-428f-b50f-019a23bcde65", "sighting_of_ref": "indicator--b92f4046-5529-4cbc-aedd-e25f89dd8648", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04288ef-6725-4e67-8136-6e1573b802c2", "sighting_of_ref": "indicator--2af04531-c7ea-400c-8b76-0c8cc9dd2cb9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448375af-4960-49f2-b140-eddba8c4d708", "sighting_of_ref": "indicator--3d206402-0dc3-4671-8eb5-f8dd12ceaec0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c6708e-8eca-4de7-be63-df48d80babc6", "sighting_of_ref": "indicator--16ba74ed-30d4-44af-bb3d-5d7abf3fb6e7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603e832e-d6ab-45ef-8713-3d1bfc968cf0", "sighting_of_ref": "indicator--3856ea6d-de60-4292-a633-13d4ff452ac7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fbd227-76d1-45e9-95a6-0b7746295841", "sighting_of_ref": "indicator--47b0a08a-82b9-4fdd-9d35-82492f119e89", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91569d6a-9c26-4432-a61f-7a3cfa451650", "sighting_of_ref": "indicator--383858c0-c3d7-4af1-bcf4-3cf29cba2636", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1034fe-508f-4b9f-8b64-07f65ce16d4a", "sighting_of_ref": "indicator--3d33f76c-c26f-468b-9e42-d1a7cac06115", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8721ddb6-63d2-42f0-9f75-a6b1bdabfaca", "sighting_of_ref": "indicator--35535644-854e-4f44-91ec-f475648dfd15", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a88de4-08a5-4b68-861d-41993a0d96e9", "sighting_of_ref": "indicator--866a9d81-cde6-49a1-81f1-4584564d2c17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89223b4f-4d5a-4c79-a320-b6ef0d8a013a", "sighting_of_ref": "indicator--1603fe00-56c1-4826-9387-6315043e94ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d306d20b-43b7-4aea-898c-817225e45418", "sighting_of_ref": "indicator--7a3e3616-e80f-489e-a3d8-51c21f3006d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861648c5-1545-414d-bcf9-cd95e38c3772", "sighting_of_ref": "indicator--92c2b40a-9f1a-47ea-9bf7-59ee3ea493b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad477f0b-fcc8-4e4b-a9a3-5c586c4576e0", "sighting_of_ref": "indicator--db8948de-83da-4456-ad0a-c259974223fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2d41b4-de72-45ec-83ce-2bf9cf2b4407", "sighting_of_ref": "indicator--c081c2d5-4cbe-4539-9eab-2c7881858440", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407d8a2b-89c9-40d0-ac88-ef88df9a05e4", "sighting_of_ref": "indicator--189a4cf0-66b1-4eea-9a50-d14c9b17370e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ad83fd-65c5-46c1-8ef4-d1328b1dda8b", "sighting_of_ref": "indicator--452b4b7e-dfc8-47d3-b55b-3491d59dc384", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5e6394-baa6-4387-865f-3639f6e041e1", "sighting_of_ref": "indicator--9d3bf349-b621-4143-b191-165492e47813", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb31595-0ced-4e21-9c6d-f4aefae7656f", "sighting_of_ref": "indicator--da9753ea-26f1-46b4-84b8-6d1c6b8307ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be67396-4048-41ac-8a47-70731840b0a4", "sighting_of_ref": "indicator--cff7fbbe-da0c-45f9-a316-79e8aef6719d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1260f38-14a8-49a2-853a-a3c1adfe1008", "sighting_of_ref": "indicator--ee571d36-15ca-46f2-a377-cfba07c97e96", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba6f8ad-d6c9-41e1-b7b1-5f45e2432199", "sighting_of_ref": "indicator--dd314a5f-29d1-495e-a71a-fef6c00c4c05", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f5d81d-3c24-4690-b3fb-2e65595aa4a9", "sighting_of_ref": "indicator--887184aa-a27a-437f-b753-50b49d78d4fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9f321f-00ee-48f7-8f69-c28dba3ea16f", "sighting_of_ref": "indicator--057cc3c0-fc32-405f-b7de-e793737f6f42", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf7dc27-3750-4e5e-a4cb-01ab93330eba", "sighting_of_ref": "indicator--0fadcfa6-4765-4707-821b-f239b37d1315", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61e654f-fdf3-4c64-a315-6b90326bdf50", "sighting_of_ref": "indicator--7caa0931-8200-4008-935f-b8d84618419f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbe4dc9-ff0c-4a6e-8670-08e8aee9cc0d", "sighting_of_ref": "indicator--ac559021-e515-45a3-8adb-97c9ed28417f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9343e9c1-1b65-49cd-ae14-7a4b30bf7d76", "sighting_of_ref": "indicator--b6ef53a4-f193-4132-836f-ce8df714ab8e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e351f16-36f8-4029-9b44-5e5e82264186", "sighting_of_ref": "indicator--16445d9f-df16-4214-bbac-12cbaf1b5555", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c44d94-fa28-4aee-8c88-8b70d0977816", "sighting_of_ref": "indicator--beff241f-e013-4ee3-a240-4ae5f53307ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a111dc8b-ab78-4c6e-b1d1-1fbcf16f60f9", "sighting_of_ref": "indicator--beff241f-e013-4ee3-a240-4ae5f53307ee", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e877e5b3-ba34-4be5-a41e-0bfec4fe4728", "sighting_of_ref": "indicator--84496cb8-6c7a-4cf5-a718-9f3ebe5b9c44", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f04c5cb-894f-4a80-a07c-0a6a1c8d0ef7", "sighting_of_ref": "indicator--8fe3f663-91bd-4576-87a6-7c369b6b8d2d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409be5b0-f8ba-46ea-98fc-5d229fe37346", "sighting_of_ref": "indicator--109633a1-48bb-4913-910f-73850416b61e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d70a3d0-9d9e-4407-bb03-8714adb45c6d", "sighting_of_ref": "indicator--7ab857f1-654e-48b3-a6d2-e0dab44762ae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac7714d-b67e-4bd5-b943-29a8b5a399f4", "sighting_of_ref": "indicator--aae4ba1b-640d-4a3b-a3c3-fff2148e8c35", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e851bed3-eb97-4200-b23b-17c47d6a7aea", "sighting_of_ref": "indicator--622b21b7-b231-4253-ba12-7e78ae678611", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b265f661-3f92-4b98-b0f7-d3b11f8c784b", "sighting_of_ref": "indicator--4345230b-042d-4cbc-903a-7e7a24cf11ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48c2f29-7ba0-41a2-8d67-9180a1dff13b", "sighting_of_ref": "indicator--f6fd178a-1159-4b97-9c15-5f1a55405ae1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1d03ff-90f9-403b-9f30-741082be535c", "sighting_of_ref": "indicator--e8e0a211-69c7-4a7d-92e1-e4b7aaee0a40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9d50ff-b9b6-42fe-a11e-f249cbd90f36", "sighting_of_ref": "indicator--2556a987-9e08-446a-ba16-8a2c6dcb2f8a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b507cc-0497-471b-93ed-30812c487454", "sighting_of_ref": "indicator--e43cb02a-1d05-40c8-9e05-81bdc2e44aa3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e3f74e-1406-4c9d-8f28-f5649cca6103", "sighting_of_ref": "indicator--436f5456-b346-4ab3-bdfe-eccb41d67e21", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661309b5-fd63-42af-9fbe-ddd8f5aab05d", "sighting_of_ref": "indicator--82bd7e6a-1f53-488f-80e1-7fa096f536ae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bf5a9a-280b-4ee6-a311-d68b1c734014", "sighting_of_ref": "indicator--076983a3-3a60-462e-a3b0-d781df1feedc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200d644b-1c5f-4584-ae59-33637b00ab55", "sighting_of_ref": "indicator--39f04f2f-efd6-46e5-8d8c-9b2b8c70a098", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3f2d4f-afd4-49b3-a2c7-72d92f17c26d", "sighting_of_ref": "indicator--0fe88231-0e64-45e1-a8ba-3ba3355415c9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87db2738-51ca-4a4d-8adc-1f49e62ecc08", "sighting_of_ref": "indicator--a187ecaf-3a55-4702-b4ba-b6ebae5e2eff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348180ef-99ec-4e04-88c5-533752c625aa", "sighting_of_ref": "indicator--678a6f04-bdc3-4a8f-b8b9-cff346a290d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34826bab-91d6-4fdb-bbd1-269cf647fc10", "sighting_of_ref": "indicator--318a396f-6158-4d2e-8378-15c8c74b5cec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae31422-96ce-48ba-8934-aebf2aa36b2b", "sighting_of_ref": "indicator--f7c5effe-de90-4803-b43d-47f49a6cef64", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe5d18c-5b49-4da3-ae91-d4c4fdbc3e0d", "sighting_of_ref": "indicator--313d68e9-e086-47d4-8bda-10bb8d878f28", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2babc1-2b93-4953-bc70-b6593e17b4eb", "sighting_of_ref": "indicator--9408ae0a-8f67-4bf6-ac07-786e89fd5938", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c78c7-fcd3-4175-9524-ef88803c0212", "sighting_of_ref": "indicator--6a599dbf-8c72-422d-8432-fcb0bb03a5ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f96e1b0-ca97-4071-85e8-ff0e8b0940d5", "sighting_of_ref": "indicator--7384f396-1961-4e6e-8dcf-7459166305e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332efff5-62a2-43b3-820d-8fb2e88084cd", "sighting_of_ref": "indicator--f19afa94-73ea-459b-bdd4-08da8470cc13", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47387ddb-1afc-403b-8035-197c583e0b08", "sighting_of_ref": "indicator--1c769a6b-6019-4453-83e6-74860714a44d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85afb28-f57d-4d42-92e4-9496d466740b", "sighting_of_ref": "indicator--37fd33e2-42e3-4b2c-a76e-acc8bf32e0ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c0156f-6e7a-497d-85e5-6ea19fae4160", "sighting_of_ref": "indicator--9b65d3a0-8364-49ce-8bcc-58b7bc2f67b1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a845bec-9c8a-4933-abe6-770a1043fab9", "sighting_of_ref": "indicator--e6a4f98a-251d-425d-8ce4-f794d637bb67", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72e5143-9073-4be0-983d-fdd360c34628", "sighting_of_ref": "indicator--4c63d700-a1da-403a-ac78-3ea69613e68f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5669ed3-b790-4a70-b7f6-657164e34be8", "sighting_of_ref": "indicator--dec1d9a3-c23f-4c05-ad92-11bf1153b03d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f4447b-75ae-4a54-8501-bd63ef868476", "sighting_of_ref": "indicator--528ab024-a667-449a-9911-d90446fc0bbf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36dda5e8-2e6a-44b2-83b3-15c9e05102f2", "sighting_of_ref": "indicator--6b6fdc1f-c27c-454a-a87d-a98b7a2a15ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f845869-78de-4c64-ace5-f77180ba4dcd", "sighting_of_ref": "indicator--3b2c5a03-da33-432d-8b40-978a180940ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb2f714-ad39-41ac-8ce6-27b285b1a88e", "sighting_of_ref": "indicator--381025ec-49ae-4416-83b2-54f75723e6e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c74ecdc-d572-46f0-adda-0c642d1cb5b7", "sighting_of_ref": "indicator--a0f8c8d6-6fe8-4897-914d-c897a7e2b891", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc29d5b7-b88b-47a1-b85f-6e67592df27c", "sighting_of_ref": "indicator--d3091dd0-99a6-4f1f-978c-455292307ff0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b971116-9e04-4282-a9a1-3a698883b18f", "sighting_of_ref": "indicator--f20a890f-b788-4755-b837-be0e7959b94c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856790f9-7b24-4dae-afef-130bf828091d", "sighting_of_ref": "indicator--4175d5d3-96c5-49ad-b243-ff7034ad3050", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b375605-a27f-4225-a1f7-5d0eed8356d3", "sighting_of_ref": "indicator--30b130c1-24c6-498a-811e-c21c65e122f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83afa7f6-4148-45d5-bcf5-38b4e35e1984", "sighting_of_ref": "indicator--dd76a21c-4699-4869-a713-f8c6d7575883", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bf5d3e-a5bf-407b-9ee1-8c25986e1396", "sighting_of_ref": "indicator--8d4d6964-3a3c-4fc2-b5e2-08a4b3b3a3fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d46472-904d-491a-b678-fed9e92e1489", "sighting_of_ref": "indicator--5640392e-a9be-48c7-a4f2-9a9a6893e730", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1918c34b-3bf5-4d29-af51-aee04f2fe74e", "sighting_of_ref": "indicator--5cac7670-eab7-40dc-97f7-53e6df163073", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b928a21f-baaa-4c57-a040-f5abfe0084ee", "sighting_of_ref": "indicator--1db48833-58b1-4904-9f4a-66d91e08d21f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f69b987-9ab7-452e-9b3b-da2bc301faf5", "sighting_of_ref": "indicator--9e4e17bc-f429-42ec-8071-15bcb2a17927", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75b8a42-f945-4bbf-802e-e09d60356e3a", "sighting_of_ref": "indicator--09f7adc7-171a-4207-b2bb-8ef433ba14b6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b728ca-825a-40b4-9119-6d76f84ec654", "sighting_of_ref": "indicator--054f1e36-33e9-44b4-b676-61ca47c57420", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d16d4a-68f5-4b4e-bd49-8a80edd3a65d", "sighting_of_ref": "indicator--56df9145-618c-4825-aca3-9a1526321830", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e456191-f12f-43fb-ad73-384b7dec2a43", "sighting_of_ref": "indicator--33e6cfe7-ea02-4eab-aaf6-87634ae0fefa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06901977-7cce-4d6d-ae8a-7bb157fb6086", "sighting_of_ref": "indicator--9aa7070a-fae4-4bfb-9b4d-0a9e737cdab0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efc3415-27df-4c57-855f-bf8fa37cbc33", "sighting_of_ref": "indicator--03451ce4-de47-49bd-94a3-37997f6d1c33", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42562638-75c9-4678-ac00-1716bcd959eb", "sighting_of_ref": "indicator--b61e088b-1328-4345-ab33-d4de90777c0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece293fe-e47e-4ee4-89ea-7d159cf6bc7a", "sighting_of_ref": "indicator--1c6dbe10-62f1-4ee9-8ea7-0c005e19a73b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a53294f-9764-4a62-b671-f4d793bf057d", "sighting_of_ref": "indicator--5f619f1b-ebcf-42b3-bc53-1955cb4f4a1d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f38c08-ea4e-48b0-b3b2-0c16bd2614bd", "sighting_of_ref": "indicator--fe69180f-6edb-49d6-9e78-6e85ea097d66", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910da6b1-594c-4673-a895-df49edaf95ed", "sighting_of_ref": "indicator--8fc3516a-c645-4a69-a7bd-7ac2b04a7e56", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d038a3-3db8-4132-8c20-c27021bb602e", "sighting_of_ref": "indicator--d42639bd-8e29-4dd1-9d5e-be74ff09209a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b3272d-f393-4292-9f93-fa4a59384966", "sighting_of_ref": "indicator--d6d43731-d64f-4ef7-a344-20feb9c4c5c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5561602d-075e-4461-9cab-bab9a3ebf91d", "sighting_of_ref": "indicator--af994438-cd98-4070-bd24-407d4868b866", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e784758-0425-4d03-849d-0b13004ce5ce", "sighting_of_ref": "indicator--72a26da7-1a4f-49e0-b5a8-07d9e0378148", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c4606e-f224-48c2-b962-a174cf7dc4f2", "sighting_of_ref": "indicator--5ee1d41b-22a5-42ab-93d6-f15640ecf1c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b938c4e-71ec-4c44-a268-ad605afd5d9f", "sighting_of_ref": "indicator--752c3ac7-e2c5-4c8a-b8c1-a3d1b0ef4db0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fda7b1-d946-4f08-9d77-f97a5f96ca50", "sighting_of_ref": "indicator--ba5c656c-9c75-40c1-9065-7b69fc41c8b5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bff2469-ffa5-47fd-a539-93c846f81650", "sighting_of_ref": "indicator--565e2665-9c9a-4219-afc8-e90902a9182d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395bb651-26ad-46aa-a576-2d0d2e56d687", "sighting_of_ref": "indicator--ab3b39d7-6328-493a-a157-b6f975f2c700", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e427af-fa91-44ea-9a25-9414a92cb3e5", "sighting_of_ref": "indicator--ca51b3ec-fc53-4a3b-bf0b-3e6d241b2341", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4eaf3c1-26fa-4449-b309-365284b5da92", "sighting_of_ref": "indicator--615ec988-8aa4-4362-979a-fc5d5ce0535c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bc2ec5-825b-4baa-b5a6-9bf76eb19e55", "sighting_of_ref": "indicator--4fc73bfc-30ef-4af3-8875-6ea0b2a0acd3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcd9a49-fd41-4233-9228-36c68f501211", "sighting_of_ref": "indicator--fa689dcf-4a41-4478-b037-1a285d505f67", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2678e0b8-b8a4-48b5-a57a-f3c573dd601a", "sighting_of_ref": "indicator--73808f43-f716-4a0e-98e6-0be2d6ed9868", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aea050f-2610-48a9-84ef-4a87bf720c68", "sighting_of_ref": "indicator--883459a0-8beb-4b36-ab04-3e1aae2c0f50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3188c13c-e854-4e0c-8065-092eaca5885e", "sighting_of_ref": "indicator--1f51c304-852e-4b81-82d5-9d722226001f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270e3299-9b7d-4d81-97a1-1e10e4a4190f", "sighting_of_ref": "indicator--8bf1a53c-ef44-4ef7-994c-b1fc09a40c54", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042dc393-0fea-4c16-8275-bc501533bc9c", "sighting_of_ref": "indicator--6e1eca15-fc05-47f4-805a-b2b650763a26", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b03a1c-337d-4f44-bac8-c69d0eb92999", "sighting_of_ref": "indicator--4935f149-e90c-4884-afcf-2a0dc772982a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd5ac83-a420-4380-ac84-c4724aba158d", "sighting_of_ref": "indicator--cef38b52-eb64-4fbb-965b-fce482a63d4b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9102b52e-a652-48fb-96cb-739742924ceb", "sighting_of_ref": "indicator--a80a44c7-b86b-424b-ade5-8f8d124c4e8c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3a6eec-7916-4714-9b2d-f328a8519346", "sighting_of_ref": "indicator--8a3c5c0b-6860-45c8-bec0-3a0f4565fe0b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545a93b0-2cba-4695-9865-e32329f9340c", "sighting_of_ref": "indicator--780b8cc7-f6b5-4f0b-820b-b7371dcea1f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a63b0a9-e212-4ff3-8d2d-bc35d212d3ec", "sighting_of_ref": "indicator--6c03b06f-c74e-4ba0-a38e-0a8e2844572a", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0dcf74-7b37-4618-a227-1acf28bd8dfe", "sighting_of_ref": "indicator--e53b24ce-3b7e-4bc9-82d7-5c96fe41fe1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ec45c2-a80f-41fb-a769-c8b2795075ef", "sighting_of_ref": "indicator--ee22f7d4-f1ab-4472-882b-8cfef606cc4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032e4888-cb86-41b2-96d5-0ee926ad6b2d", "sighting_of_ref": "indicator--ee22f7d4-f1ab-4472-882b-8cfef606cc4c", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f1ed34-86ce-4a47-8b2a-c34bc70907d2", "sighting_of_ref": "indicator--a69c8d95-c325-40d2-99a7-4b85f9f982de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bc5ee7-3eb9-4925-a92d-e4ac777b25f3", "sighting_of_ref": "indicator--a69c8d95-c325-40d2-99a7-4b85f9f982de", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4830ba5-e0a9-42c6-977a-ef5726d785a3", "sighting_of_ref": "indicator--0601123d-d8e8-4cfd-9a92-8c4d0ea2e7d4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66005f3d-c3e7-42f6-880e-e423f9bf1b4d", "sighting_of_ref": "indicator--6ad5d29c-bfc0-446c-8362-241c9b79cadd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0dd980-35b5-4fbd-8ce4-7d0fad59583b", "sighting_of_ref": "indicator--1c634fb4-b8fe-4bb0-a26f-935a3441c189", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803b4cd6-93dc-4a3a-bc9c-7fe52f7d151c", "sighting_of_ref": "indicator--917b8087-0b87-4451-8d55-f6d1e3696f5f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f46f905-d962-4fb3-b9a2-5047e08d6d02", "sighting_of_ref": "indicator--917b8087-0b87-4451-8d55-f6d1e3696f5f", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7d20c5-87f9-4c22-9791-d34a9d66de75", "sighting_of_ref": "indicator--eff11510-b5b2-4347-a73a-b747e940d36c", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9546d88f-cf0c-43d7-83df-5fe977dac074", "sighting_of_ref": "indicator--9d5bdc1c-3889-4821-bd78-c42042b3417c", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2997c3fc-309c-463d-b4c4-9e79f6afbeb6", "sighting_of_ref": "indicator--0d45bfbb-5967-401a-838c-d11f94da4c3b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ce4ec2-7f21-4488-9d8a-65c10dcce728", "sighting_of_ref": "indicator--1c4ffcad-d02b-4222-b9f7-d7d5d380e86f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541c4978-901b-4d8b-b704-3c61b8db8e4f", "sighting_of_ref": "indicator--85bc792a-7bcf-46f7-80fb-bf306c45e73b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20b9051-c8aa-4295-a526-b79c61bb0295", "sighting_of_ref": "indicator--462e7779-0941-4657-b3c6-880048504d18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc132e1-8703-4725-afaf-1b1eba6daa32", "sighting_of_ref": "indicator--565cc4c1-2b9b-4284-9a5c-a547b87e0d34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76adba03-d767-450a-8fd6-e8596fff9249", "sighting_of_ref": "indicator--8bad079f-217a-44b1-9d2b-2e1d2869e865", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186b37ba-1fb6-48b8-ba24-f41f8c38fc99", "sighting_of_ref": "indicator--a91124f9-da6f-4abe-9795-1445a237b3ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9b8f09-2bf9-4035-b419-6100603b0413", "sighting_of_ref": "indicator--57092fda-9384-4eda-a07c-942d1e2cdc4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8772cd59-853b-40fc-8e91-7d885f603b3d", "sighting_of_ref": "indicator--74635671-02be-4bf2-a409-8c09d1aa8b74", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51538632-9a51-4495-bdc0-c9c934f3976a", "sighting_of_ref": "indicator--c6bfc620-f3ae-4b1b-aaca-6631317fb3a4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc569fe4-358c-4bae-80b7-ac80d11f0bdf", "sighting_of_ref": "indicator--1051f379-3d4e-41ef-aa68-be0a5460f900", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bd8d02-6611-4c02-a16a-ee4e4e429249", "sighting_of_ref": "indicator--e7a95be8-5877-474f-8147-224eeba24a15", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd21ff7-0864-46b4-b4c5-9aba12d4e939", "sighting_of_ref": "indicator--4e85744b-1dc0-4bc0-aba9-ce93493d09d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b25db7-0d82-4d29-9414-bc14aad0d9c7", "sighting_of_ref": "indicator--80796fb6-be00-42a7-86fb-a2c01b198185", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dfd275-bad1-4295-8b4f-79fa918a124a", "sighting_of_ref": "indicator--9367dd09-552a-4749-97b6-0a5f4c935c2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843ca23c-73d2-467f-ac20-24c13a3e06d9", "sighting_of_ref": "indicator--582c624e-0d1c-492e-b8f3-86af41786b95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcf73d9-ed53-4257-b8b9-9f96889c8096", "sighting_of_ref": "indicator--fd50c612-16ef-453e-869a-5fb953bbab2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6791ac-218b-4d21-9c59-e23f59089512", "sighting_of_ref": "indicator--c577e55a-fd82-4fca-befe-ca10c7656c2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9822957-cf80-49bc-a593-441bfeb9f8f2", "sighting_of_ref": "indicator--4ac7db31-8542-4bda-9a76-c2ae388f4b5b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168db17f-e8ba-4b2b-aa9a-fe49cd018572", "sighting_of_ref": "indicator--642323a6-96c1-4fa0-a432-67e88d07a3ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798bcfea-8b57-422e-9cc1-0094ddb921fc", "sighting_of_ref": "indicator--6641d4b9-7c05-4b5c-bbb7-4a55bc797c7c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ba04e5-b1d5-4343-92de-61c11f0caedf", "sighting_of_ref": "indicator--82d887cc-a9d0-469b-89a8-7cebda60cfc5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568115e1-d2bc-4fd0-91ae-959de0d1c2e8", "sighting_of_ref": "indicator--32b49117-b204-4e6b-9fb6-e2e8d256f03c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d883eb0d-5c36-49e1-9635-317cdf665907", "sighting_of_ref": "indicator--0502ad43-8e48-451e-ab59-4ecdafdcb605", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1542c6d1-690c-4cb6-8bbb-895a91289cd1", "sighting_of_ref": "indicator--38afa6ac-a1ed-444d-909a-0121638020f3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c26e18-71ab-4bff-8761-2db23d136859", "sighting_of_ref": "indicator--e0c8adf8-3d89-4bfe-b371-6b712ce3d93d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ec38ff-721f-44e7-8558-c81354151425", "sighting_of_ref": "indicator--9505f552-d43c-4248-af02-417732e6431c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367c391b-30dc-4d7d-8edf-ac507ba91767", "sighting_of_ref": "indicator--8b970954-6049-438a-bb87-213d49c7c8da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fd8a26-db93-46cd-b18b-963b049595de", "sighting_of_ref": "indicator--ab49368e-9ad4-4711-8152-f7249a5d11c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a725bd-b2fe-493c-9b34-a8affaa3cfe0", "sighting_of_ref": "indicator--bfd1843e-1597-48e0-af9c-5bf583d02954", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccc338e-dbcb-4259-ac49-ed337250636e", "sighting_of_ref": "indicator--08030c18-9b7a-4aad-8219-49e07888f1e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926ff7c7-6545-4404-85dd-4428cb7b5f7f", "sighting_of_ref": "indicator--17408084-5cd6-43a3-96d5-4d0b4962866e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24781761-1946-42e7-b46a-4162afe94b58", "sighting_of_ref": "indicator--5b2f498a-9cdf-4f94-bf27-00ea981e5698", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7516c9-9a63-4657-b9f6-bffd0e0913a5", "sighting_of_ref": "indicator--756db61c-5856-4a5d-9cc9-28a85a8efc1a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b00de8c-0b20-4102-a89e-3e147e1f709f", "sighting_of_ref": "indicator--187912d3-d800-41c0-a5ab-f9e194bddf01", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83326613-e448-4599-8387-d5535cef6c3b", "sighting_of_ref": "indicator--12d5cd5f-487a-4ef1-96a9-904ded92fe9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d61e261-13bb-4cf5-8153-b6d0c3311499", "sighting_of_ref": "indicator--ab5c2690-088d-4092-8792-93c25545a08d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39544303-c2aa-404a-b320-104c727073d3", "sighting_of_ref": "indicator--62a97b24-01ad-4708-bcda-42d9ac3346fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7e565b-db85-4679-8995-f502ad61d7b3", "sighting_of_ref": "indicator--697f9017-1281-4fd0-a09d-d939146ee478", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8ee424-6f1d-4a8d-bb77-b3b45a560ed9", "sighting_of_ref": "indicator--5b7ceb37-9792-49c5-822f-d779b09bb039", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2035ecb2-b2e9-49c9-a5f8-dce9723c9db4", "sighting_of_ref": "indicator--7f208db0-0016-46dd-8b48-0b12dfed7bb0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b748f561-956b-435f-9818-950b30a5d446", "sighting_of_ref": "indicator--be1033db-e449-4c31-ad78-5a3733c7def0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6662456d-207b-4660-a38e-3dc3e44e693c", "sighting_of_ref": "indicator--6757c3bb-6858-4208-81d0-1dec8f8e930f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddde937d-f603-4adb-a8d3-5628a4162b31", "sighting_of_ref": "indicator--00a181a7-1818-4084-a3ec-9ee544eff5a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d2ba70-f235-4649-8906-d3009c300a93", "sighting_of_ref": "indicator--8f432b7d-afd2-400a-8127-9e8c19d878f9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14887de-fefb-41f4-a640-65573da3307d", "sighting_of_ref": "indicator--db862a44-9191-42e4-bb8f-0648a3340101", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9db547-d5a5-45b0-99ff-d84f5432a0e7", "sighting_of_ref": "indicator--471667fb-b9a6-4df7-b45e-a98635083ab4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10305723-cec7-4f56-a516-74d10f3a3b67", "sighting_of_ref": "indicator--7d1285f7-b85c-44da-9702-0d5f2855daf1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbf8ca9-b709-44cd-9576-96343e459599", "sighting_of_ref": "indicator--0052ba29-9742-4e96-9033-ad82d684d1a7", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908a0280-4092-43c9-a26f-760d1b9916c4", "sighting_of_ref": "indicator--d86c83ca-6293-401d-9952-9d19a997f2c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ede5052-6c0d-424e-9805-0920ec4b5605", "sighting_of_ref": "indicator--cf2915f3-f360-4b6d-a83e-f4a1c1385ca3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e1e826-3881-4693-ba6d-254781f7b034", "sighting_of_ref": "indicator--9fc4696c-fd27-4fe3-805d-531dba477878", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd2886b-be02-4ab8-850d-0283b084cc0d", "sighting_of_ref": "indicator--2c242098-506a-413b-a8e8-63c1a5902d42", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07442e4b-d6a7-444c-ae44-9cb2eecde09c", "sighting_of_ref": "indicator--cdf47af2-18c6-400d-97c9-017b364ce727", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3640f601-fe22-4555-a33e-155399045e23", "sighting_of_ref": "indicator--32666f74-f899-46f1-a1c5-c3b9c4f09fda", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beca23c3-0e90-4dd6-affe-b948370e218a", "sighting_of_ref": "indicator--e9a460a3-3d5c-45b0-8075-63fdde4dc7a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9200314-a97b-4ef2-b8e2-43e5e300468d", "sighting_of_ref": "indicator--895fa160-dbaf-4072-bbea-67508290ed7f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9d378f-e2d9-4f49-9781-940e95d0544c", "sighting_of_ref": "indicator--27f7625e-1acd-466c-8c71-2a3af9bdcee1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4694ad7-e6c1-4b86-85bd-a6f53513c45f", "sighting_of_ref": "indicator--26462cac-3018-47f8-8704-6c8802989812", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b415d2-e05f-456d-bf41-4d80d73ceaf2", "sighting_of_ref": "indicator--ae2313fa-dd71-425d-9901-0090e1b17866", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f422289-83ad-4988-b378-4306437a13a3", "sighting_of_ref": "indicator--e1dff613-6ab6-48a6-9c2e-ce35ae5c1e1d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db23d49-96a9-420e-b60c-cafb81a66d9b", "sighting_of_ref": "indicator--27bf6526-45bf-45c9-ae7e-c6efd886689b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1be089-64f2-464a-a123-833ece11a07a", "sighting_of_ref": "indicator--a3b470f8-6ab5-45f2-b1b0-dd6671f848a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df79f35-643e-4e14-aeaa-c6d234cc3643", "sighting_of_ref": "indicator--2b5b27e7-eecb-4d5b-a1ec-38078b32d71c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ae318a-e335-4bb5-bf34-0855d61e98f7", "sighting_of_ref": "indicator--0f76536f-ced8-43a2-99b8-8c119ca639c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70b103f-454e-4db1-82a5-ee2baee1d49e", "sighting_of_ref": "indicator--1c53ba9d-609d-42b8-b0db-4cc34d0fa258", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e44ba3-8692-4546-9ad8-0fdc0884b09f", "sighting_of_ref": "indicator--a5a9fc14-2a2d-4439-a302-018a7420f823", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69994510-9300-49dd-b788-a99d91b06916", "sighting_of_ref": "indicator--544fca42-9ffa-43bb-a16b-8efc812bf756", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abde720-ffe4-4dac-b644-a221ed2bddb6", "sighting_of_ref": "indicator--b4a8a6bb-1b35-45ff-8153-ccfc390f1048", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0bdff5-fb0f-4e75-89a7-89c0971db51b", "sighting_of_ref": "indicator--434d540c-fa61-48f0-80b2-a4d4fa953fec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e490564a-0331-492a-9ae1-ff6e18804b75", "sighting_of_ref": "indicator--5109ca79-c4af-4247-a70c-fdada45313e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3540740b-c6d6-40dd-b409-79b8b0118bdf", "sighting_of_ref": "indicator--0267d950-67ec-4d2a-b5f2-b05e39426a66", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453ba2cb-644f-474c-85c2-da2766f9965d", "sighting_of_ref": "indicator--ccdc4298-3c93-4927-a26d-8e0c5950382a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd01e68-ae98-423d-8c68-5e3a00aef51d", "sighting_of_ref": "indicator--cd0db99e-7675-4c79-886d-27af4c94e210", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb4f0ab-334e-4150-86c3-5748191d978f", "sighting_of_ref": "indicator--16d00cf9-1a0a-4e08-95af-64231a11ba48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194a41ad-7827-408e-85f3-219b85273fb1", "sighting_of_ref": "indicator--8a828cc4-200f-49a2-b4fb-3e72c3074171", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b468758-c745-466e-bd4f-75b14637bc55", "sighting_of_ref": "indicator--5418728c-c459-4c94-8bcb-2c4a2f58f731", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee1ad06-80cc-4900-a7d3-58115ea4c889", "sighting_of_ref": "indicator--84c474c7-f29e-4029-8c9a-86458241d5ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96fbd5d-924e-4a6c-92f5-101fe01b5234", "sighting_of_ref": "indicator--bd44109c-937e-40b5-89f9-ccc5c825b83a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd69e8f9-eaa0-4531-9d99-e54122b6fcc2", "sighting_of_ref": "indicator--b0d4fbbd-584f-4c86-96b2-48f2bcd3d106", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6195b2-d40a-44d0-b159-67ee117cba32", "sighting_of_ref": "indicator--daabd826-c989-4df4-926b-d3fcdc151531", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64f8895-51df-40e4-904f-2597c891fe95", "sighting_of_ref": "indicator--6ac3331b-5492-4580-875e-d351faa7fd10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb664821-bbcf-4970-9d70-6056d94ec028", "sighting_of_ref": "indicator--aead7bce-a793-4d91-b960-e67656f892f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7006f8-aebc-4090-82d0-94a2abc7028f", "sighting_of_ref": "indicator--67629fde-04cf-4a3c-aaf7-899022314a99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4f4216-0577-4eb3-9034-9a74b240ba00", "sighting_of_ref": "indicator--d5d39b0b-1846-4977-902f-7e329e8fb20c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc623315-8299-4bd5-80a2-3b72033ecbce", "sighting_of_ref": "indicator--07c41b5a-0216-4c18-8464-03c598481f81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524c1299-25d9-4a50-bbc5-534844f5ab84", "sighting_of_ref": "indicator--c7711402-8da2-416b-a938-cd66b15f715f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162beb58-0d88-45ce-89e3-f1f7cf621fc1", "sighting_of_ref": "indicator--402f36ac-0587-4b4c-bcaf-62490ee2a76b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff790c5-3d22-4dc2-8703-f3c3edbc33e7", "sighting_of_ref": "indicator--06658086-c3cc-4d9f-b9e2-c6528973ddd5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e814a7be-ddd1-49b5-8381-9e1721c4fcb6", "sighting_of_ref": "indicator--35a81166-dbc9-470d-ac33-41ebabc7d835", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5126353e-b197-4d7e-a4d9-89bdf4da7851", "sighting_of_ref": "indicator--83c8696b-ab17-4703-bf98-734f5948c814", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add507ed-0838-417e-a44a-9981c827efb4", "sighting_of_ref": "indicator--52d06e86-f6d3-47d5-8cc7-175907e54020", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9716d080-c263-47f0-826f-3cf13c553505", "sighting_of_ref": "indicator--971b8af0-be2e-43cd-af17-ba6c50f01e8c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656d70a1-2543-406b-8bf6-d5150c5ee0a8", "sighting_of_ref": "indicator--1ab89a4a-9b3b-40e9-b2c0-9001d1653b2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfba7fb-f517-4587-9e05-e41c75cfcb92", "sighting_of_ref": "indicator--baeb6b85-a45b-48b6-ac7d-e86a7cd12578", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f90f54-94c7-4b2f-9e3a-2c89f97d1efc", "sighting_of_ref": "indicator--90771e5f-79b6-48b1-850a-d5f46410b728", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1f4e55-4a17-4fae-bd10-38430c66b3a2", "sighting_of_ref": "indicator--b347b629-139a-45ae-b6af-2c606c802386", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d0ff6f-b8d1-462b-bcfc-10532bf6d384", "sighting_of_ref": "indicator--9e7331a4-78f4-4764-8c7a-0bb75499f358", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5536f502-977a-43df-a371-1671237f7452", "sighting_of_ref": "indicator--93b4c1f8-922d-4601-a4db-f7146eba6d1b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc864ca-3147-48fd-8ca4-1a1df660e2d2", "sighting_of_ref": "indicator--213b56cb-e3f3-4b65-826b-215cfed0d94d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64adf0bc-0192-4055-bacf-2c6c390c0010", "sighting_of_ref": "indicator--89c6476a-b806-4699-a371-5448f2916cda", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a873856-23a0-40c2-8208-0745dd44b6ed", "sighting_of_ref": "indicator--5758f4a5-d8d1-46da-897d-8bd5460b4ff3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee911ff5-fd36-4f8c-adec-a50cacf3da16", "sighting_of_ref": "indicator--330d9ad6-afaa-480c-a687-6c54eba608f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2f342b-3230-4462-957a-6fc86ce409af", "sighting_of_ref": "indicator--95f2d882-0c46-4adb-be8d-5a644c5466f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49f84ba-f87a-4344-a362-49a6f70a752c", "sighting_of_ref": "indicator--ffe34480-31df-4127-afd1-701c61d550a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3ae529-74ac-4469-a4d6-1cddd06311f5", "sighting_of_ref": "indicator--973e01d7-1104-4cbb-95a2-63ca9d66a5ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81c3fc-00b7-4c50-87a2-c31d2185c7de", "sighting_of_ref": "indicator--314c5fe6-d034-4276-a37f-d7979905d047", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db3210e-e2f0-4fa4-8a64-6f1ba8a89059", "sighting_of_ref": "indicator--95ba32aa-82fe-4e1d-b8bf-b1e723247aa1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ce4cdd-a593-463e-9d01-03a9f2951714", "sighting_of_ref": "indicator--e85f97aa-448a-4313-9224-2e9c3378346f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bd142b-76be-4bba-8281-1ff424b5b2e9", "sighting_of_ref": "indicator--2e65a589-ea45-4d9d-af2f-6205c8c5551e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdd24f9-62eb-41c1-a1d7-d3daa50a6e32", "sighting_of_ref": "indicator--71e9c0a2-35b1-4a6b-be59-5db918992637", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669db9a3-4c0b-425d-a15d-d789d11cc03e", "sighting_of_ref": "indicator--430d6fff-7f86-4880-a2f1-8b2a9fef2071", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8e7f45-9830-48b6-9f18-86ad6833e1cd", "sighting_of_ref": "indicator--aaf07f85-5510-453a-bcc6-d83d6045219f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f76eaee-5db7-4d00-a1b0-e9b6d3f03ee3", "sighting_of_ref": "indicator--37a34745-cc28-4d53-888b-d5a6e46c151b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6b9d9a-3c44-421c-bd68-61bf03e7673d", "sighting_of_ref": "indicator--cd6fb3b3-68ea-4597-abd3-15a58472120c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f969b2c7-dfc3-4e9a-8493-8854b5b19c82", "sighting_of_ref": "indicator--c1bc26ba-39ae-463a-8511-9aabc2e0f48c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff6ae51-3681-413a-952c-13734ed21975", "sighting_of_ref": "indicator--bca4b286-9480-4506-9d1b-c89ec38a4cb4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19eb86bb-1f62-4e62-80d5-db15f9b295ad", "sighting_of_ref": "indicator--8248a46b-6590-4c27-a68b-9d0bf953de66", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218c8421-3ad1-4f15-a449-08c56a4b1c0a", "sighting_of_ref": "indicator--4c01ef60-747e-42ac-ac5d-9367e46ea00a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24dc9604-e48e-4673-9d39-490055376081", "sighting_of_ref": "indicator--e23b6edf-6e7a-4fbc-93f3-7b5e36c996f4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f25a0db-41c3-49a1-8937-3f3eb813370e", "sighting_of_ref": "indicator--b57a8f0d-bc10-4e6e-823f-30e211996e07", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77393185-e952-411b-bd71-027385f27a4b", "sighting_of_ref": "indicator--3ee1d0de-f2b8-4364-96c1-c340e8ff607a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0fc0f3-5378-4503-8937-5f3504524fcf", "sighting_of_ref": "indicator--e56743ec-e8ea-41d7-b3f1-c1a106505b08", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06073149-3573-4247-b7de-d5aeb15d1202", "sighting_of_ref": "indicator--49184c95-43a7-4af6-90ff-04e0172306e4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d057b3d-1ff3-45eb-a248-d005247fac95", "sighting_of_ref": "indicator--a7c29c41-5e07-4109-b3c6-a1620cab0d6d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cfe0bf-f0ef-4af5-bce5-02f7a4ca9e56", "sighting_of_ref": "indicator--0cf69f3c-b0a1-4d7f-9c19-a2fe0aac2f85", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d36bae0-5874-4825-9429-c6dafd3fc9c5", "sighting_of_ref": "indicator--9b428530-6955-48ee-aafb-7686a1aa68d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f16a87-ff64-4c7d-a21e-f8104d8eced6", "sighting_of_ref": "indicator--b53601d7-6880-42d0-9e60-6c1fbedeca64", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ee9d3c-41b5-4b71-beb4-38062226c8aa", "sighting_of_ref": "indicator--281c38c1-f811-42be-9126-f7689a679e8f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9d6c92-3560-4ed1-b88d-6da4fe561d7f", "sighting_of_ref": "indicator--37e1800f-caeb-4e89-9dbc-d93d2b21bac3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38524885-cca7-46eb-a288-b1fa155dd8da", "sighting_of_ref": "indicator--27167dac-fed9-4716-875e-3bb3027c0e50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576053f1-b658-4784-aabc-f3f037d7bcfa", "sighting_of_ref": "indicator--5e1eac1d-2f45-4cfe-aea9-d14185e0e1ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2274470b-af2f-4b93-a9d1-6de493a484cf", "sighting_of_ref": "indicator--a42239be-21fa-400a-940c-4017e2865c3f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535d6415-603b-4e05-adab-5c9af50cb12f", "sighting_of_ref": "indicator--87dc54bc-91f1-46c7-b26e-d724f266d556", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8b988e-48a9-4d17-9ba4-a772eeb44f36", "sighting_of_ref": "indicator--5f083277-586e-4c40-8041-070a17cf8277", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2897d3-882b-4c2d-8e5a-a9521bf5bb42", "sighting_of_ref": "indicator--673b6478-e7e2-4ca3-b297-f9c0183adccc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d1f42e-d0d7-476a-adc2-e391497bc779", "sighting_of_ref": "indicator--e47beb06-dc2e-425b-a06c-818d309f9c74", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d869a0c9-27b0-4599-b1ff-2e1b6487f72d", "sighting_of_ref": "indicator--39fc598e-3745-4c67-b6e2-387464064547", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46a6f1d-2e9f-44d2-b5d7-027efeacdff2", "sighting_of_ref": "indicator--5b6ed3a2-8e88-4226-a67f-0e702cfdda88", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f065a0-d3c7-478b-859e-1c77b877dffb", "sighting_of_ref": "indicator--99a725b3-e223-4cbd-8473-03c72daa42b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951c968a-b07e-4fd5-a0fe-808ba9db9338", "sighting_of_ref": "indicator--e0216d41-0698-4529-9bdc-71e900453941", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66afeea7-227f-4b6d-84f4-7248659cd06a", "sighting_of_ref": "indicator--97cc74d3-d65a-442a-97de-b8f79216f632", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe620ee-dc68-44d5-bf4c-3ded73fb60ba", "sighting_of_ref": "indicator--3acfa7f8-7d0c-40e9-ac56-01a5f9311ce8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94d7e5f-62c8-4307-a4f8-8213bb375d56", "sighting_of_ref": "indicator--c64c4645-3071-4c71-9b98-2badc2624e2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da8d1ae-1105-41ed-8b7f-b841167449d0", "sighting_of_ref": "indicator--b192223b-ce33-45b0-bea3-13df192136b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bae27b-5051-4869-82b2-35d37798d4b9", "sighting_of_ref": "indicator--5fe60725-ca95-450b-8d3d-cd83c5ee26d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e0b9f7-e465-4f0b-8e57-cc6e1be19f66", "sighting_of_ref": "indicator--b4d9a206-a39f-41a3-b47d-27dedd4c7810", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa39b51-84aa-4589-afb8-1ad9c2c1e73f", "sighting_of_ref": "indicator--4c371722-ac6c-422c-b3c8-0aa6a5c278fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11401b11-cf40-4699-a152-d19dab633af2", "sighting_of_ref": "indicator--21d38b54-ac48-408e-b103-5d4fc5387280", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e026486-f274-45d2-bc50-5b4504a4ef66", "sighting_of_ref": "indicator--52467857-a892-4112-8d98-6c082017b220", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba5ed38-f8e7-4f36-8d14-92b501f46192", "sighting_of_ref": "indicator--4b7b05fa-8496-4fb5-82f4-dcfbe9898705", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebfd857-6a5c-4d84-afc7-f3a167056c24", "sighting_of_ref": "indicator--aaef1359-4a05-4a34-8746-6bcfb6136537", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ccc1ec-6b74-48c7-9802-38f7cb4d2c7e", "sighting_of_ref": "indicator--7363cdf9-67d6-4447-a2e2-a32b560ebe5f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e95f9e-a899-4820-9682-39c791da39b1", "sighting_of_ref": "indicator--3f3d764f-5e74-4444-8519-177a63efb747", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307d7d7c-8e53-43b9-bb48-c8a6086d3305", "sighting_of_ref": "indicator--80fc6070-f727-46a6-93c9-b5ba611117d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0804a71-4c65-457e-9c54-c64302394ca2", "sighting_of_ref": "indicator--123dd7b7-1e86-4a2a-8414-f487921b7531", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9efbf0-a418-4cb6-81d7-1a064dfb9a0a", "sighting_of_ref": "indicator--aa0eff4a-6663-4202-9621-d8c946b8d58f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c6d8b6-7528-4a6a-b176-976b79cf9dab", "sighting_of_ref": "indicator--2911fd45-777c-4b1e-864f-b8505263e6e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73f6613-0fd3-4e1e-a25c-fe5131af4644", "sighting_of_ref": "indicator--ce785155-3b46-4d90-aa0d-31988d19b827", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b81d066-7e21-4a5a-902f-1e871177cb95", "sighting_of_ref": "indicator--6a67a213-65a6-4c00-bdce-58e786e3c244", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f7fa9e-86ac-4af3-ba0a-f65124d76747", "sighting_of_ref": "indicator--3296228d-6951-48a9-bc08-bae61ef78feb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b753ca1d-029b-49cb-b9a5-da4a160bd664", "sighting_of_ref": "indicator--fc787810-b631-4a09-b678-f2a5994eeb80", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f16201-e942-46cc-ab9f-0d130e1f6f19", "sighting_of_ref": "indicator--497f29f8-fc69-4333-a409-e04370e100d7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437f3131-39a1-43ad-802b-e4eb2e9f7f0e", "sighting_of_ref": "indicator--3f34dfbf-3c21-48e7-bded-8ab9ef0960e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bebed85-6686-45e7-b96e-093fc9ec7258", "sighting_of_ref": "indicator--a2753f71-ccd0-4527-b30e-a853deb94418", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d19a7a-29bf-4e3b-a931-51932a0eaaed", "sighting_of_ref": "indicator--bd12f3ab-9e64-4bdf-895b-6d9536b05733", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a600298-7f1b-4c3b-a106-c769a7a93942", "sighting_of_ref": "indicator--ddea8494-9498-46f4-ac7d-fb6e2e6572ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019f615e-fbd3-452b-b24f-704692ac8b67", "sighting_of_ref": "indicator--1f6e9492-bd28-41e2-b4b9-28104bb97677", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ead23c6-0e0d-4acb-b273-9e7cc2558440", "sighting_of_ref": "indicator--8dab4e42-7fac-448d-b6ac-a412f8121142", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c2bb98-20c1-457e-904c-b6f2dda62610", "sighting_of_ref": "indicator--b1a33e7f-57f7-46e4-bc98-ad0d59470557", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10c5d78-a3e8-4b8c-800c-7576038ce017", "sighting_of_ref": "indicator--9defb1ab-632b-4a45-b966-f69b52f3f6ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0493add-3a0b-4783-a13f-b0bcd6db2397", "sighting_of_ref": "indicator--ef52e4b4-1a67-4c07-9244-49918257e0db", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2298fe9f-ba49-4dee-99d7-f46c1c8de6f2", "sighting_of_ref": "indicator--03d43e24-eb54-4cfb-b374-2aa72c5b9cb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc0d2d3-7f47-4875-8614-1dd0cef214dc", "sighting_of_ref": "indicator--18254991-f794-470f-90ae-cfefe691f109", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfda3e4-348d-49c8-9fc3-dc9cf48c8dcb", "sighting_of_ref": "indicator--8b80f12c-e7cc-4b06-9d57-5ab0cfe9b335", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae6816c-5b7a-4499-b089-88d9fc592596", "sighting_of_ref": "indicator--25d8a28e-c894-4372-b987-22205b3be29b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a65c231-1f77-4f63-bf17-24319a19a604", "sighting_of_ref": "indicator--9c4efa04-37ac-4bb4-9697-959713ed9a08", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c10ced-f074-4b11-8433-6c39ed9b7177", "sighting_of_ref": "indicator--774b82a5-55be-46bc-9f46-346756b2bfb2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f468e4-3336-4e17-9942-60bb5bf9aead", "sighting_of_ref": "indicator--8aed9372-dd4b-4f68-a6be-49f2970734df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c67f60-0b0b-4792-b692-70e174b8bc34", "sighting_of_ref": "indicator--9a22e91e-7e3a-4510-8913-602f75532f7c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d796dd-fa69-48ff-a300-797a8f0632c7", "sighting_of_ref": "indicator--f234fc2e-bed4-4c22-886f-73c44a8addd4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3949703f-f222-4503-877e-cff2bc6add3d", "sighting_of_ref": "indicator--122caff6-d050-4068-a420-d235c1f7e8ef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bb428c-1b86-48bb-938d-73e5ba303478", "sighting_of_ref": "indicator--8066f339-d194-4d9c-8504-91e9965d7a2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7052a97d-0119-405b-9e43-2e9479eb766b", "sighting_of_ref": "indicator--6682212a-034e-4857-9124-e0adb16aa02a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a68add-0cac-456b-a138-7690d38d7380", "sighting_of_ref": "indicator--fff370d2-a34d-4ba8-a04b-4580205b55b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6af421-e100-4c09-b239-0621ba245bc6", "sighting_of_ref": "indicator--5eb62f45-31cb-4aa3-bf73-20be568a5431", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89c1505-8349-4994-ac70-672243ab5ffa", "sighting_of_ref": "indicator--d6052693-b415-4a31-b9cf-2c3da286c597", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b84f976-7e4c-4790-aecc-034fd05f9fa0", "sighting_of_ref": "indicator--18f5bf5b-1604-4d3c-b8f7-1f328205a1f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde6e0ec-77a8-44d6-8e77-a78a3898d84a", "sighting_of_ref": "indicator--aa8e5774-753a-4002-845a-07702d62840b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a824f31e-f8da-4920-91ab-eb48c4e9ed9d", "sighting_of_ref": "indicator--3b0ea3e3-7dcb-45a6-8b3c-c1aae9f7c2ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290850c2-7a9e-4ab3-9a41-68ee97c5c610", "sighting_of_ref": "indicator--5a467a22-b5fb-4ff8-9438-d606b61d81b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1ca290-b6a4-42ae-9784-9c43e1a3f018", "sighting_of_ref": "indicator--b21dcf23-c1a0-4b23-8cf6-872bd7dcaa9d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e94437a-715b-4b10-b356-0c9d0dda64e8", "sighting_of_ref": "indicator--3e796f4a-1ba7-4936-ae09-4cdfd56c41ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf4f3dd-d57e-45a3-99b8-9c33552d4cf2", "sighting_of_ref": "indicator--4e2a803a-54ff-4fff-bd22-74344cfaf573", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1eead88-7e8c-4737-981a-f728857e3096", "sighting_of_ref": "indicator--527e1e0f-2710-4b93-9ad3-db883eadf281", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e46465e-2834-497f-b8e6-2a49f443fe08", "sighting_of_ref": "indicator--18a2a02a-f163-4463-9d9d-c5f16f2e15e5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2480c8-fb03-4263-b30b-87450fedc4ae", "sighting_of_ref": "indicator--34cea952-a1db-41a1-8a22-b840d09aac5c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2795264-7b6a-459c-abb7-b399c7b20cb8", "sighting_of_ref": "indicator--28cd639d-d8c5-46fb-8d50-2671332ebea2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dde4faa-5f1b-4a86-932d-f718cf1a82ac", "sighting_of_ref": "indicator--a1890038-710d-4450-b962-7fee4f1b720d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175a5e56-792e-4b77-a225-141ddd65b9e7", "sighting_of_ref": "indicator--132931ca-2995-444a-819e-a733f1e6e70e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22e7214-6bdd-4e7e-9992-71d093d97a4f", "sighting_of_ref": "indicator--04109fa2-62b9-4112-aa15-854363cbf6d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c039d90-2f26-4bcd-98b9-cffdd5046785", "sighting_of_ref": "indicator--770f94cf-2b49-48ee-8217-a6b01b39d0df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d0f6a9-de72-449b-84c6-ac52f6567285", "sighting_of_ref": "indicator--5ae36a58-2310-434c-9d3d-42af9ebeedf1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2cbfc5-1fee-4bed-9083-c247338585b0", "sighting_of_ref": "indicator--c6efba6b-5ddd-4ce1-95d8-1578a91a4a10", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a5ea70-30c5-4f4e-bf85-d3d705ac4d64", "sighting_of_ref": "indicator--9ce44d19-fe0f-4964-8ce2-a6ab292a3734", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62e8fd0-e6a0-4368-9fc0-39342da4b9fc", "sighting_of_ref": "indicator--d05beb43-9509-4b3b-9ef1-eb35fa71ec0e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbaea2bc-84a4-4429-9aa2-2571c61cc47a", "sighting_of_ref": "indicator--6f420aa8-a400-4c97-a911-8d75919c0a2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35bd8e3-e07f-43d7-a299-74155343560f", "sighting_of_ref": "indicator--aa528f12-1074-4fa8-ac9a-18100069531e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4a661b-2f3a-43fd-91b4-7702c9093074", "sighting_of_ref": "indicator--50265bc3-38a7-4d1b-892c-bdd07a65917c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b03025-2ddd-4c6d-bda3-331ad3c31257", "sighting_of_ref": "indicator--43d5401f-8746-43ad-9dea-ba616c61fd89", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6e12cf-dc3a-4e5f-9359-fb2e87a47284", "sighting_of_ref": "indicator--626c205d-96c6-43de-988f-253d4a2bb532", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ea6556-81a1-4a67-8c27-9636428cd989", "sighting_of_ref": "indicator--c8f07835-20d0-4672-9402-dfebdc30dc07", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a5f904-d54d-41a0-bd0c-ea2c605d1e90", "sighting_of_ref": "indicator--5f483cbd-783d-4c1c-a4f9-7a9b9cf5392d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe416ed-2169-43cb-b593-294288b85d15", "sighting_of_ref": "indicator--f6239855-4508-4fca-97d4-f464b0aadac5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1125b6d-6d3a-4732-8bfd-a77cb60d4030", "sighting_of_ref": "indicator--45ba3ca1-99a2-4a83-ba59-770d56957e0a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25059bc-0321-4ef3-b629-652790ba5784", "sighting_of_ref": "indicator--a15dfd85-a87c-4b86-87a9-edf0286be71d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8a8bdd-ef4e-4bb3-a9be-dcfe9b58a3a5", "sighting_of_ref": "indicator--4aac389f-69bf-48e6-b87e-a1eab94699d8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1396878-56cb-4723-8acd-d0b25be36e09", "sighting_of_ref": "indicator--0dde3c1b-aa89-43ee-888c-de6d95bf9990", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92369a2-114b-4e32-a929-e4c265d1a382", "sighting_of_ref": "indicator--96247877-ae3f-472c-b714-b8888cb1498e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac68b259-5566-4f3a-a865-741a573db2f2", "sighting_of_ref": "indicator--68207997-135e-40e5-bd94-b88514bbfdf0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33360057-0364-485f-a3e6-9472763a805c", "sighting_of_ref": "indicator--d8859355-1a1d-47e2-a6e2-1f37d5683401", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a68a04-1804-4d73-b4c0-5e1ec088e016", "sighting_of_ref": "indicator--dfd78d04-02e0-4b68-8c50-d10a8f214ed8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da80ff92-ac73-4947-9a7e-fe0691985c9e", "sighting_of_ref": "indicator--f34f8cef-f563-45f0-af50-e35446025538", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe40888-5082-486a-bc39-43cb4d961fb1", "sighting_of_ref": "indicator--eebec42d-891e-45c9-ae4b-c72093b11fe6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cde1b0b-d2e5-41ea-ba9c-4282979556fe", "sighting_of_ref": "indicator--8a0d241d-b5fc-424a-af31-2f8cbc1602ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a181b1ad-e616-4b66-ae65-c34514c6ebef", "sighting_of_ref": "indicator--b2234e54-ae9b-47bf-a4fc-54f1cad90300", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753cb884-bed4-4226-b97f-752065ab977c", "sighting_of_ref": "indicator--bfd19c7f-6d72-4ebe-9cdb-473c7247e1f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb798ad1-f6ca-4f53-99dd-f5ec25c6dd94", "sighting_of_ref": "indicator--6e379809-cf73-4aaf-b11f-abe94ebeeacc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9f4a72-c237-46aa-9e96-f1d034a1f2cb", "sighting_of_ref": "indicator--6e379809-cf73-4aaf-b11f-abe94ebeeacc", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3184e9d2-16c5-4f8e-b562-f867235ed3bb", "sighting_of_ref": "indicator--d7415e3b-2a86-4867-9667-d5f0d3e28e04", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9352b8-1811-47f7-9181-54bc09eade07", "sighting_of_ref": "indicator--865216fa-3b84-42a5-972a-33479b731510", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414dde0a-3d59-4e8a-8040-9b1d87ba9f3a", "sighting_of_ref": "indicator--5de3a909-65fd-4e73-b3b7-15fe30b34e88", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d62eeb-96f9-4f07-a3da-bd1511a3dc06", "sighting_of_ref": "indicator--b90f1293-ca38-4743-8213-3d12de3cbcab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9e0d1b-75fe-4e44-b22c-acb2929ec400", "sighting_of_ref": "indicator--90f5216a-bf51-4f9b-a46d-861082a8c59c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6dd829-5306-4c0f-a2ea-2d78321f044b", "sighting_of_ref": "indicator--011bed32-377d-4b60-8614-d27406a1ba4f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e4821f-eb32-4692-88f6-f6d4769796e2", "sighting_of_ref": "indicator--1036ec64-739f-4807-9dc0-0576b81b5afd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7ec66f-cad0-4e79-a144-b089350ddcff", "sighting_of_ref": "indicator--feb55143-9e8b-470c-83ff-e7e9b1f6555f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea297a9-7758-41b1-88d8-446412463931", "sighting_of_ref": "indicator--9daaaa99-590d-41b1-90e2-011c8e22e825", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ef6186-4f46-436a-a6f4-f35d316fdc48", "sighting_of_ref": "indicator--c334489f-4f87-4d08-aec7-86eff3bddf81", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e47a05-eb73-42f6-ab37-3c227125502a", "sighting_of_ref": "indicator--9ac39df6-e55f-4539-8661-66c99dff1926", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a081671f-44e8-486e-b8ba-ff8b1b411a7a", "sighting_of_ref": "indicator--ea2c2218-a2e4-4ab8-aad9-b171afd76b30", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9647c1-5a0c-4f87-8190-33dced8ceaed", "sighting_of_ref": "indicator--6a5ccaee-6d00-4295-85e9-7c8382443011", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d91b81-0a06-463b-9fd0-6819b6404343", "sighting_of_ref": "indicator--1a22a747-c4ff-4c08-b353-e24ea3d5e3d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01357799-6107-4411-af85-dffa8b3e8084", "sighting_of_ref": "indicator--2d1532a4-fad3-4b7f-ae03-0c1e91d6813a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69ac9c5-b801-4d48-893a-f024b4b00986", "sighting_of_ref": "indicator--85819934-92f8-4af3-8d55-7907fce8427e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb20db25-892c-4fa0-8b61-5fce862f6f29", "sighting_of_ref": "indicator--1435a0c2-dfe3-4af0-a0e1-3efe8f7eaa1f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de23aa5-e8f1-4724-aff4-5f7b7fd31c48", "sighting_of_ref": "indicator--e421d71f-a2e0-4b4d-9426-01f2638cb4af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f382ffa1-816e-4bf7-8961-f5a70754d754", "sighting_of_ref": "indicator--111ede45-02e0-4db7-9426-fdbd5590be4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7c3183-f5d9-4e05-a363-2a505ad59d01", "sighting_of_ref": "indicator--f861fdb3-fcd6-44c6-be91-158164f2a0dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4274f821-15eb-4ac1-8ddb-86bf9554c105", "sighting_of_ref": "indicator--a23d32d1-f75b-44a9-80c5-b6dad1830b53", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8200eb-23e3-42f4-ba84-e200f224b75c", "sighting_of_ref": "indicator--e8fbcfbc-8592-4b29-9f75-100859e060ae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e5c6f0-16e8-4602-8369-51248d5580ca", "sighting_of_ref": "indicator--d31adb63-b927-4fe5-ab07-0edaa809a79a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7750c68-a414-4ee7-be06-e7b684650574", "sighting_of_ref": "indicator--c853976d-46ad-4b9d-918e-65e1d9c64d90", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d0fba7-ec2e-479a-8fe3-3a89bced77c7", "sighting_of_ref": "indicator--707f977d-ef9f-448c-b77d-a08065379991", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e7fad7-1dc4-48df-ac3e-e4af4e9c4bfc", "sighting_of_ref": "indicator--8811c1d3-4aae-4c8b-b482-d78d4c183a0a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5754c578-c9b0-4241-8892-8513a3e75453", "sighting_of_ref": "indicator--2dccf4c6-c49a-4f8f-b2d0-82f1bbf0a342", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be5e8f8-4fbf-4f6a-a9bd-eb0d4b7f8ed5", "sighting_of_ref": "indicator--92cee3f1-1cf0-4585-827c-20aadb3b63cb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498f5928-7c47-4bf8-adaf-b11fff2ccccb", "sighting_of_ref": "indicator--cdc4080d-bdcc-4f4f-80c2-7d5e53980c56", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa01ea4b-9452-4d61-91f8-e0e1b61b0a37", "sighting_of_ref": "indicator--dc83c7ff-9ba7-4176-b941-56363b988d2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bc3b11-4413-47d5-89cb-c30ebf4093ec", "sighting_of_ref": "indicator--86caf7c2-2da3-41a2-b8fd-c7e38376b415", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5716e6-e520-4df6-912e-15fc65381fda", "sighting_of_ref": "indicator--4ef4a2d2-15ae-4fb8-993c-9f5316511233", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170b526d-8965-4e0c-8628-341d5db0ea8b", "sighting_of_ref": "indicator--5baa9dc4-349f-4b22-8f8a-596144f49b1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea46380a-5a6d-4686-aa14-64e5b2e5071c", "sighting_of_ref": "indicator--40a09398-be74-4cac-aee2-850034db5551", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862b70d6-e715-4f91-a776-5174f3654e26", "sighting_of_ref": "indicator--be0800f2-b6b9-4b94-bf24-e1e881156f42", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846ba887-7bea-4b6c-8900-88c285d6dfb0", "sighting_of_ref": "indicator--8c67c924-14c1-4724-9194-52bc23ed66fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9ed36a-793b-47ee-9204-a76f8603f6c0", "sighting_of_ref": "indicator--bc2bfb65-d9a6-4412-bb9b-10e287500d6f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3eaaf9-f71f-4a7c-ba0b-b625796fa96f", "sighting_of_ref": "indicator--621b6a3d-e417-4cd6-92d9-58178fcb98f4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8de5eee-666d-4c4c-8a98-c216c28b935f", "sighting_of_ref": "indicator--9f06d20a-5203-4070-85cb-f4bd73fb913e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77e490f-b618-429d-a479-d3377e75db98", "sighting_of_ref": "indicator--2f3b1fdd-7a86-4859-97f6-82a0d3769f62", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83bdd17-0736-4f86-95ae-e8e1861e406f", "sighting_of_ref": "indicator--f16fc9a3-6289-4b99-9bb5-f14259743a3c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c86d7c-4caa-4815-81d1-badbff93d459", "sighting_of_ref": "indicator--a93885b6-b436-45a7-b20d-811f05426e64", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfbed0b-c6bb-45bf-8577-ed97bb6db1c8", "sighting_of_ref": "indicator--94a502fb-ca11-4c36-9732-03826edb27fa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b7c8f7-c00d-433f-bdee-4679b0506182", "sighting_of_ref": "indicator--d5324b29-1e37-46a3-9702-b4622a891690", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a6b116-cf71-40d6-bac6-13e700e310cd", "sighting_of_ref": "indicator--4542b182-2039-4042-a1db-d3d2ad67fe97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f242756a-d1b4-4ea7-806d-37685211ca07", "sighting_of_ref": "indicator--3515237b-55ac-478a-aaf9-c295a23a06a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc75a57-5c16-4cc3-88ac-58b3495fbf68", "sighting_of_ref": "indicator--54fc48a1-e62f-45a4-b0aa-d1aa16ad81c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13714621-dedb-475e-ab62-c870d0639e64", "sighting_of_ref": "indicator--9ea81aec-edc4-4eb0-b1e3-e1c2017d76f5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655311d1-b87e-48bd-9681-a19755f97778", "sighting_of_ref": "indicator--7318512b-a2c7-40bb-a83f-6fe3fa460caf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cb891d-ad05-4c9f-b3be-be28bfb358f5", "sighting_of_ref": "indicator--2cd627c5-deb1-4ab5-bcf4-a47b2f486baa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3705a8d-d1af-4d2e-91b9-8877b387cac3", "sighting_of_ref": "indicator--342764d7-3ae9-4513-abc0-82191fa7289c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44b2cb1-e4b4-4ca4-89fd-0132b17dd664", "sighting_of_ref": "indicator--1dea126e-507e-4945-b59a-ec1450d45c77", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ae3b7e-e9be-49cc-acc0-ce11d98456e2", "sighting_of_ref": "indicator--f7a6eb55-5fbc-4667-81be-34c4c6165b49", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e7862f-cc86-4567-9f4b-19f7ed4ea0c7", "sighting_of_ref": "indicator--b582fb07-7b75-468e-b686-efae2e3599e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff95ce60-062f-4ab8-9043-4a6bdf445008", "sighting_of_ref": "indicator--9749c6d6-23e1-4f68-9ac6-379ab9212b86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0308ed18-2bba-4d7d-a6b7-6ae3eace3266", "sighting_of_ref": "indicator--119a0bb2-d487-4fa7-940a-157f9f1bcbd7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71610ae6-1d8a-4c84-a60f-a93f3d8f5161", "sighting_of_ref": "indicator--1f2c7a51-4a86-49fb-ab9e-04fadd739f2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9376eb-8bed-4c01-a86a-6e3a3ad99480", "sighting_of_ref": "indicator--513efd18-5bfa-473d-88d3-e987d67f8f9d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81c11c3-2e69-475c-80cd-be6ffa2d03fd", "sighting_of_ref": "indicator--81fc73fc-29d4-485b-baf1-59403fc0cc2c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d488a97f-0f74-42ca-bff9-03833d4d8a93", "sighting_of_ref": "indicator--5321fa2c-e5e1-4ef4-9ff3-2cdf7b169166", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6f33f2-94a8-41ab-90e2-2adfb383d04d", "sighting_of_ref": "indicator--6866970d-818e-4bc4-8e49-df4628c06a9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8752f443-eaa0-4d2e-b05a-e373dd7b10b9", "sighting_of_ref": "indicator--e8397a59-4269-480c-8404-c9e0390804c7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c318ff-74c8-435d-b758-cd5f0b9f64e0", "sighting_of_ref": "indicator--c01f0972-9e1c-42fe-a762-252ffd14cdd7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1626cc12-d2d2-4462-8f6e-be706b58c5b2", "sighting_of_ref": "indicator--6b2ebb60-b1ca-4337-be07-630795cb0da5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a519431-865a-4607-afa9-6afcf0b76821", "sighting_of_ref": "indicator--3cf04891-9071-4eb8-9b4e-c5e8cbbc9ade", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40545208-488e-4616-9b63-fafe9a12ceef", "sighting_of_ref": "indicator--31645939-d578-4b26-9ca4-239f51514555", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555b7a2f-3183-499c-b4b7-a58bb14acb44", "sighting_of_ref": "indicator--0c817cac-d23c-40fd-a380-59955745a706", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7757fe56-76d3-49c5-86a7-4bda321e94be", "sighting_of_ref": "indicator--e599d6a8-8489-472d-87ed-56b480c62f65", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7886dbf-1e0a-45a8-8767-a46fbfe9ae5c", "sighting_of_ref": "indicator--83c3b19c-715d-4375-a44b-737a4010f495", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c81dbf-7aa6-4d52-ad61-f9066e0284b5", "sighting_of_ref": "indicator--c623ab17-ba38-4b35-97d2-2acc00c32350", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e06253-83b5-4129-9ead-57d8b9691f81", "sighting_of_ref": "indicator--ae1040bb-2c09-4f76-a218-f66ee7a1a46e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380b2b50-d2bb-41ec-b6ab-b983d396efb7", "sighting_of_ref": "indicator--f7204bd8-031b-4055-95df-bf66ffd67329", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5889c81-83d7-4be8-8362-7b22a1508b02", "sighting_of_ref": "indicator--08a53d3c-6d73-4c40-aab4-0bfc9613de53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033877ce-4bfa-47dc-98a4-6f02dea51408", "sighting_of_ref": "indicator--1c24079c-44ed-487c-b7d7-7eb1da56f8be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d0e44a-4e54-4b80-8bc3-77b01ac27e4a", "sighting_of_ref": "indicator--688dea5d-f410-449d-9818-60bfaea4eb90", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0cc699-1c40-458a-b5d4-e23fea95670a", "sighting_of_ref": "indicator--5d62edb2-0b2f-4a74-8396-bfce97703507", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1216c390-7c8e-4127-8046-792de3d40fa2", "sighting_of_ref": "indicator--3539078f-8b25-4721-ac68-e2ec7c4bafc5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2d4d1b-7c02-4747-9b4f-abebd1ef7e77", "sighting_of_ref": "indicator--1cce0be5-d27d-4bfb-87d9-25f2c3555d97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74398dfb-994a-4b06-80f9-e61b0b0a5c11", "sighting_of_ref": "indicator--c3e193cb-576c-4f57-ac65-cacd4f405657", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff0c692-969b-4281-9717-4178c1de56ea", "sighting_of_ref": "indicator--4f0b93f7-9360-4413-934c-4c678d9ae845", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e1d14b-355f-4367-9b3b-3ef1eae92897", "sighting_of_ref": "indicator--9ace36e4-84c6-40d3-ba50-c07ab3f3b369", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845832a0-5c64-4cee-aa39-75e3ef261d70", "sighting_of_ref": "indicator--cef4800a-3392-47db-b453-f3c01e3b964e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce32c7c6-932d-4041-bddf-c0d99fd90bb5", "sighting_of_ref": "indicator--9694877b-dcd9-4f5e-b56d-3b6f86b8c8cd", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0389c00e-d695-4bf4-bc4d-4ff1198f5050", "sighting_of_ref": "indicator--e82746f0-66bc-4711-91e3-8aa8be3cd153", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e939fd69-5ebd-4ef2-beba-9977f4c2eba9", "sighting_of_ref": "indicator--5dfc68bb-6c5a-4a8e-ab79-09cd1864dbc3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69992176-459c-4ebb-90f7-040b72ff2d85", "sighting_of_ref": "indicator--5a75f4c1-8c34-46e1-982a-dd7d3572ebf5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5bcdbc-8392-4091-a073-394a5b53e98a", "sighting_of_ref": "indicator--253a6d36-9e40-451a-b4d8-33d7ec058fa6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db522271-5aa4-4e9c-8228-4385b9381402", "sighting_of_ref": "indicator--ce4e1a36-4a80-4cd2-a96c-48a915e20880", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d55b49-82b9-4875-a3fc-9ebf2dbe7fa9", "sighting_of_ref": "indicator--4258b74c-16a0-4a37-9b86-f00f579971ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5e3e5a-fdb1-4949-9fc0-0c5df758ae2a", "sighting_of_ref": "indicator--17e5d428-ce06-45c1-b8d1-db1c24315d02", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6086758-9667-4fc3-9115-04cd57c2d2e1", "sighting_of_ref": "indicator--f9eb39cf-221d-4aa8-a95d-a9a2ce3f0219", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87d962a-b442-4852-a79a-5f4e7fb9fdc9", "sighting_of_ref": "indicator--cdebffe7-2837-4f7a-b987-13b0ff8e2c79", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21975142-a9f5-44d7-99ce-0ed65da2f6b1", "sighting_of_ref": "indicator--aad6c6be-6c9b-4901-a2ca-a22c243ce58c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecbf25d-c0b5-4e2e-98c9-a6daaffda1ba", "sighting_of_ref": "indicator--981b52bb-b09b-4217-aed6-c54c1ba755db", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e64e5b-6c76-4e9d-98ba-a365b297bfa8", "sighting_of_ref": "indicator--7e0693fd-7569-460c-8b80-64be70030a0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d546d949-eae7-4320-9027-5b35467dc6f7", "sighting_of_ref": "indicator--f1e5d0f5-9eea-4230-88b0-b54f984c12fd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce4da4c-3b14-48ac-ae35-85e5e4a19959", "sighting_of_ref": "indicator--ed961296-fd9d-4cb9-b7f6-3a9d594c0fbb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26222ea5-5888-4e24-bfe5-574316fcec85", "sighting_of_ref": "indicator--f52e9447-06bc-46b1-8d84-900f859d9c64", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66de0569-9b0b-401a-b0b9-51866859aa74", "sighting_of_ref": "indicator--b56d62e7-b7cb-4dec-860e-a1eeb34ac201", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acef0928-0271-4003-8978-ebd22e233331", "sighting_of_ref": "indicator--3dc5cb79-4671-4d6c-a7b6-dacb9e532bb1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c915d0b-386f-4212-9053-cbaec8bbd728", "sighting_of_ref": "indicator--9597d605-fe7d-4756-b489-1d4c82772af8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c698fa2-d9da-4e3e-a177-ad652a3254a5", "sighting_of_ref": "indicator--a7f1b7c2-0530-4f79-b217-eddbdb43f1fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38708531-d109-4de0-bfef-1e7d3689bbce", "sighting_of_ref": "indicator--eaa709a0-8866-4843-a611-56efb1f1e6b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f805c250-22cd-48da-ad2b-1d44ac97da3d", "sighting_of_ref": "indicator--13139d69-c79d-4ae4-ab9c-3d645e3572c6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb1987d-cbe1-469a-a72a-4840b7cb1ba1", "sighting_of_ref": "indicator--22bcc5b9-7e6b-4607-a80a-c2b67a6672bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d5a200-249b-4b6b-89b2-632ce4e54379", "sighting_of_ref": "indicator--35fd0b46-d70b-4ccf-b4c2-daf8ba9edd41", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60c053e-1f79-4275-95ce-1c3db7d983e0", "sighting_of_ref": "indicator--66f163af-fd0f-4aae-b479-29ab4c8ec7a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4ca692-15d0-4f31-90f9-e76c25014821", "sighting_of_ref": "indicator--e9287fbc-d56d-41e7-af61-a122495d3329", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195a38a9-6a69-4472-ab00-4c6f0aa0f5ed", "sighting_of_ref": "indicator--6fdffdbd-3fda-4235-92f1-8d532cede3d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dea539b-0c0f-45b4-b02e-bfbfbaf691c3", "sighting_of_ref": "indicator--f475d417-bec7-4930-a96d-823c3319ff2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23bac2f-dfb1-48ad-a2fa-090342d7a4be", "sighting_of_ref": "indicator--28e71bdd-27e0-495a-89a0-e27e5001d4e6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afbf727-0605-44cb-aeda-4ec886a3e1a3", "sighting_of_ref": "indicator--ca22c054-1ff9-4e79-b014-93c3bbc93f22", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dfa35b-f213-4806-a19e-fdf14a48d1f3", "sighting_of_ref": "indicator--78c3bf2a-326c-4df6-8edd-1235d77ce1dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3085e78-ea0a-401d-9d9d-f0e6aa3071bd", "sighting_of_ref": "indicator--2bd48d70-7215-4225-96e2-212e1e43828e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830590a1-f684-44a8-bf3a-a3e177de140b", "sighting_of_ref": "indicator--2bd48d70-7215-4225-96e2-212e1e43828e", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cee6f8e-a16f-4c7a-a5d8-46bec77b08be", "sighting_of_ref": "indicator--5e83c1ee-ba29-4f56-96b2-854bf4ea84fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2866ce3-89b8-4eab-ac3c-243785eee908", "sighting_of_ref": "indicator--d1a278d4-c391-4eba-b7d3-2668e3d4f2ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5bbded-46ff-4057-af5e-c66496532675", "sighting_of_ref": "indicator--5a69d54d-f5ec-402f-a61c-6427a037bc70", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f431bfc4-8054-46e3-8f74-32393a3b3b93", "sighting_of_ref": "indicator--7224681e-7dc7-4871-a8c2-d352c65301f2", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd63e4ac-f36b-4c20-9e94-20b3656668f4", "sighting_of_ref": "indicator--ae239c11-5798-48ca-a9f6-7fc21202a894", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c65b11-cd60-40b7-a4b5-259f8f96bb28", "sighting_of_ref": "indicator--e86fa7b4-c941-46e4-b32d-f3de112609e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0698664-cb56-4795-9a80-0e97a94641fb", "sighting_of_ref": "indicator--fd7c2648-d729-4e67-bcee-3aa88501546c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85607e23-e552-45e5-92a8-eef336ff23c8", "sighting_of_ref": "indicator--9cd0e6e1-9116-48b9-a1ac-40c465f44def", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d5fda0-6462-4a32-bcc3-8ac9481a3027", "sighting_of_ref": "indicator--6f30eef5-c631-4d1b-b3f8-b0231e99d81f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac347d30-7df4-422c-bb00-e8bfa8aa80da", "sighting_of_ref": "indicator--d5a0097e-ed94-44d4-a4b5-dc3a0d3e0721", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cccb3e5-80b1-4f8b-862f-c5f3e19a36c4", "sighting_of_ref": "indicator--d5db14e0-0e85-4d1e-9049-8d8647555675", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f2f0c1-3942-4640-9fd6-84b565f15b0d", "sighting_of_ref": "indicator--8affe076-a2f1-4b0f-a5d5-4624a93b2048", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e48eb6c-2f75-4c31-a076-b43a0449ff22", "sighting_of_ref": "indicator--6c1082fa-674e-45b5-8b32-d3e6fd3f6638", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb5f048-58e6-4d32-b4f7-cab10f09d58c", "sighting_of_ref": "indicator--37eb89f6-201d-472f-885d-6f494cea8a55", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a1ee52-2206-4494-8878-67852bfc0d8c", "sighting_of_ref": "indicator--a2116ade-6e45-4e4f-90ba-01acf556780e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce42f7f-4c77-4b45-aaa7-606d5d786b70", "sighting_of_ref": "indicator--a2116ade-6e45-4e4f-90ba-01acf556780e", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24fb64e-0efb-4ace-9391-44ccd202599d", "sighting_of_ref": "indicator--a2116ade-6e45-4e4f-90ba-01acf556780e", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587a4aa8-5740-45f0-baa8-9f6f60d226d5", "sighting_of_ref": "indicator--30e6d0e3-f975-47d9-a5a2-05ba7da82f20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87a4930-552a-4032-940a-7fb02008109a", "sighting_of_ref": "indicator--98912067-b5f8-4532-a93b-69c140c45581", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6f0958-1892-4240-b978-3d93f4444a46", "sighting_of_ref": "indicator--597084ff-2d64-48cb-b9cb-abc29c5cddfc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c6155a-f499-4dfe-908a-df1f4d45d197", "sighting_of_ref": "indicator--4c529926-dcf6-4565-933a-636add0a87f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cd6fe5-bcc9-4944-aacb-a5af6b2fcf8e", "sighting_of_ref": "indicator--70d1964f-6863-4c32-9748-5513bede9529", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24427cd0-7153-4456-9350-bd5063d84b65", "sighting_of_ref": "indicator--52e3097f-dc4d-45e2-ae02-12bf8ea3ca4f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb844072-e776-45c2-abb6-d604d026ce49", "sighting_of_ref": "indicator--dca43be9-b0fd-454c-a61f-c2b12e51140e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f993c4-cdcb-4482-9cf4-149c8bbb8b2e", "sighting_of_ref": "indicator--99693921-e689-4328-b976-52549e60d7c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dabafc-088c-41a3-93d5-b8c9f05ea09c", "sighting_of_ref": "indicator--8fe1760e-d19b-426d-8b12-a0ff4ead6e2f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3573b089-3a06-4040-a569-0b952fbbc1bf", "sighting_of_ref": "indicator--5b65e1f7-e607-4dce-8d8b-b834ee9e3a97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf6c767-84c6-4998-8007-2f6086428877", "sighting_of_ref": "indicator--effd2f53-f5ed-4184-9c8c-dfb842c4a50c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbef3f2-38a7-4068-90e3-94465e9c3a84", "sighting_of_ref": "indicator--b358534f-f6d8-45e6-8a50-2617a8088b7f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a63da4c-bd80-47ce-9176-7b8cd31a5f6c", "sighting_of_ref": "indicator--be897556-80ad-4ddd-848d-630b47f764e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225fbf18-19d7-4cd3-be93-539890d9770f", "sighting_of_ref": "indicator--19a536aa-02cc-4a13-8a30-cf8d03e8cfba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657469db-de0e-41ce-8983-a1456ddfbb50", "sighting_of_ref": "indicator--b4bad864-8183-48a5-806c-4fe3c32c2796", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18faf00-a46c-435c-a58b-bcbf00ea4954", "sighting_of_ref": "indicator--1e404d37-d095-4ece-b9c5-483823983523", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e195811-7228-4e4f-a22d-8ad76a9190dd", "sighting_of_ref": "indicator--64cee975-b823-4dab-b194-3ba725f12f60", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3737ac3f-cead-4fc7-95ae-cd596e0d22e2", "sighting_of_ref": "indicator--a3208987-beeb-4153-a648-3d7fe4aff676", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc08494e-1748-4643-bf1a-aec9f691809e", "sighting_of_ref": "indicator--f5a8595f-290f-4716-8b70-c14ea935e290", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d39f84-47d7-4113-9525-a31f0ff48e37", "sighting_of_ref": "indicator--f5a8595f-290f-4716-8b70-c14ea935e290", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2dabe79-5dac-4ed6-8072-2f56e704c611", "sighting_of_ref": "indicator--f5a8595f-290f-4716-8b70-c14ea935e290", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7446ce-3b64-4d11-b179-a8ac64254a2b", "sighting_of_ref": "indicator--34dec529-534e-4551-89c7-105ba81e6d23", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffd79a1-4047-483e-94ba-b716f4984242", "sighting_of_ref": "indicator--18d2722b-7215-452c-b456-9af45e2fb537", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c803b7-e943-4dc7-82dd-28e548b4148c", "sighting_of_ref": "indicator--7d9ef414-7a8b-4bb3-bf85-9567bb1c3bea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8480f2-b654-4d7e-9b6f-bb173cecfe9e", "sighting_of_ref": "indicator--7d9ef414-7a8b-4bb3-bf85-9567bb1c3bea", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885aec22-5ae3-4471-ab08-12b09c7a60ab", "sighting_of_ref": "indicator--a6af481d-cb16-4266-9e1e-c41d8eede6b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406b7644-67ed-47d3-b78f-1f25c345f8b6", "sighting_of_ref": "indicator--0712730b-2671-4984-99a3-65b772ecb058", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a0f164-ce12-491a-9669-2b5f1991d264", "sighting_of_ref": "indicator--d9daef34-7548-4186-b226-f63f4add2175", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa6aec4-318d-4edb-9e03-94fce1a51627", "sighting_of_ref": "indicator--e2cac47c-5368-42f1-be66-9d3e98ea2dac", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cf8232-7cbc-48cf-9565-b2d2d379a497", "sighting_of_ref": "indicator--bcd92e47-5bc5-4730-abdd-df063468f218", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9d6209-ccd2-48ee-85d3-9d745c10c120", "sighting_of_ref": "indicator--d9ce2ebf-9886-43e9-a72b-c5a4b8bc10ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8099851-7fd5-4878-9d2e-003ed08c68a9", "sighting_of_ref": "indicator--4b926ea9-429e-4ae1-be03-94ad16c697c7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02465f3a-971b-445b-b430-8d33283a96a8", "sighting_of_ref": "indicator--1bb6911a-0763-4d17-8dba-17c119e518e2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0484eb9-a3cd-4e91-aaac-cef7317c5b14", "sighting_of_ref": "indicator--0f64f50e-2c52-4655-8704-8f0cdbdf453c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba05a4c3-3dcd-4f25-b137-78615b40f3c8", "sighting_of_ref": "indicator--691d810b-66da-46d6-b50e-2aad92fc4d35", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae5635f-2c08-4dac-a342-fd400ffc6c07", "sighting_of_ref": "indicator--a24b4c5d-36d9-408a-aa40-90313edde325", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b60e4d3-2945-4ec1-93ef-5d5436b6f87e", "sighting_of_ref": "indicator--504c30b5-284e-4541-b4af-197ff63109c2", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113c6e84-14e7-43c9-8854-5827357a7780", "sighting_of_ref": "indicator--504c30b5-284e-4541-b4af-197ff63109c2", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975d4382-70b0-4f65-a0ba-6732a9cc04ab", "sighting_of_ref": "indicator--ea2f5ee9-d509-4693-a0b6-eb02d3709b02", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c8b107-dd5e-4a5a-a58e-fd9e0d3853d4", "sighting_of_ref": "indicator--06d59a3b-f248-4da5-b3c1-4dba80b34d30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b21794-df9a-4f82-bff7-ef1b504cd4e3", "sighting_of_ref": "indicator--1fd08c5e-5898-476f-8cd8-9c4124131793", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837475b0-ef23-418c-af50-ac63beaa4c45", "sighting_of_ref": "indicator--b29f8ab7-74ab-473e-a11d-a20f06a01f77", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9490dd3e-9743-49fe-b481-0528843dd4b8", "sighting_of_ref": "indicator--5b968844-2f08-411a-a9b1-c383780c88e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd0a989-4430-4228-8038-ea5a2965ef5e", "sighting_of_ref": "indicator--1c7a527c-9f7c-47e0-aa50-1142bfe45940", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127384b2-1c80-4ddc-8aa9-673dea75a89a", "sighting_of_ref": "indicator--67dc5946-c431-4ab9-9f24-b78dabb096a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798a85fd-7484-4746-b44e-3c52917fced6", "sighting_of_ref": "indicator--6b5d65a3-bff1-4bfb-bb26-7cf82970ae40", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae051db1-0ffb-44ad-bb85-86cac8e303ed", "sighting_of_ref": "indicator--74d1caf3-6a58-466e-a935-19f4703864bd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bca621-33e2-441c-a4a6-43ed12ee9574", "sighting_of_ref": "indicator--00d23731-25a7-405f-9f32-ebae0ebeb340", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b3f859-6f71-4865-adb7-1e28b6729faf", "sighting_of_ref": "indicator--c03b6171-97e2-4154-b0e5-4f2fd0eac9a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f728b8ee-fab3-4b1c-86b4-0663e4c006b9", "sighting_of_ref": "indicator--b8726a8a-91b2-413c-8f6e-30cc2e2f3871", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fafbeb-3ec0-4672-b67a-fd52d006935b", "sighting_of_ref": "indicator--6f6156ad-0fb5-4450-ac75-8d7601ad8b1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516bca6d-0b0f-4a31-ae93-1e0d555b897d", "sighting_of_ref": "indicator--bc4fd848-8b84-414e-bc14-2c6111d00932", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9fa9ca-79a8-47df-9200-2bf65d1cd1e5", "sighting_of_ref": "indicator--b6427bc5-31bd-4059-badc-3fa5431d80bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a987bda4-825f-47e0-b39e-7933575c79c1", "sighting_of_ref": "indicator--68893275-2958-49dd-9c63-38645e1f9c94", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73f0e2e-c71a-4f80-9616-69365be94f6c", "sighting_of_ref": "indicator--761ca289-b41e-44f8-8a7b-f255182cf9db", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091f79fb-61bc-4606-b015-65575a1393ca", "sighting_of_ref": "indicator--4e5afce2-cbde-4429-ac07-cf6b5ab5d7ab", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3154ba1d-d254-4a1b-af81-521ab7ae9435", "sighting_of_ref": "indicator--95130a70-c277-4ade-af0f-ebec76945b72", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37b1b5b-e55c-4e32-a3a8-4f7f38649b60", "sighting_of_ref": "indicator--c929c071-f31d-4c7a-bff3-c1098c2a2aa4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d60db2-5518-49a9-89d6-06e4de12bb79", "sighting_of_ref": "indicator--009ebcdd-63b3-4213-b208-0af491e5654a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070cbf97-3eba-4b44-8b1d-e64e1993c58c", "sighting_of_ref": "indicator--bb53751f-d9f1-4a6b-898e-1b33a7c3b7e2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08be144f-733e-454f-b2a5-bb6022ca277f", "sighting_of_ref": "indicator--bb53751f-d9f1-4a6b-898e-1b33a7c3b7e2", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2081931d-8150-4c9a-b852-660c32a59a89", "sighting_of_ref": "indicator--bb53751f-d9f1-4a6b-898e-1b33a7c3b7e2", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a699b8-3c47-4e41-9d75-656c6b53b438", "sighting_of_ref": "indicator--ba1957e3-7dcf-4cb3-a564-c097b3b36f0e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafa92a0-f9dd-4d40-af29-59dd64ef2c22", "sighting_of_ref": "indicator--681c40cb-fd72-4a8c-a05f-15654725a46a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4498e7f3-d614-4d6d-8a58-f29f94131ea5", "sighting_of_ref": "indicator--10259aae-274c-4910-adce-8256dae84394", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0932fa89-2b4c-4bd3-866e-972e4dfd3848", "sighting_of_ref": "indicator--fceaa8fb-8494-4d4a-b5d1-6bb5b1d454ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea083bc-d867-49a3-af82-312d17a6b7ff", "sighting_of_ref": "indicator--37141220-a0eb-4747-bd58-87c8ae02fdfc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7b9ad4-4cb6-4dcb-8f5a-958551595608", "sighting_of_ref": "indicator--9d362277-17e5-4421-8b75-99795c5fecf0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c41fbb-a828-49dd-8b9d-fd18db441a45", "sighting_of_ref": "indicator--413ddf74-f39f-425f-b388-a9e037bafa18", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6921b462-c92b-405c-99b2-0c87f2903945", "sighting_of_ref": "indicator--f44630f0-5186-4129-b41d-38b33bcfafc6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01d9eee-0d04-4293-bd6a-e634e768abc0", "sighting_of_ref": "indicator--0739b1dd-d337-4d79-873c-fce6aad1003a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7534912c-ba9a-4b4b-9e2f-547126c4c88d", "sighting_of_ref": "indicator--4456eac7-37e9-4768-8167-684af1329938", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdd16f9-3cb1-4cf8-a4ff-8bff3660bfc1", "sighting_of_ref": "indicator--13497340-9d71-4efa-a24b-ac99e67331b2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aa644f-e2c2-43b7-a3f9-6c838334f824", "sighting_of_ref": "indicator--e2ebcdc1-3751-48bc-a805-8adb580b0609", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20b2ff3-efc1-400e-9b46-e991103e22d4", "sighting_of_ref": "indicator--a6a7745f-d95e-4311-8fcb-3b0737b6526c", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0735bdb5-b83c-4867-acfa-23e04464935c", "sighting_of_ref": "indicator--552518eb-8a74-4d1b-852f-222c918cf3ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b9cd98-55a1-47a6-8ac2-67f376b41fcd", "sighting_of_ref": "indicator--81c5bd06-167e-474b-b179-47e3fa518574", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad761c2-87bc-47ba-9166-6a0b1698f267", "sighting_of_ref": "indicator--9e8b040d-557e-4f91-bc6f-b06d9e10bf99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab0e9e1-d0b3-4f02-97a9-67b193ff4744", "sighting_of_ref": "indicator--6d736d1f-2f63-4132-ad2c-d733f6ce0347", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6784478c-8318-45a9-bba0-1408a0aed46d", "sighting_of_ref": "indicator--a352152f-9c45-4047-bc75-03159ff437cc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5cfc1a-10da-4f81-9c30-2a66018f660f", "sighting_of_ref": "indicator--6c3d0373-4fe3-496a-8452-75aae4b80a59", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22959954-bfae-45c5-91f9-19edbe49e186", "sighting_of_ref": "indicator--19ec5421-c865-4d78-91a4-424d74d7ce0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade74922-6e77-4ac4-b831-741d3d11a4b8", "sighting_of_ref": "indicator--7d4e6a1d-c370-41d4-8831-188ae97611d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e306a8e-e98d-42d5-a8ab-6750bfa75ebf", "sighting_of_ref": "indicator--0876ccde-5a04-4fa3-95c7-b9779285b5ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23b306d-3d29-4bd8-9877-c142548dc7af", "sighting_of_ref": "indicator--9d590cd8-c2b5-465f-a651-b8b5136f6227", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0f1237-9b3c-4ba7-a46c-8eb0ff0e2893", "sighting_of_ref": "indicator--a5560d54-9e0b-416f-b00e-0450175a441c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7124d6ab-73e1-4c4d-9a72-699b3d16eeb5", "sighting_of_ref": "indicator--aa8fe93b-1bcc-414d-814b-04736307ff50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547fa0d7-8595-4719-94db-f48419ac724a", "sighting_of_ref": "indicator--841d42a4-e13c-4385-a771-838bfe56a46b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26eb8712-8cef-416e-8577-6072c7b913f8", "sighting_of_ref": "indicator--7babaf3b-839a-47e5-8761-1fadd963f2c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4fd1d3-ca66-4e37-a77e-2d84f5687c7a", "sighting_of_ref": "indicator--40697dd5-a517-4c44-9c72-8d9479026f9d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3633334a-69ed-4c8a-a973-f6d20a3c523b", "sighting_of_ref": "indicator--19f0ed09-adf7-4da1-8348-bdcc526ef752", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3717b1b6-ad69-4cf4-a0f5-1fb128a177d5", "sighting_of_ref": "indicator--f850d646-5e05-48de-83a8-819eb8b24625", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110b191f-07ac-46dd-a7af-08601c4d730c", "sighting_of_ref": "indicator--913d0e8d-3c6f-4696-b006-035d5fd9320e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3606a4-a669-43bf-8be2-af3601af6589", "sighting_of_ref": "indicator--6087f96a-4ee4-4ab0-a4d8-7a934c616094", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537dcfef-2e86-46a3-919c-c9f3241e2414", "sighting_of_ref": "indicator--1851e937-c3ea-4d44-9ca9-ac9ff5204c1f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a088faf-5810-48e5-b8cc-d46399e56896", "sighting_of_ref": "indicator--3a2354ec-6460-4073-9c02-4d6f8f479e7f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4864f2ca-8b1e-4622-9377-7ca80937160f", "sighting_of_ref": "indicator--5dc1d180-df44-4724-ac02-396acaee7874", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc973a2-921f-4a44-8223-76cd385d3d67", "sighting_of_ref": "indicator--f19ac267-3b54-4e6f-9fc8-c01dd08feabb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cf70ae-21a5-4b50-94b4-a2f5e624e6af", "sighting_of_ref": "indicator--69a8a86b-022d-407e-b3d4-86b2dd0e9c7a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cda5ef-8dfa-4e84-a4db-18cb89ce462a", "sighting_of_ref": "indicator--f10fc506-fdc2-41c9-af86-8284f4105f0c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a20bf00-35b7-42d1-a08e-18c50e076c58", "sighting_of_ref": "indicator--8c4a9247-09bc-41ab-b306-c8d1a04e7a2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5183ec15-056c-49c5-b0f0-23b1baa99aff", "sighting_of_ref": "indicator--c1f84e00-fae3-4597-bac4-4b9aa2008ce5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6811a339-0a31-4bd6-aa0d-e83492604a68", "sighting_of_ref": "indicator--7a41d329-e48a-4a8e-9dee-f24d0785d34e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8bc8e9-ada6-4acb-8b40-e93c55f15e17", "sighting_of_ref": "indicator--e6b30a8a-ac29-4d49-bce1-abc0b9749a00", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e2c30a-9bf9-4908-a10e-534bb4dcd7fd", "sighting_of_ref": "indicator--f0753320-98a2-4b2d-b038-fad6170eb3db", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4629729-80d8-450d-9ed4-49cb091acbf3", "sighting_of_ref": "indicator--02560472-7b0b-40ad-859f-adbadca0b852", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d258b586-e134-4b58-baa5-d9d405c51e8e", "sighting_of_ref": "indicator--faf529d7-0ca8-4c69-ac53-1a7c84a6e97e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45a59dd-748f-433d-aa34-9378d3fb43a3", "sighting_of_ref": "indicator--73c34b28-e2ed-49fc-ab87-c9288a7b5b4a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48bed13-6472-40ee-b871-badbdcf2ced0", "sighting_of_ref": "indicator--c127bd03-689b-4414-9c97-3d19f592c182", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7ec834-4114-4ff9-bd28-ed8b05c16e43", "sighting_of_ref": "indicator--192de801-8f18-4ead-b563-10f91561b3e4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0646cb9-4991-4566-93d8-77d2e8cf4e0f", "sighting_of_ref": "indicator--389e7a33-0e99-42f4-be93-5ef920efd913", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1261bf1e-ecd0-4c23-adcc-3f5d44fffac3", "sighting_of_ref": "indicator--3429e279-fa6d-4191-8483-d609a4557c16", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfebda24-cad5-4d91-bf41-ed549dbeaf76", "sighting_of_ref": "indicator--324a0970-be33-421e-9829-2740cac09f8b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24cfeb3-14b9-4e46-87ef-f97c3dc0980b", "sighting_of_ref": "indicator--2b324ebe-5e71-44d5-b268-586f30f8e085", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6dbb3b6-9677-4edd-8aa0-5134fcd07430", "sighting_of_ref": "indicator--9710da89-0d13-41ec-b652-53617d66f4b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7fedb9-de31-4332-ae48-c278ad4954c8", "sighting_of_ref": "indicator--98784a0c-c3dc-40e1-8db2-6dae81993444", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca829f1-4580-420f-b0a1-00eecc141963", "sighting_of_ref": "indicator--e827a95f-ff08-458a-b92c-c91e627f521a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb298eb-2834-4bb3-8088-b60cb62317cf", "sighting_of_ref": "indicator--ad7e88fb-79c1-4bea-8d0f-8c45158ade91", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ad73e7-a80c-44a5-819a-187667f67d84", "sighting_of_ref": "indicator--8076f8c0-c154-41f6-be1a-9ff0762c0f27", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cc1eff-b42b-4a1c-a154-a820a2d45b7f", "sighting_of_ref": "indicator--ff909bcf-b00a-44c7-a2de-92c753d6fff1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a015814e-8226-4b11-b6e9-03a06021985d", "sighting_of_ref": "indicator--044b766c-74da-4b66-8b62-2ff5b041d142", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad70f5e3-a968-4cd6-917f-d3d79ef6f6af", "sighting_of_ref": "indicator--01b5a2a5-4c5c-4c47-8801-6fc5d37b24e2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad21954-9187-4da0-9fbc-24653af17f5a", "sighting_of_ref": "indicator--2b700d48-7b2c-46de-98d0-5bbad5d34035", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797bc96b-c079-47a7-a02f-dfa491731800", "sighting_of_ref": "indicator--c5d0e83f-31bb-4e2b-b98a-1c5dc64da264", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c57140-55e0-4087-8e79-3eb58a48ac01", "sighting_of_ref": "indicator--09106522-1c8b-4319-ac86-dbb90692a392", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6007a6f3-24b1-4738-bae5-d03cf3ef8d73", "sighting_of_ref": "indicator--87aa843a-f81c-4df6-948c-cae0017d8233", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071d0435-db3c-493f-afb4-9b16209f704b", "sighting_of_ref": "indicator--da52a30a-0e9b-4e8f-b0b3-39d5c65fc9a7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffac17f-ceb5-4ffd-bbf3-3705f60af091", "sighting_of_ref": "indicator--1b5315de-db55-4a52-bd62-1429a43c80e3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c849068-cdc1-4a02-a580-e6d586e721d2", "sighting_of_ref": "indicator--150b8d73-f2e9-486e-bfb0-f0033cffa9ad", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb573738-d93d-43a4-80f0-c6c72022d61c", "sighting_of_ref": "indicator--e93081ae-2236-490c-bd50-3f9c46d06268", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468e9a8b-3a91-48e3-b9ce-808d8b26695b", "sighting_of_ref": "indicator--82084668-4597-4cf0-b229-7f52497ef6f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9816b3c-438e-4fe0-af66-df33d2e5d589", "sighting_of_ref": "indicator--6bbff078-ed87-4a45-8b5a-c15bbbf4276c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6449e0b-2f7a-48b1-8483-796cf2cfd8f7", "sighting_of_ref": "indicator--d094bc10-7449-452b-b572-6e2a09369840", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323048d0-a88a-4ce2-b23f-e20a3e06a246", "sighting_of_ref": "indicator--c7d32582-8439-4344-b183-b9115908540a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd66709-aff4-429b-906d-ff7ace13a778", "sighting_of_ref": "indicator--274e9b33-5320-465b-809d-daea1bca54b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b77bf1-5096-4401-acbc-0d70081dbda5", "sighting_of_ref": "indicator--631f655d-4479-421f-af2b-bf91466fc620", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe21e3d-c2b9-4bf1-bd7e-41a30a1a6816", "sighting_of_ref": "indicator--cb3356ba-2bde-4ca5-9f11-56f5078a02e2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb2305c-2126-4f6e-96df-ea0948db6a1e", "sighting_of_ref": "indicator--8d508bbe-7e88-4fc8-a0e2-7c59b9694742", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281db364-a48d-483b-81e6-5891479435d3", "sighting_of_ref": "indicator--77e73c8d-c47c-488a-901c-5fff39abad17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75aafbd5-13b8-451e-a7ae-94709d2cffcb", "sighting_of_ref": "indicator--1bb9c77b-59b4-4a22-b0e2-f40b66f5c64d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4505c4b9-0c4f-4b9f-99ed-4a354331a3f5", "sighting_of_ref": "indicator--d18ed11d-3934-447a-b3be-e535213d893a", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476d9001-6f4d-41e1-b6af-bff199877c5f", "sighting_of_ref": "indicator--cd936cb3-92c7-42be-88fb-6a025364f486", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a46c4d-649e-4f64-a496-7fc32f123a23", "sighting_of_ref": "indicator--8cec7359-4377-405e-b5f4-8c4c6ca12886", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b5f627-61f7-41a3-82f6-3bb593e3a290", "sighting_of_ref": "indicator--81c75fbf-a0f1-40f1-bd10-e48490d4a7df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f5a68f-97da-44ad-a623-931f520de71c", "sighting_of_ref": "indicator--10425753-0666-47cd-9a1d-e80b16d37f84", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7aabff-3919-4fcc-8689-9aec301cd8ed", "sighting_of_ref": "indicator--782a33ae-14df-4235-bdd3-551b1c702c74", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9993c32-cced-464e-88a3-6b67179375d5", "sighting_of_ref": "indicator--8a722295-75f3-4a31-90b6-c41b3d5b1a85", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50afef65-b1db-4686-be20-ead3ceb4e3ed", "sighting_of_ref": "indicator--3afabe39-1250-4822-98e0-98c7bcf067d9", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08926dbb-457c-4f0d-acbe-e261c7421a22", "sighting_of_ref": "indicator--e1aaadbf-11be-461f-9bc8-1edc9a608919", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09580d22-eed3-4e9e-8ac7-d332f53bd43c", "sighting_of_ref": "indicator--212650a7-8759-4c7d-8444-57f9591b8241", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2800e55b-4092-466e-979f-d31c460dadc4", "sighting_of_ref": "indicator--00858cfb-fd11-4fa6-bd9d-dcb69ffcded8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40ffa6e-5e8e-4244-a149-673be2d5bb6f", "sighting_of_ref": "indicator--efa5dd59-1239-4142-b043-1f4d027aff7e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fedaca5-80c2-4bf7-90c1-ea2a23655832", "sighting_of_ref": "indicator--14bbc7e9-02aa-4018-b3a8-c460557a7924", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f934138-8d1c-4db9-856a-9ce44ee05ac8", "sighting_of_ref": "indicator--14bbc7e9-02aa-4018-b3a8-c460557a7924", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61651ef1-96d7-4e38-a2f8-cd511c963eac", "sighting_of_ref": "indicator--14bbc7e9-02aa-4018-b3a8-c460557a7924", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ec2656-303b-4421-b07c-d28d77482f09", "sighting_of_ref": "indicator--467cfed8-6b6a-44db-85b8-e84cb8166a8d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72568762-8e4a-4912-9bde-fa8222d3eafe", "sighting_of_ref": "indicator--db0f5040-fe90-4cd7-af61-2feef4197189", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc28b64c-708b-405a-ae11-219cb87f8985", "sighting_of_ref": "indicator--feb8d0b2-40dd-4274-9480-f7ee4b6c9b99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2564c6a2-5c9b-4924-8d49-51a2edc577e2", "sighting_of_ref": "indicator--acc9ee87-5ec4-4960-90f1-4db4f6829b5e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0278de-b897-4922-b9ae-0f3855a1cb07", "sighting_of_ref": "indicator--73e35827-a1e3-4ad6-99ea-5e842791e4ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d1166b-b93b-4c6b-98e7-ff48354bd5c6", "sighting_of_ref": "indicator--b4951715-f055-4c1b-b885-f04c0f4d67f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec4302e-7b69-47af-b526-4047337f9a8a", "sighting_of_ref": "indicator--200c75f0-effe-443a-bacb-71249b83a61f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117676d8-05fe-4c5a-a84c-8e4b0a4c7cd5", "sighting_of_ref": "indicator--2603ce50-9db5-448f-a71b-80bf348aef2b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea6f3dc-d9d0-4abf-8a9a-80090cd98b3a", "sighting_of_ref": "indicator--38111e03-e272-4827-82e6-955ba20c6bcb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738cff19-ebc3-40bf-ab74-5f4b4a80b2cb", "sighting_of_ref": "indicator--0193bf75-c6d1-44fb-ab13-4ded874ab2d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67120b4-2905-4f4f-ac99-626c2dc41853", "sighting_of_ref": "indicator--bf1a2bc0-8509-48a0-a890-86236341eccd", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8944b023-afd6-4b97-a994-fb2b49a69b81", "sighting_of_ref": "indicator--5aa2de41-117a-483e-a57d-7279b07802b8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c6d43e-a5a5-4a76-9387-39006fa5a8fb", "sighting_of_ref": "indicator--8407f356-2ce2-48ee-9761-886ec3e37190", "where_sighted_refs": ["location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f394ea2d-a467-432b-9c16-c441240e8c58", "sighting_of_ref": "indicator--131a30d6-b911-478f-a51f-529320beca25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d3bbf6-95cc-456f-bf85-1969dc866f8a", "sighting_of_ref": "indicator--23638201-606e-44e8-85c3-381beb4bb6ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d597d6ce-5d2a-4af5-aaa7-fc4194440400", "sighting_of_ref": "indicator--bc91ef97-15a5-4a05-b1e0-7a0322ec8645", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd26b9a-2541-47cd-bac8-fb9d183d03bd", "sighting_of_ref": "indicator--ca4615a8-392b-43e2-82e3-b3cf64b2dbcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06493c4a-3c45-43d0-8a0b-7792be012c16", "sighting_of_ref": "indicator--6113e278-4211-4f43-aacc-0b2728971f08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676b9223-cea4-43bc-a813-299954f62d2c", "sighting_of_ref": "indicator--150da064-4214-4bd8-8c8b-7fa435bfd053", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2368dd-259e-45b4-8440-4d26d057078b", "sighting_of_ref": "indicator--b0f8bc26-b02c-4349-a7e4-ec04d71afb68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f73387f-36e8-4d47-8238-da1fc35e37cf", "sighting_of_ref": "indicator--0b2ade36-2741-4069-8b17-f2350e34815c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7760089b-5272-4cbb-8c84-a514e2994c93", "sighting_of_ref": "indicator--c766e1f7-b7e9-4c1e-800c-fb1f9b95f43d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f71a406-981f-4601-901b-80d83d748879", "sighting_of_ref": "indicator--64d4f8aa-b8d8-41e9-915c-f41d99a4f9d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733d5092-a878-48d5-a07c-fb10f68e3293", "sighting_of_ref": "indicator--ebe445c1-6626-408b-8365-23243481cce7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8f8170-818a-47df-b238-3d8acce9661a", "sighting_of_ref": "indicator--05b88769-5aab-46c5-8b11-558e3a5207b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba158e11-d967-40cc-a469-4b5772a6a7eb", "sighting_of_ref": "indicator--bd568d5d-6d10-4ea6-a0c3-aca631e437c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8778c4-9bca-4a80-b385-c316bf39b196", "sighting_of_ref": "indicator--4b3c0326-a4b1-422f-a87b-2fe2309a0396", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a503cec3-d1ab-4791-8a66-980009c7a128", "sighting_of_ref": "indicator--cad659e3-d6c2-43c0-ad12-1071f810b18c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b869450-7607-4c52-919d-5b99f941e46e", "sighting_of_ref": "indicator--96fb4ced-9471-489f-a285-072456be2240", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843645d2-2e2a-430b-949f-14a74ba38afb", "sighting_of_ref": "indicator--4edf40dd-0945-47e9-a4c4-3a910da72a55", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18571c7-4612-4190-8875-408ccb794002", "sighting_of_ref": "indicator--7d562a21-810a-4392-a0b9-371e09bc5f44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cdccdc-b89d-408a-89f6-c2d722fe11e8", "sighting_of_ref": "indicator--601626f5-b6bb-40df-a040-f189aeb033a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcd974c-00ff-42f7-a9eb-f9f9e3b00c65", "sighting_of_ref": "indicator--e630243e-ae6d-437d-84db-d46682297933", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2f7550-00b1-4ad9-b876-34e33c2ab09b", "sighting_of_ref": "indicator--fcb6d967-e5d5-4672-807b-b746128922c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf9860b-8d55-4b76-a3c9-46c7745a40de", "sighting_of_ref": "indicator--f53d8a6e-4f13-4dab-9918-8de99cca20bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d0ac13-7ead-4fca-b1af-8012cc4a908c", "sighting_of_ref": "indicator--e26c4acf-ed32-4845-af1f-a363b45830d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452e8dc3-d7f4-46bc-a945-54698c634f27", "sighting_of_ref": "indicator--d7be8864-2703-4007-a534-03de94124ff6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6629405b-80f5-4369-b884-6df1f9086c43", "sighting_of_ref": "indicator--27bec5b0-12cd-4c63-8383-580a1c6bd16a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9292851-d063-4749-94a4-d170170a1f0f", "sighting_of_ref": "indicator--7dcac084-4ceb-4d3e-b9de-df8ec966fbb6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b47492-f15c-4650-a33a-b776a2087f92", "sighting_of_ref": "indicator--6a573e26-987f-453d-a7eb-c19f2478a3d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbaec4e5-d105-45bd-94e4-abde27d05f17", "sighting_of_ref": "indicator--c0b07f2a-a969-4933-8959-d302c3a098e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d580d0-0f55-4081-98a8-b35deff4b6b1", "sighting_of_ref": "indicator--0fda2f00-2565-48f8-96b3-145f2978556e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c5ac3d-3fc6-43ac-9d11-5cf03cc9406e", "sighting_of_ref": "indicator--ddfe8695-39d0-4178-bae1-4db2f715f034", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6367ae-e9b7-4af3-8bb5-648dacabc527", "sighting_of_ref": "indicator--f0b51c22-c75b-49d6-83df-1cbac52f12ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9d8483-7487-4ada-a52d-babb527f1144", "sighting_of_ref": "indicator--32460718-3d9c-493b-b1bb-b01f932da261", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa81f8f-b2e8-4778-9c0b-49d419d5666c", "sighting_of_ref": "indicator--e89784c3-0e25-4470-a087-313596f8ad38", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d38ab6a-9ce6-46bb-8271-8dc6c28b8bb4", "sighting_of_ref": "indicator--fa593d36-886f-4147-b927-d4de601943e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205a7fc7-a8cd-43e0-a49a-5a220151ebc6", "sighting_of_ref": "indicator--3c9fffcb-bcdb-47df-a2da-a2f3fa662b2a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9434579-e6d1-466a-b1cc-5e01b0edf7de", "sighting_of_ref": "indicator--1063d16e-88a6-4bbf-bcf7-fa1c3998ab77", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a6a07d-3d71-4800-8db9-6a58787a3c68", "sighting_of_ref": "indicator--98ee5d50-e37a-4cbf-946c-bc2a9f2fbb92", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd63951-f9d8-4cc4-8524-92346ed6c61c", "sighting_of_ref": "indicator--02e0c5a5-1a66-45ff-ab3c-17062bf2b261", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9abdf2-cba2-42b5-b234-dd866b5cbf53", "sighting_of_ref": "indicator--ceee30c8-336d-43a8-ab67-199ab712e278", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315b2109-3300-47a4-a1ec-1fee058c5fe2", "sighting_of_ref": "indicator--4b7702ee-7a68-43f8-8260-3487a8ae760f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cbd261-5753-4bf8-9c9c-7b8621f6e6a1", "sighting_of_ref": "indicator--6ebf3abe-546c-46f1-a9dd-6ea068209f6d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9d8a65-31ac-462d-b5cb-1a7408ec9aa0", "sighting_of_ref": "indicator--ab855bfe-16b8-4f49-b2a7-b3455ce28a48", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a45383-eb65-45d6-93b5-1da613ba4149", "sighting_of_ref": "indicator--9c319956-2191-498b-a974-8be4ff0ad4b9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e93d57-ac25-4b03-b003-1fd42ff1aa43", "sighting_of_ref": "indicator--c040a05a-dd35-4f7a-a86d-451ac17f356a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb55805-8c3c-4f53-9727-c84b78016f76", "sighting_of_ref": "indicator--cc1b61e0-885b-4302-95c7-5dce850d0aed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2075ec5d-fb31-4cd0-ae5a-323e3b2f660e", "sighting_of_ref": "indicator--70ac34aa-05b0-40eb-92b7-bed064e09c64", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4186db52-5f9d-4e1f-babd-755326950b1d", "sighting_of_ref": "indicator--5ca35f01-36ff-4345-8d0e-ef11c796a51f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d34497-967b-43a2-85cc-ec8a63bb7fc2", "sighting_of_ref": "indicator--92d1a4ff-ab3a-4bc3-952f-70a1e0799267", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7666ae5d-5d2a-4f11-bd22-6464994a96db", "sighting_of_ref": "indicator--6315dc0c-5b7f-4c1c-9f11-6468dc11094e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23dbc88-84ae-4f0c-a884-80294fe47cdc", "sighting_of_ref": "indicator--9def86cd-deca-46b5-bce9-6212b866f0de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c84087-9841-4f7d-bdf9-b32969186623", "sighting_of_ref": "indicator--d30ba6fe-a3b5-46a5-8678-a09f17e51890", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0edc43-d8df-4df7-bc6b-fbb3481cf498", "sighting_of_ref": "indicator--f8674c3a-aa06-499c-b076-7b6db5f292f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6652db2-aeb3-4cef-9a05-f2e49b55c7b3", "sighting_of_ref": "indicator--5dd6a150-826d-4a60-9f7e-78cbbd74ae83", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac296658-0680-4dec-a322-0fbb0e3d2ab5", "sighting_of_ref": "indicator--15d675a6-d838-48e6-871f-8db1d74a869f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3682af3e-b036-4b0e-9e2f-de8a66290351", "sighting_of_ref": "indicator--7f858a9a-2314-4ff0-b778-2cd49b8d5bde", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6481cac-67d9-4d9e-9a34-27b2aab8e666", "sighting_of_ref": "indicator--5d79e59c-cfda-4fbc-b5cd-383abeb3febe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9983f731-0543-41d4-9373-f03c8d92ccd6", "sighting_of_ref": "indicator--5db2a043-dd2b-43da-bc3b-cde02eef04df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3561cee5-c4b0-43e7-9847-adceab049b69", "sighting_of_ref": "indicator--517786a0-2270-4175-9e5a-26494ee7a8ed", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5420e2ac-13cc-457b-b524-7c0a9679dc3d", "sighting_of_ref": "indicator--ab1c9ad6-97d8-4b04-92c5-bb4035af8007", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82175705-bb99-4f28-97d6-e83feb66736e", "sighting_of_ref": "indicator--6dd9b8c7-e619-476e-8262-7a5ed92bb83f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487e4223-ddc9-47d4-b478-13a104031aa5", "sighting_of_ref": "indicator--c9931cca-dfec-454a-966e-bad1f37774d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fcb7eb-12d1-4852-b1cb-328f1bb14f07", "sighting_of_ref": "indicator--3e5da0ff-e704-4159-b60f-845838f28291", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b57d3e-7ca2-4fb1-9c0c-4469980e6dc3", "sighting_of_ref": "indicator--496d2134-6b1c-4323-8876-5e5681e8faf0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4972c83-637f-4ff0-adb7-9daa36991b0d", "sighting_of_ref": "indicator--8ed37de6-51f8-415f-ae43-7e01a6a052ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18af4b9e-7e54-4fc7-8feb-fc3b1539d7c4", "sighting_of_ref": "indicator--d6abc040-c4fa-491d-9415-980fdd40d5d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e379a5fd-147e-4ac4-a696-78a20f75501c", "sighting_of_ref": "indicator--89d45d00-57ee-4eaa-9de3-9e304c2801b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4acb10-a641-4b91-91d3-e95f6e8ec8ad", "sighting_of_ref": "indicator--75793585-87c2-45e5-86d5-6130f06b9ebb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddba6ae1-e5c7-4850-acee-7451ac7a9e0c", "sighting_of_ref": "indicator--8e3a45f5-916e-4946-9fff-afa8c3b07cfc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bb95cc-698c-4ac2-9926-cf8aac4ee5c3", "sighting_of_ref": "indicator--cf178648-71ed-4c3a-b4b7-673381e001c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdea4843-222c-4c22-b7a4-315b275ab5f3", "sighting_of_ref": "indicator--b6ce93a1-131c-4f15-8b83-a9c2f6fc2c35", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0c7ada-2530-463a-94bb-94a172f328db", "sighting_of_ref": "indicator--ee4fd7c5-d6ec-49a5-ac8d-6122286d8807", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ded6296-00cb-44fb-badf-97bba95dcaeb", "sighting_of_ref": "indicator--abfa02d2-a382-478a-8833-9666664d0f8d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6041d0da-b9a9-4646-8a19-7de78171752b", "sighting_of_ref": "indicator--6add278b-09ba-4313-bc87-1c0d5c26e514", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880bc08f-c04c-40cc-8991-ff1dbf34c139", "sighting_of_ref": "indicator--c344ac25-f96a-4143-9f0f-71078cc9b6a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b6767c-09f4-4713-9b6c-cef15acde1d1", "sighting_of_ref": "indicator--3c293b4a-fe44-4744-aa37-f2b83c9fce88", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623bdb46-de5b-4259-b93d-9b907a4631e5", "sighting_of_ref": "indicator--d2c31bbc-5ee6-49a1-a493-3468eed90215", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78947b99-3ec7-46c9-998d-078a154abf04", "sighting_of_ref": "indicator--452ad389-4902-4a59-bded-14b78b668de4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce4d725-0740-4772-8fc8-cf381afe1a40", "sighting_of_ref": "indicator--1f40e323-86af-46fe-96da-8efec1b35867", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6b25bc-181d-4b1e-85a4-fd687d338252", "sighting_of_ref": "indicator--ee50f970-cf7e-4658-95c6-db84e3507956", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278a55db-cd84-4e12-8cbb-038486dd1c40", "sighting_of_ref": "indicator--6264afe7-ddd0-4198-bf0c-4315b2e2bd30", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fe5da7-abf2-406d-ab71-e322c809d3e9", "sighting_of_ref": "indicator--932ca94e-4197-4440-a7ba-c8325628e98c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf631e96-343b-4aba-b767-a7d84f5d8b0a", "sighting_of_ref": "indicator--80d4b071-aebd-441b-a315-8aa7d6042668", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36299b59-d119-4e29-931b-9e4e6e4401b3", "sighting_of_ref": "indicator--e7adb125-2191-46d2-bb4c-caeace2c093e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57168e1e-28c6-44f0-82aa-31e5db7a52be", "sighting_of_ref": "indicator--6966e2eb-9bcd-459f-9ae1-5d56cb5c82ca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9d0ef4-53d9-42aa-809c-9a560b3947ee", "sighting_of_ref": "indicator--6db98a86-97dd-4906-93c3-3b945e283161", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db1d045-3edb-4e06-84fd-cdef76b89fc3", "sighting_of_ref": "indicator--a3b48be1-33bf-455a-acbc-e478edd60529", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50aba911-7e07-426f-8f06-d7f4eea73bf0", "sighting_of_ref": "indicator--4aa3538f-b666-4ba2-ac4a-37d570c3b934", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53815ba9-b959-4300-ac96-1a77748b92f2", "sighting_of_ref": "indicator--885de93f-046b-462e-9a07-2c4c3c511862", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b98c32-db36-4dd4-ad85-58c3f8bd1d1a", "sighting_of_ref": "indicator--0799b446-ee5b-43f6-a642-2caab1344487", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7add7097-d932-47ff-b82d-987849a7ff72", "sighting_of_ref": "indicator--bb1ae87e-5794-433e-998a-9f8d7cef2c66", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d3c606-fcd9-4936-867d-acf26d92b6e0", "sighting_of_ref": "indicator--7cf91ea0-27c0-4fd0-8990-4683b2060fe9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61137315-9ba9-4709-aea6-8370cad86792", "sighting_of_ref": "indicator--865f7651-be88-4abe-9e0c-e6b4bafc0c3f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6b762a-a47e-4d2f-8e2a-a9e2c743ac16", "sighting_of_ref": "indicator--6a94e7e2-c2d0-41c5-b1a2-fed469a1de88", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba31e93a-0b48-40dc-8293-be55ebfa5562", "sighting_of_ref": "indicator--0f0f5fcb-f211-4e79-9316-4c6ce2461790", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9038fed5-50f5-486b-95c3-0d468114e134", "sighting_of_ref": "indicator--3cc7bcff-4a8c-4ac7-a0d4-58cd258582a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08925d1-79ff-4361-ac02-86b3ed35cb93", "sighting_of_ref": "indicator--e95b0808-50c7-4998-b482-5a59dca7cad6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89809864-d408-4ff3-af10-f1a07ad5d00c", "sighting_of_ref": "indicator--365bfdaf-4a87-437e-a798-5f28ec7c695b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f38f39-80bf-4d63-9865-0453357edf6d", "sighting_of_ref": "indicator--c94b838a-4c60-4af4-8c3c-b460c1cf06cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c538a104-02b6-4a5a-b0a6-6d145aaa1479", "sighting_of_ref": "indicator--663a7ab9-ce03-4c2a-97ae-55c8015e239b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84dadae2-b104-4162-90ab-59dd9054789a", "sighting_of_ref": "indicator--667b3a26-cf9c-4b1e-bb7b-718a3984eace", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6f3d17-d9cf-41c1-b513-045dd4b65371", "sighting_of_ref": "indicator--02883391-5df9-486f-8f66-8ef1bf54edbc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d9512b-781c-4fe5-98d3-dec7563c50db", "sighting_of_ref": "indicator--ebdd83e2-9b30-4a7c-9b5e-ba13e65c21e4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ac15f9-523e-4773-9ca6-187e030f04a2", "sighting_of_ref": "indicator--9c6b72fa-aa38-4d15-8b86-e1d437d6fd5d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da12c7b3-e0d2-4059-b426-ae5df67e83ff", "sighting_of_ref": "indicator--a6aa528f-dbf4-4466-93bf-d8804e05439c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69217179-1dba-438c-b015-3c5fa5f2fc35", "sighting_of_ref": "indicator--aca1c160-b6ba-4691-91d2-0c14c2d34662", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9e223e-1e6f-4953-94cc-a7e3e4dd30b5", "sighting_of_ref": "indicator--a92d3d43-9850-42ab-8f8e-c652116114ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff4df19-4de6-43db-bb03-36c3f68a926d", "sighting_of_ref": "indicator--44a34f90-34ff-4cc6-928d-fad1ef69e85c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd719ada-ebe5-46b1-aa73-b13ab034a432", "sighting_of_ref": "indicator--5a7413d3-af7e-4330-a8da-2c279457d06e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d937e00-2989-4160-b9a3-5c47d7501d0c", "sighting_of_ref": "indicator--56595549-9187-4a1b-9205-f580f0bf03b7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b186d7-69fe-445f-abbe-8277bdd4e59f", "sighting_of_ref": "indicator--9dfe29e6-345d-4b1d-8246-6830ee899e13", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8dafbb-9653-4756-bbda-acafa2e34f25", "sighting_of_ref": "indicator--3f497889-6858-4beb-a54a-0709595f68a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c99eb6-a235-4cec-8618-d0e738641452", "sighting_of_ref": "indicator--061348c5-9fd3-42ae-ac9a-2266de80ecf1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a278af-8489-4462-85fd-5a7348db82a8", "sighting_of_ref": "indicator--aab30b1b-97df-4b02-ab20-d0474772d01f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8da1bf0-88a6-4a0d-88be-37ebdd2edb87", "sighting_of_ref": "indicator--342341fb-e464-44ca-ac59-75ac72811195", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c51811-1441-4762-957d-adf1dc77af1e", "sighting_of_ref": "indicator--214282dd-1ed3-49c9-bf99-6703203423b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa064d8-442f-4d95-9167-3e20944a2fde", "sighting_of_ref": "indicator--2566865f-04ed-4f49-8583-085fb35b7c66", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cb1680-a5fd-4df8-967f-9a5d6f9144d7", "sighting_of_ref": "indicator--c4a15bc4-d3f2-4ccd-97f4-b46083643a43", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea67b4c6-d908-4872-a4e6-d102241c92d1", "sighting_of_ref": "indicator--dcb582a4-dbfe-4b37-befb-900fb59334ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926ba8ce-1fd4-4ccc-9073-f5b3b0a9e605", "sighting_of_ref": "indicator--8a422015-7f28-4be3-b03e-136519bf00c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4982b87f-7738-4be6-86bd-6c148e9aebb2", "sighting_of_ref": "indicator--f32f6471-ba83-4e43-9014-563d056db858", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ee9c10-86e1-4d4f-812f-b526a52c4a88", "sighting_of_ref": "indicator--98444bad-7773-47ea-9a7a-f17c4dc1c143", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923aeb5e-1c92-41c0-9b8b-41baf173a75a", "sighting_of_ref": "indicator--7dee0a2a-3cd1-4bf2-b5e9-bad9d6f4e107", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493d00ac-9214-4ea9-bd33-e871b5a19bde", "sighting_of_ref": "indicator--fdae28da-2986-4e9d-b759-d387cae76398", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7039821e-d280-49ed-b632-bc576f3970f5", "sighting_of_ref": "indicator--61dbc78b-a565-4b85-8c87-1c9813cebd7a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dd8cb2-acf1-44fe-a85e-96e9f870b748", "sighting_of_ref": "indicator--7bec3b41-7d0e-44d0-9bf8-1d0e77638093", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f771cd7-a658-4ab1-a28d-aab78ef51a32", "sighting_of_ref": "indicator--9edc3f3f-c7c1-4f0d-b3cb-fb883d7b8076", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f893bee-0ead-42c9-93c0-4ee97bc3f9c5", "sighting_of_ref": "indicator--421cae7d-6fd0-497d-a6bf-0f9048f899af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaae5e2-c581-4e54-97a4-afa1092c7d9b", "sighting_of_ref": "indicator--0821505c-cbdf-4d04-bae2-56d11fcf203b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced76fb8-6d72-45a0-9a87-cdaed4787953", "sighting_of_ref": "indicator--92bc8243-9622-4eef-bc48-154594b106de", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19089b66-a732-46f9-b657-4902ff555d6b", "sighting_of_ref": "indicator--008fdc35-9b1c-4657-b462-1889342c3870", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd06c71-6370-4634-9331-0820fec31716", "sighting_of_ref": "indicator--56458648-b7e5-4b2b-9cd4-9d7ffcc97b6a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacc5a29-41a1-485e-b782-49be7f090f7e", "sighting_of_ref": "indicator--f8afd74a-f7ca-4d8d-bbea-1a744715a6d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15388160-cb44-46a2-b0eb-34368299f5e0", "sighting_of_ref": "indicator--98cb58c3-0212-448c-a568-66a1e10c4762", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e7fe3a-23af-472f-94d3-2b0550a0bf9c", "sighting_of_ref": "indicator--7f019d49-55fb-4b6a-8a53-e016f87b3ac3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6f1bc1-876f-4b5d-bb7e-78e6dfc556bf", "sighting_of_ref": "indicator--2cad5382-b609-477d-bd08-b8fbf58d02ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f6b539-9451-44db-bd68-f7acde7a5050", "sighting_of_ref": "indicator--df0d8a69-a880-4557-9b40-83dd8c62e3e7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e06247-7bb4-4b12-8d7f-285100a9af42", "sighting_of_ref": "indicator--576ef262-0296-4e74-ad80-1aa782d64951", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0330fb-572e-4902-9ed1-e15f94106902", "sighting_of_ref": "indicator--0801d1d6-4f2e-440f-8d75-47320c67a6dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67589f40-97d8-40ba-9257-6950efa6a14a", "sighting_of_ref": "indicator--4ef55477-bd95-46d7-bf12-b96732f1eac4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8e3d7c-7a9d-4e0c-a58b-7627664a6c58", "sighting_of_ref": "indicator--1c9afcbe-7517-4538-8d4c-9088cf6552bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6340b80-9eae-4660-8f42-1d121fd77dce", "sighting_of_ref": "indicator--d59837de-e85b-4caf-959d-03c4067a29bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2198a3cf-52c0-48c3-9e79-37cbfad03d72", "sighting_of_ref": "indicator--d641e5ba-bb89-4861-9de1-8c08fc04edfb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b977ac48-4510-4253-a4cc-36a00e36d143", "sighting_of_ref": "indicator--4083861a-65af-4298-ad1f-792df669c58c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0488f8-b936-4231-b4f8-eb3d1f04b872", "sighting_of_ref": "indicator--8d56e5d4-3fd5-4ef1-b056-df9b35c0dbfd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a561d761-8efc-4633-a2d3-289cf27d9da6", "sighting_of_ref": "indicator--fb201d1f-d22a-42bd-8ea7-74c8d6208eff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84195f80-cf9f-45e8-812f-8e434c30275d", "sighting_of_ref": "indicator--44b8fe94-b979-4edc-a6f6-0e0d4bfa6503", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da14ff09-259f-4546-9e39-28c84c186266", "sighting_of_ref": "indicator--01ad950d-bb8c-4cd0-b57c-13d5b6f32089", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e0a01c-071f-476f-808b-c2a576caf958", "sighting_of_ref": "indicator--5883f8c0-a36e-4a1d-9759-c27c9f104af4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd5d218-aae7-406e-b40a-f71a376e275b", "sighting_of_ref": "indicator--10abfedb-268e-4212-b03b-ef8ed8bdfddd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a34375-d563-4421-96ae-6bba2281ae32", "sighting_of_ref": "indicator--42afc082-fed1-44e0-a9dd-021a3366e742", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec32ad1f-ebeb-43db-b3cd-7f3e86a4b1ae", "sighting_of_ref": "indicator--aa9d318f-9a17-4565-9f03-0ac52e2f74a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa45991-5a57-4035-9847-8dc3245682d6", "sighting_of_ref": "indicator--330e7fd6-91d2-4818-b6bf-de41266d4093", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4686b4fa-a2a4-4aaa-83ff-9f9d8e376857", "sighting_of_ref": "indicator--4c485059-0d48-43cb-a2aa-45535995d098", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd3bb7e-a58d-44d8-b3a3-b709b2e40ebe", "sighting_of_ref": "indicator--5d51a19b-c153-494f-884f-b31603e49fbe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1984a2a9-8c8a-42d8-aed0-d11274a6e175", "sighting_of_ref": "indicator--2d5e8426-d760-4763-b832-181d6c36b0a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a53b4d-c045-44a4-a585-9ae6eace3217", "sighting_of_ref": "indicator--b6098ddf-2c81-4c60-b133-bd4924f98cff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4859f0f-0619-4319-9285-ee28948bcaa2", "sighting_of_ref": "indicator--c4f9b5c1-4757-4220-9387-4908dab5b496", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91227741-fcbd-43e1-94af-bb247e49ec98", "sighting_of_ref": "indicator--7552b125-63be-49c8-b403-e470810c8448", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05df204-8364-427b-8579-d89dc726f874", "sighting_of_ref": "indicator--d4f84a10-775f-41fd-bc01-43bb955a0754", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d85921-f275-4eff-bdbb-58e155a83b07", "sighting_of_ref": "indicator--36b3e17c-4614-4914-92fb-f01ca65e3aef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e261d769-4942-46ce-90fc-b946b008b1ea", "sighting_of_ref": "indicator--c7a08924-1d9f-4dbc-9ca0-b1e8ff634706", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2761ea4e-e0d4-48ea-86bc-f60a1c290ece", "sighting_of_ref": "indicator--956f388d-0f65-48bb-96f5-5bfa2322589c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96442b73-79d9-4dcc-b354-d6acfa383fcb", "sighting_of_ref": "indicator--a677b6a2-5586-42a3-ae8a-4db90b206f8f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085dadf3-39a8-46ad-bb6d-735599ca474f", "sighting_of_ref": "indicator--49032395-ab02-4a00-96bc-a28f8771bb68", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f96da9-af73-41be-aa53-b44adc71e4df", "sighting_of_ref": "indicator--8fe2d78a-e644-4495-8b5e-e5401a8a85e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d429d088-d5a3-4082-b905-bf022652bdea", "sighting_of_ref": "indicator--0073b697-3ee7-43ab-9438-b70bd30d6205", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f09fdf2-2d25-4ad6-9931-bd07890a8ab2", "sighting_of_ref": "indicator--2f4e77c2-3983-46c0-ab16-d47b9556675e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff893d73-c111-4fe0-9b5a-dbe3e436ee8e", "sighting_of_ref": "indicator--a1c2ff0b-81e8-462b-81a8-2b6cc51352dc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3897328-9a93-4f64-845a-97722ccd94cb", "sighting_of_ref": "indicator--b128a59b-7e3b-4d1a-b2e9-5ed80604a2c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09e6d33-337b-4556-8340-7edcb8060de8", "sighting_of_ref": "indicator--39ffc2b0-86db-4fc0-8034-b25dea2908fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6881ef1-97b4-4360-b781-14ed2e31f9e5", "sighting_of_ref": "indicator--011f3fcc-0ee9-4fb6-b7b0-baa9663d3e12", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d631c40-8905-41f9-9e95-858758a61488", "sighting_of_ref": "indicator--34883a77-f0f4-48d8-9335-f6dbaade746e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7634fd89-4934-45fc-a7c1-c50aa8abf958", "sighting_of_ref": "indicator--1db35bb1-ce79-4bde-b028-e1974cccf9bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6752d49-2464-4aac-935f-7da52f1b7be9", "sighting_of_ref": "indicator--c74c8a4b-3ea4-4887-885e-1fa495487884", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d49d7e-5674-47f1-9b46-ee7af8e15c67", "sighting_of_ref": "indicator--9e7c7ce7-d380-4239-b568-1fca0adaf218", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03a1c60-9386-4af0-96bf-013e98a0f930", "sighting_of_ref": "indicator--26cf0076-467f-45b1-8048-b41e3fa265a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93455e1d-7a5c-4e65-8097-b561a2f296b2", "sighting_of_ref": "indicator--24aecffb-2d9b-416e-8b5d-9c67c993af34", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc2ff95-fb4e-437c-bc09-ff33a051970d", "sighting_of_ref": "indicator--e66424b5-f8e2-464d-8227-ed7d53115748", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5370807b-696e-438a-b9d7-2c25ed823954", "sighting_of_ref": "indicator--38727149-f2c8-41af-b98e-ddc68a7160f7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755ff37b-33cf-470f-8352-0a2bcf677a86", "sighting_of_ref": "indicator--713b4daf-80d5-4883-a33a-8ab4cfda9c69", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d797878a-b30a-4eb3-940e-6b55731d6938", "sighting_of_ref": "indicator--14dd405b-7432-4dcc-a62d-5344f052efc7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb6605c-2a22-4034-81c1-d46c79a1387e", "sighting_of_ref": "indicator--6e2d2b3b-801c-477c-a821-83e140e4234f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157b8c95-1c41-4de2-bbdf-8b2ab2dd8370", "sighting_of_ref": "indicator--7a957b84-c865-458c-8f45-2e14f899ada3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e58ccb3-f391-496b-bce5-886a99a08741", "sighting_of_ref": "indicator--40b92135-426b-4ac2-8a91-15423fb2cb39", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41de294-7318-4899-b6a3-e1ba116869ac", "sighting_of_ref": "indicator--7b1253cc-ad20-4265-b755-9dc45fd49f4e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326d50d6-333d-4bc5-bd0e-3c088784f1f3", "sighting_of_ref": "indicator--1123ea49-60ba-418c-8176-72c0326b91e0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3752c47f-7a3f-4d93-9c02-3ddfd49c3c21", "sighting_of_ref": "indicator--565920f9-e39c-4f16-bad4-f022886c5225", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a17478d-bce5-4812-8a96-4fc96f078064", "sighting_of_ref": "indicator--f482d596-bd08-4b30-9565-211c95b98c83", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5e973b-fc0e-42da-a22d-78f9f66b7391", "sighting_of_ref": "indicator--6d3c928e-ed84-489d-8fc4-f8b16a09dad7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb9c8d4-ba99-4d57-bd8f-5bc4eca7eea3", "sighting_of_ref": "indicator--b058aeef-37b4-4444-bb11-8b74d1e87399", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7def2022-6588-4c97-b64f-a890e898167e", "sighting_of_ref": "indicator--b867d018-1053-46e3-936c-2a85ec600e47", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecf52b0-53b7-49c6-83d4-7d4964477e52", "sighting_of_ref": "indicator--da51100f-98d9-4456-8457-7d917c364474", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c29def-eb2b-4861-a9cc-19d33c6f7789", "sighting_of_ref": "indicator--237ff243-2f18-42fa-8b25-a4d4a7ec5df6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e2d47a-b9dc-468b-ab34-bca1fe4a6b39", "sighting_of_ref": "indicator--801d4a22-f932-4f5e-8a88-556f2af89548", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d630a281-13ad-4665-9345-8bc668adea53", "sighting_of_ref": "indicator--66abf691-4982-4da6-9665-0fd1eb391a23", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8638c1ab-7489-47bc-abc8-1f1d6f8b762d", "sighting_of_ref": "indicator--feecd9a8-5460-4176-936d-49b996c49a09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3af1e74-0369-407e-8705-892863ca067a", "sighting_of_ref": "indicator--79c5b59d-a60a-403d-9ad1-1486b564c606", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a7e491-2b87-4af3-9d86-f5917d4f1292", "sighting_of_ref": "indicator--af86d434-4ffd-42be-b63a-cf8311dd2658", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1deb212-696d-4cca-8a55-ad3738205c76", "sighting_of_ref": "indicator--59b97d88-239f-4974-98e3-9aec86a5a7d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc886b6-7a3f-4145-a7dd-75fc8be81cc3", "sighting_of_ref": "indicator--3c7576a2-d1a4-4b09-9670-ebc079780885", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4936d9e6-0485-4085-a6d5-697b08ef6b1c", "sighting_of_ref": "indicator--3c197a68-63ff-41da-b190-e68d192ddfcb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e281a48-7f2a-460c-9846-650b341844f9", "sighting_of_ref": "indicator--870939a4-8c92-467e-8205-d663a7ecad0b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cb56e3-cfd5-4ae5-9c20-50105c8d2a28", "sighting_of_ref": "indicator--354d51be-aed9-4f04-9559-bb6721cfd4f1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9e6b75-c403-4f19-8c6c-20010982f052", "sighting_of_ref": "indicator--86adad8b-2867-496f-8efb-947ee25a0406", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c3a0eb-1675-469c-a2bf-b90ab5047fc5", "sighting_of_ref": "indicator--ef7639f4-3038-4da7-a9d0-e761c50edb52", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3391100-8353-4220-9e62-4c3ce77f059a", "sighting_of_ref": "indicator--88deb54d-f3a0-46bd-aad6-a9aabe36019b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d72cdd-d6c1-496b-9059-51522ae22702", "sighting_of_ref": "indicator--a261f3ea-7400-48a0-8b8f-64d1be685366", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2e3c3b-4ee1-4ca1-a6dc-5b45947e819e", "sighting_of_ref": "indicator--d1ee92bb-268b-426c-b0b9-e5c82d0e9c17", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b30df3d-33e3-4132-ac0a-0870c92e38f1", "sighting_of_ref": "indicator--63192784-7abf-445c-ba52-0aee73cc7c9e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae8c449-c762-45c9-82ca-f758738ffe28", "sighting_of_ref": "indicator--31c86818-8524-4b80-8e1d-3e5b0e94b017", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de105e0-aa46-4885-9a91-0776f4a728ee", "sighting_of_ref": "indicator--d3283aa3-fc6f-428e-a6d0-85bc55412957", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24c3396-5a5c-4e32-bb6b-dc4654f9b5bd", "sighting_of_ref": "indicator--39f5a474-f026-4de1-a36e-d4b494c63f7b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a50c25-f4e7-4561-8a8d-e27198152266", "sighting_of_ref": "indicator--055d5c66-1ddc-49f2-a455-06dfc0f61309", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0910b39c-8f88-43f8-abba-73a00a6a972d", "sighting_of_ref": "indicator--6f6f886b-548b-4c4d-b8c7-3d1eb26ced07", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daba1a9b-e913-483c-a680-62ec8b9180f2", "sighting_of_ref": "indicator--e53fde2d-23fa-4838-bf7b-cae4be228a3e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef39b228-a330-4976-a62f-b997f15a5670", "sighting_of_ref": "indicator--3fef25db-3dbd-4329-9dbf-6a344f957cd9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee991ef-8d75-438d-8f1f-a4993098ea3e", "sighting_of_ref": "indicator--86312078-8510-4c37-970b-afb3081cf39b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7023bf-0f1f-4178-9dc8-4c5144d8ff55", "sighting_of_ref": "indicator--e9d27cf0-69e8-49dc-bb23-92cc4a2dadef", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c7a4d3-639b-4924-8dc1-85e52376e1ca", "sighting_of_ref": "indicator--fc4e5909-d12e-49ee-aa2e-f2319bb51d95", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320eabb8-0e16-4afe-bbc4-220c1b4640aa", "sighting_of_ref": "indicator--b51d706e-d8aa-4e4a-9d34-17a075498bb5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5e4e2b-5146-4926-9657-6c2cb7abe28b", "sighting_of_ref": "indicator--212d0c10-888e-47fe-812f-b4c7e3a2077f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a4577e-bb00-40c2-bb97-3cb19da7188a", "sighting_of_ref": "indicator--b640d621-7aa2-463d-bba7-e237954896fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a68c9d-f822-4483-bf35-d79659fe4de6", "sighting_of_ref": "indicator--2d603f76-78ec-4dc6-ae20-fc3aa91ce1a8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ba2a4a-dff7-4e52-88b3-ec37a0f3df70", "sighting_of_ref": "indicator--39f39e9d-d2c0-4d30-936c-374449f9bf25", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a007c22c-a79c-4037-891a-9a0716cad835", "sighting_of_ref": "indicator--b1f2d060-dc38-4756-a369-63abafa21b11", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4785b46-fb49-48f1-87f8-dd20f9c190a6", "sighting_of_ref": "indicator--4eebe466-9c6a-4025-a5b0-dc42eb8ba983", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a095bf-e665-4eaf-9bca-4bf8a48133c2", "sighting_of_ref": "indicator--756cabf7-b24c-437b-bdb1-75045c648721", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf056b4-7970-4f87-b365-088b3ef388e5", "sighting_of_ref": "indicator--46874872-6258-4acd-8061-7d52146058c7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a294354-29ac-49ab-b485-fdac4cc6f409", "sighting_of_ref": "indicator--6168ae40-dea9-40ba-8c08-c6a3c8dcb0d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a254664-c3b0-43fa-9a05-c92019232960", "sighting_of_ref": "indicator--525e6339-a359-40b7-9b32-d1bc57a1e0aa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ee4a63-6609-4182-9284-275315e5eab4", "sighting_of_ref": "indicator--238a9542-941c-4505-9cd0-5dff23eb2eff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddf54a5-b917-4c81-8dca-f173da752ce0", "sighting_of_ref": "indicator--c8b07ab0-3c01-4087-affe-3966d5d210d9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b117bc-3593-4388-93ab-a716a4a756da", "sighting_of_ref": "indicator--7d87e38c-436c-4ada-9b4d-0e8099eb948c", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe04da6-5c6d-400e-9e1b-8e04c3195da0", "sighting_of_ref": "indicator--7d87e38c-436c-4ada-9b4d-0e8099eb948c", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264cc5a7-23ba-434f-aaf1-fc2835b92b0c", "sighting_of_ref": "indicator--a405c07a-3e49-4414-9c3c-e81cabfb2b50", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b94fd9-7f07-40e3-907d-e6a605b7709e", "sighting_of_ref": "indicator--a2cb2b54-cc7d-41d0-a56e-016bce0b6e8e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def24f05-95e2-4ef6-a088-e09a2153c157", "sighting_of_ref": "indicator--f6c0b8f0-a380-4acc-b828-b761204ebe99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33db708f-fab6-4f4e-aaca-84d4ee2123ab", "sighting_of_ref": "indicator--3f490b6e-d565-4ca5-8b26-e46bbd1ab7e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a11ca29-d917-4e62-9533-2a7e204d7062", "sighting_of_ref": "indicator--86bd2a67-076a-4151-b21f-da09d7237473", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2b6a70-63b8-4536-ae42-2feb04aa10b3", "sighting_of_ref": "indicator--61c4a6cf-d209-4b66-81c3-d0df726fdc14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562dcea2-dd46-4416-9d08-4bacfa924a76", "sighting_of_ref": "indicator--ebd272a6-0d91-4537-8911-9552c9e43e0e", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8a2f00-f0ef-4ca5-84ed-51cfc5cc02cf", "sighting_of_ref": "indicator--149b5804-169d-44bd-8d61-f9605146a6ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351ea204-3745-41ff-a89f-ed08009ad1e5", "sighting_of_ref": "indicator--b3e0e11d-86f4-4ca8-a11c-219ea3cb56ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af53a76e-8d74-48c6-a0a5-aa9f178cee18", "sighting_of_ref": "indicator--5562cda0-a2b3-4e5d-8579-65751844b532", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9872838-8106-4fde-bd96-88534822c31d", "sighting_of_ref": "indicator--3ec6721a-84dc-4cbe-80c3-16afdf23e27e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27097356-75d1-4799-9941-49b89ac43f00", "sighting_of_ref": "indicator--c37a206c-b740-411c-a630-d58f9cf67a15", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c2075d-79b5-4a99-96c4-e16b3636fe5e", "sighting_of_ref": "indicator--c1c3b0b0-6925-4504-b39f-0c765160276f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e2139a-8d7d-4413-bb30-1dc0a0e3664b", "sighting_of_ref": "indicator--d8db73e2-2fdc-4b52-a8e7-b54ea285a785", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e5359b-e07b-48f8-bebe-4f652c7a0381", "sighting_of_ref": "indicator--7566baed-8d9e-46e5-a7a9-2d3bca0b7208", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc563a9-871d-4ec4-88a0-23b3af8147a2", "sighting_of_ref": "indicator--e6a3e17a-556e-4068-8bff-8359145ee02f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26aaa13-4df1-4e93-b90b-81ccc8b0be06", "sighting_of_ref": "indicator--c04f2b31-1413-42d6-a6a8-e542af28f923", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85177454-e361-44db-bb51-51b5e0852e2b", "sighting_of_ref": "indicator--0e57b67e-0e6d-409c-92c4-d51087deaa84", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a05a84-520d-4941-85c0-7c5a83f26f79", "sighting_of_ref": "indicator--2fdb8f90-22fa-4b0d-af7d-48251225f28e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922bc52d-fae7-4905-af76-511e302df9de", "sighting_of_ref": "indicator--1e7ff422-6e74-479c-ad31-df5951fe7e91", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984edac1-d8b4-4153-8ed0-578da7430d85", "sighting_of_ref": "indicator--edefcb3c-0342-4695-a8bb-87656ce66953", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211d6157-1919-42e0-b516-a6d30f26a2be", "sighting_of_ref": "indicator--d63b0af5-5d22-454b-8a49-1ff6ba1661db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f133016-4c21-4df5-a431-5b3e0777a043", "sighting_of_ref": "indicator--c167629d-6eea-402e-ab3f-abbedced981f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eee138f-65a5-49ff-a9c6-1c688da32eae", "sighting_of_ref": "indicator--c167629d-6eea-402e-ab3f-abbedced981f", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cde3fd-a8a2-440f-a79c-d61baafd92b8", "sighting_of_ref": "indicator--c167629d-6eea-402e-ab3f-abbedced981f", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd328f76-d67e-408e-8277-776270bd08ae", "sighting_of_ref": "indicator--255cf4ba-199b-4cd1-81d9-b13c91953c06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3aeaa8-d50f-4e6a-b503-c08113d5fb67", "sighting_of_ref": "indicator--58c58f0b-5965-4c96-b491-df3a0ccf7ec9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0beb8381-caa0-412b-96c5-f69d9119fa67", "sighting_of_ref": "indicator--2893299d-d5c5-4cc2-821a-bae53718e3df", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bddf10d-34b3-42a4-abf3-1193feea4734", "sighting_of_ref": "indicator--4688cbf8-35f5-4aa5-b612-192ed1876705", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68ab464-8455-4263-8c59-28539c708adc", "sighting_of_ref": "indicator--2011be92-f1ea-4761-bbee-53733475b717", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0b5806-98d2-42ac-a26c-8d870725cc67", "sighting_of_ref": "indicator--707b5d87-eb21-490f-a40a-f1c64cd894d6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8fc7f0-8560-477c-b007-53f4f8adb1b7", "sighting_of_ref": "indicator--67f81aa7-7d08-4ece-a120-33a9467e8dce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d5e7f2-6158-4fdf-bb4a-ef7fd899ad90", "sighting_of_ref": "indicator--bcd0180b-b03c-4a91-a121-186c616e9540", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894a65ba-14ec-48e2-a32e-24de4a3f3d72", "sighting_of_ref": "indicator--8cbd1737-460c-4777-beaa-ea3f658481ba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78615ef6-d7fe-4e76-8184-1f1342a37faf", "sighting_of_ref": "indicator--22538bbd-20e1-43d7-a6cf-f040486b1cd8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0443a090-06ac-416e-8a0e-9b845ed29d32", "sighting_of_ref": "indicator--5cd78dc8-685b-46e7-830a-e7509e0feb32", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005fc90e-8ff7-47cf-ac2f-0a13320ccec7", "sighting_of_ref": "indicator--b81c8eec-2829-4da8-890b-b3dafe8e7c3d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95485812-41bc-45e7-9e54-2ba75530a6c9", "sighting_of_ref": "indicator--ad640b0d-deda-4840-81ae-ceca325bbf91", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb41c04-406b-4e0b-be71-03af059e83c3", "sighting_of_ref": "indicator--06bd4b0e-159a-42ae-bc4e-11d08ad7b4ad", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22130123-f8cb-41e7-8a96-5f99089d7818", "sighting_of_ref": "indicator--735dc7d3-64e1-4aea-8127-1ada61b3d1da", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605c67af-9a6a-4b4e-9d95-feac0ceb4e67", "sighting_of_ref": "indicator--f2173b22-29e8-43d6-8400-2d1efbc5b79a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43783d3-a6c4-4468-a552-17d60d7aa0fc", "sighting_of_ref": "indicator--8eff44fd-236f-4e43-9697-63df29d6bbe2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b185f64-3a95-4dd9-be5a-d7bac7610d71", "sighting_of_ref": "indicator--f0baf725-3b69-406a-9c44-57359591a1b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7622f11c-1115-45fc-bcb6-57b732ffa322", "sighting_of_ref": "indicator--d1cc018d-e229-442c-8473-c442a3cafcec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665b9f03-d799-4250-9435-9dd950f55f6b", "sighting_of_ref": "indicator--f4e3446b-0d6e-49b1-a842-10307a21b124", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffca41ec-a788-443d-8044-a36390733a9f", "sighting_of_ref": "indicator--2e1fd080-605a-4449-85d4-82360091d08f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c20e195-1d0d-4116-b635-ebcf979af937", "sighting_of_ref": "indicator--bd230783-be53-4d8d-9448-dc8da39993ae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95bf3bc-ab8c-454d-bcc2-04c4de4170e3", "sighting_of_ref": "indicator--074a777e-d24d-4e59-ab26-6afdcd72b0ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4ded99-77f3-420c-ad9d-4a010643d467", "sighting_of_ref": "indicator--fc85ba96-996f-4b1a-b02e-bd13a381088c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5364fa1-1801-45e3-b8ce-ea5bed1c7020", "sighting_of_ref": "indicator--9629f76c-29f0-4b6e-9bea-1ba6fd0be4f8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c4e1b8-dc7b-46b1-b106-4edebedeef22", "sighting_of_ref": "indicator--206c6dd7-0797-49a8-b963-91ebe5617453", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1d6b44-b9b1-4faa-bcb7-4c3afd4ce2f7", "sighting_of_ref": "indicator--68a12bbc-15dd-43c2-8920-3b4a4990de0f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583b12a2-0709-44d4-ab9a-e114ddef2f0a", "sighting_of_ref": "indicator--8548735f-b43c-42e4-9e4c-91f952756b38", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1990c7-a6f4-40c7-a55c-ee31f5544bcd", "sighting_of_ref": "indicator--01be3d32-a2ea-4a82-b74e-d7bf1b71c185", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31865f9a-bdcd-4dd5-98d9-abe07bfea934", "sighting_of_ref": "indicator--9fa6c2e2-6584-4d8a-941c-0e505109ffec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee464bb-59a9-433e-ac91-8b845b343f7d", "sighting_of_ref": "indicator--83997756-a66e-4ad1-a1ca-31737802ee9a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86134273-fe8b-4830-9847-84144c7b51d5", "sighting_of_ref": "indicator--b407d5f9-88cc-4c58-b270-5ac937af5993", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2023b9e7-f8e2-43e1-a360-5bb3133cf4d9", "sighting_of_ref": "indicator--907982e2-4765-4a35-b5e9-f70bf81bfb63", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e964f49-8348-40d1-bcf0-cfaff7a4e2ca", "sighting_of_ref": "indicator--e2108d37-6a0a-4907-a433-0913f27378d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4f0b93-e4ea-47c5-8799-9e462a22db36", "sighting_of_ref": "indicator--b3be3c5d-1494-4adc-b1f2-8fdc30fafa7d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f341df83-25d2-4e23-bfc5-68e2901817e4", "sighting_of_ref": "indicator--7f5c396f-bec5-48dd-bf21-ca138a72a8ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba570a7-e6d8-4dda-b1b0-a4b98fc1c120", "sighting_of_ref": "indicator--e4623ca5-03d4-451c-b316-cb83020cda4c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7816c4b8-327c-432c-9029-84cb88402d15", "sighting_of_ref": "indicator--7cb92956-4001-4867-b063-158e8f914b7f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebb488d-42fe-4555-9a44-0d358ef6fb05", "sighting_of_ref": "indicator--ae2f2ce2-59d5-495c-aef3-43cac7efd15f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9889da-2d81-4372-a822-4eb7a7eff72d", "sighting_of_ref": "indicator--faac6572-53fc-4bfa-a803-a88ed439118f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be388f64-f814-4722-b0e3-c3cb063e5787", "sighting_of_ref": "indicator--6aac4f66-de95-41a9-8483-18b9c6d54040", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0524bbc8-1c14-4bb9-a3a0-2affd0ab35fa", "sighting_of_ref": "indicator--569e074a-a5c4-49da-9b38-3876bf00882f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177fa651-656a-4848-86d5-352cb80cb083", "sighting_of_ref": "indicator--26d1c08c-c9fe-49cc-b245-c7b30a766e1e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff003c3-9bfa-426d-a69c-0606ae58e06e", "sighting_of_ref": "indicator--36cc1e1f-d101-42e2-beea-64dadfc03685", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45b3686-f948-40c2-8a7f-008d78fdc05e", "sighting_of_ref": "indicator--68091760-1ebb-414d-9c7e-2a34989c5c20", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3ece07-2341-4221-aff8-c37d61e9421d", "sighting_of_ref": "indicator--19afaac5-48f8-4a9d-917b-345e50751507", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f40a1e-a8aa-4f2b-8f51-6d4629ff6bc6", "sighting_of_ref": "indicator--f021ac3c-c5cb-4992-abda-c65fbbe38bb4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa427af-28c5-4f27-add4-0b6669797a1c", "sighting_of_ref": "indicator--8fce6a40-4087-44d1-8126-0ea7b103bc5b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0531b7-e922-4c95-a25e-8390f1a03d8b", "sighting_of_ref": "indicator--8fce6a40-4087-44d1-8126-0ea7b103bc5b", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c36f34-8f24-46f5-8110-eadcf7d07daf", "sighting_of_ref": "indicator--8fce6a40-4087-44d1-8126-0ea7b103bc5b", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1f8d81-94fd-4a14-999e-9589fa556d2b", "sighting_of_ref": "indicator--3eb5f41c-22a9-40a7-86d0-857a61ff12d4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f51bcbd-8360-488d-89fa-fbf7dcd8277d", "sighting_of_ref": "indicator--3eb5f41c-22a9-40a7-86d0-857a61ff12d4", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312ce690-1c73-4af2-85d8-f24fca58cfec", "sighting_of_ref": "indicator--3eb5f41c-22a9-40a7-86d0-857a61ff12d4", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1ab899-c232-4654-b430-74f1fb7da6bb", "sighting_of_ref": "indicator--c3cf0633-e34e-4a7c-9711-4ee84b0b8131", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81932a69-ee78-47fc-bce1-cb21b7bf7cdb", "sighting_of_ref": "indicator--7689bce1-a4f9-4458-9baf-955c4fb2b1ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e0f08c-b857-4920-975a-9b6716fd4e7b", "sighting_of_ref": "indicator--15ed9a52-a34e-477b-bad5-0d81f837d349", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4903d62c-5c22-4846-9ce6-50ed82def183", "sighting_of_ref": "indicator--4340aaf8-f9f9-4d11-a3e7-98722ee058eb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a76c2d-2b74-478c-bd74-8955663f923c", "sighting_of_ref": "indicator--be540da7-f0a5-47c1-87cc-d296a6a77f63", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8eb5df0-f85a-4df2-8758-7a420aab43fc", "sighting_of_ref": "indicator--86dc47fb-58ea-4703-96ff-0e8f17ea5a0b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e12d7c8-9d48-471c-96d9-4a1dd384789e", "sighting_of_ref": "indicator--f54ed2b5-04b6-4864-a5c2-81971b7b4e14", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd191e20-c88b-4e0a-a198-01977815d076", "sighting_of_ref": "indicator--0a3dc71d-7f58-4758-a92d-65e666e59e55", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086c7a5d-813b-4661-8a2c-6cefe47c4a62", "sighting_of_ref": "indicator--7618c0f2-2fdb-459f-a29d-9695d8269cae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edadec45-b87a-4f54-9bdb-bab72368024c", "sighting_of_ref": "indicator--bebc645b-428a-487b-8593-64b006f6e04d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1dc971-b2f0-4aa8-a47f-4e7b396b20cf", "sighting_of_ref": "indicator--dfb4d59e-7e6f-40a9-965a-d83ad173bd84", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb84532-58f7-4963-89b0-fc5659d759f2", "sighting_of_ref": "indicator--108de48d-7bd4-49a2-85ba-f5dfb02d7be4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4740340d-ecb7-4d9e-b523-49e4e671667f", "sighting_of_ref": "indicator--8f413d24-e53f-455c-881d-6c1a1aae4636", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5654887-b0ac-410a-9b15-f106447352b1", "sighting_of_ref": "indicator--5400c92c-c34e-4baa-a85c-13dcfeb6d9a2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f8a17b-316d-4b10-8430-86525d908ebf", "sighting_of_ref": "indicator--3c9729cd-b59a-4db4-a022-10e206f4f960", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a6c7e0-e073-43ae-b25a-2a33f9d32869", "sighting_of_ref": "indicator--8cab9121-56b9-49a3-83bb-21c2ef6ceed8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4d8088-0333-4d7f-8863-8bfd790db5ce", "sighting_of_ref": "indicator--89be5ad5-7ced-4113-823f-b155a204a135", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484308b3-730d-4a44-b743-23b41d5e6abc", "sighting_of_ref": "indicator--7591db17-ace1-4d45-98f3-6d8ecd58207c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82e82f6-cebd-4ab3-a0a0-cfde039a5491", "sighting_of_ref": "indicator--01470ab7-eaff-4a03-9fda-2419c60359b8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4529a05e-2854-474f-aa82-2931fe4469d9", "sighting_of_ref": "indicator--2482ab71-3387-4dc7-b35d-f41e31563f62", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32119b98-ff53-4d49-91d4-b78a09b97068", "sighting_of_ref": "indicator--e103cacd-076e-499a-a221-ffc45b256c80", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2398e01-dfc2-49e9-8dcd-9c04bc7099ea", "sighting_of_ref": "indicator--f280a908-0f0b-4ec6-896e-8bbe8464cecb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e966a34-dac0-4aab-9904-16094c0050bc", "sighting_of_ref": "indicator--dee7af58-5bad-45bb-8542-6387790575c1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0419619-51b7-4da1-a608-6c9938ddd0da", "sighting_of_ref": "indicator--77977c1e-26a4-43c1-a7ae-1baca07ce77d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688988c8-2ce4-4c6e-aa51-c59ec1032c7c", "sighting_of_ref": "indicator--3028a79e-2f87-42e9-9260-513df7c8fe06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f2adbf-5ac9-49df-b5a5-787770415675", "sighting_of_ref": "indicator--0ebb6a70-3f33-4368-8c5c-9dc93824a6db", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14840b9a-b5bf-4c28-834e-829ae3dc18f0", "sighting_of_ref": "indicator--461d8f6a-3f76-4441-ad27-3a1dbe71cc06", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27df99d3-ea93-4e06-a639-06a34b4961b3", "sighting_of_ref": "indicator--f917da4b-5327-4b0f-991b-9f85394209bf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c496ff3-4736-4e82-8ae2-d5f3f4c841d2", "sighting_of_ref": "indicator--d43299c1-df7c-4c92-baf3-a916869b20fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d27cadd-f433-49c9-805f-2470542dd7c7", "sighting_of_ref": "indicator--d23d1ad5-9714-4bde-8584-c181a31018c8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e583889-1bd4-4050-8e0d-c0770c55e46f", "sighting_of_ref": "indicator--ac4b92cd-9e97-41d5-bfe7-1141aa098bc0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fbf38c-fc04-4fe6-b8e2-a8587fe72367", "sighting_of_ref": "indicator--59fed765-385a-4b22-bd77-213e21ab6cb1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217f0b02-b1f1-450e-8e30-1a534171632b", "sighting_of_ref": "indicator--c09e5fa6-738f-4dc9-a865-24df39dfd4f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d6240f-d2db-44f8-bbbf-cda7c6a38ced", "sighting_of_ref": "indicator--2492355f-9e9d-4953-9a90-e3b0b3c9e833", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72ad5db-d4a9-48ec-899b-472699d4064c", "sighting_of_ref": "indicator--62f87695-f704-4e54-b63f-72a38dd9874b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08011a2f-714a-40bf-8c2f-ffe38a7dcc57", "sighting_of_ref": "indicator--10cfe7d1-b85a-4983-88a4-3cee9eaf9cb5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fba4e50-76b5-4eda-aeb2-cda311435f38", "sighting_of_ref": "indicator--75fb52e0-4d9c-4060-a9c8-37e39d02881e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd73ac10-eaca-47b6-96ae-b608c0a7a10d", "sighting_of_ref": "indicator--ce81541d-2edb-473b-87a2-dfe660975ef2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66148eed-19d8-4f5a-8e7a-62232e0778d4", "sighting_of_ref": "indicator--a103e60c-6e0d-47b1-aea1-8a5244785683", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7057ba6-75f1-445d-b876-ff7ff2bf5742", "sighting_of_ref": "indicator--15ab049c-8ef1-4148-abcd-fe5315da6224", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98006169-8860-41bd-bb08-c070e69939e7", "sighting_of_ref": "indicator--94829347-8ac9-4d44-95c9-43011df88702", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6343552-1856-43de-ad37-a6af9ee0d9a2", "sighting_of_ref": "indicator--a6d3aea0-237b-4e45-b218-86687915ef3a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0db7301-ddbe-4c2e-9aa2-48c6b635b95c", "sighting_of_ref": "indicator--e30b2739-f136-488d-9c7b-088809ec5596", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ab6d55-dfb9-4abd-98d6-b0b3e6caeb55", "sighting_of_ref": "indicator--7be3a238-bca7-4449-99e4-5334a5a0e52f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750366d9-98a1-43e9-a4cc-dfd884e9096a", "sighting_of_ref": "indicator--6c9ad5e7-28a0-45b5-a2da-92dfbfe3a2ae", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542fe10b-6cec-42e6-b5ec-95cbd79651b0", "sighting_of_ref": "indicator--94f62a10-2ef4-45b1-897b-ed9c0c1e954f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e93b81b-4ab8-459e-89a4-a7b25841b9fe", "sighting_of_ref": "indicator--113fa90e-6927-4d83-bc23-b3b7448bfe5e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb1bc0e-6437-4452-8979-97219bffc206", "sighting_of_ref": "indicator--4c290273-784a-4190-96cf-054245f68455", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a00bd3-5cf7-4785-ad8f-a309cd774330", "sighting_of_ref": "indicator--a2abe8c7-e39d-4770-ba12-eaa6258ce3f0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2025b8-9cb3-495d-a8e9-4a11360dc5b2", "sighting_of_ref": "indicator--1b44e251-1a97-4ee7-8f17-ea7d8b6e9f4d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795af2f1-4b59-4f32-ab54-5a0032362155", "sighting_of_ref": "indicator--301ea9c2-b95c-4379-85bc-cfa865d51fe6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b1b99f-3942-4201-9a2d-c56b3e092a07", "sighting_of_ref": "indicator--f576d503-b279-4ef5-9352-29c043117ec2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a75e4de-dd6c-45b8-b6ac-a1c78bb79a74", "sighting_of_ref": "indicator--77f41e5a-32bd-4e9a-86a4-356f4d15c030", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86456abe-a1ac-43b4-a992-08c8019be36b", "sighting_of_ref": "indicator--4a5f3caa-d9d2-4c4d-bc9d-35727d4b731a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1349640d-5334-4133-8ff6-607c4f6e4f68", "sighting_of_ref": "indicator--3d928ddb-823a-45fd-90ef-ee5286f138ee", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dab8a0a-fa03-4065-892f-074e8173bf04", "sighting_of_ref": "indicator--148ec25c-3e07-4cab-aa35-65ec14a7f165", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f9aec6-3a74-4e3e-a877-3b5e996651f8", "sighting_of_ref": "indicator--2399e830-af4c-46c1-88f5-0d32ad527ee2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b75fb92-6485-440a-825c-6f2bb8673dce", "sighting_of_ref": "indicator--5a45e546-74c6-4535-8684-e556fe8708cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f587cd8c-5802-4e14-b8af-695dc0d575a9", "sighting_of_ref": "indicator--3aadcfa9-b7cb-49c9-8fb2-0908149b5496", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ca5265-dc72-4890-b7de-6521153df776", "sighting_of_ref": "indicator--01b147cb-a17c-4465-9325-bc369af7cb6d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8340ea-d0d1-4afd-80f1-0e8a2305d8e1", "sighting_of_ref": "indicator--39499bb8-a30e-4571-9dea-ddc17e6bf5d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c694b320-eecd-480a-a16c-68187be76cae", "sighting_of_ref": "indicator--582a6ad5-06d7-44af-aa25-f8e60b2e27b4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca784aa-a89b-4888-b5d1-887a1baf83bf", "sighting_of_ref": "indicator--c3bceceb-7219-4b24-99b0-515904791d30", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a311e5ec-a872-4808-a304-6db20eb435b7", "sighting_of_ref": "indicator--b0a34c8f-5a3b-4fa6-9567-4769dcabf406", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f4809b-4252-4bd1-b8a3-f0787ac3e0ae", "sighting_of_ref": "indicator--7538fcd2-c67d-4536-9222-1b0c63ca59f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0363247d-ff1b-4029-9636-8130054d7e92", "sighting_of_ref": "indicator--ac7a8b15-a7bc-4d4f-b715-823c7f79cd5c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84347bf-a9ff-46e0-8dc3-9d00292b9707", "sighting_of_ref": "indicator--9c32fdb0-cb8d-4787-8693-3c4703d8a4d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d0f7b7-793b-4514-b044-856966ba6053", "sighting_of_ref": "indicator--39ca05c2-b6e4-4e1c-ae97-cf9b2d164f9b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c093b1-6bd4-4846-ab87-b2d58c2dad6a", "sighting_of_ref": "indicator--788bb80d-4193-4b9a-80a9-80f65ebf0440", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7902c6-e299-4fc7-a103-dd2db7e5ef9e", "sighting_of_ref": "indicator--a5e46fec-3def-4679-aaa9-7c227af6872e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2787d39-f9e4-43b5-9a2f-d3fc7972f47c", "sighting_of_ref": "indicator--57008ca9-2165-4d66-ad9c-2e39db9f3a6e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc93454-c0f1-4253-8058-f7bcec109f3d", "sighting_of_ref": "indicator--d0afa875-f74a-4d1e-a30a-d5dee2fc1053", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc4e692-dd31-40e2-ae95-a04dc291c2cf", "sighting_of_ref": "indicator--c92997b5-8433-4318-8063-c110a62b9c3e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b0d28d-cd25-4eb6-be5e-5e59010a0467", "sighting_of_ref": "indicator--9d3f7aeb-c3ea-4267-a98c-1772055567d1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c861b9-497e-4015-a5b6-4c635f313954", "sighting_of_ref": "indicator--d6e49d57-b2f1-439c-8f5b-f04dcfe6bee3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b790c9-0e7a-4ab3-b11a-d1c4a8cdbf06", "sighting_of_ref": "indicator--e1a23e0f-0410-493b-ab66-efb56923a1b6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4529d6-6f1f-4794-b776-c6389c1bd031", "sighting_of_ref": "indicator--abf8c861-bd26-4a7a-8d29-f0e570bb805f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279dc814-78f0-4264-bb8a-a7f995008bea", "sighting_of_ref": "indicator--4fd6dedd-8bf8-401c-bebd-c545d677d01d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f22558-06ab-478d-9039-8ea7a3e3e224", "sighting_of_ref": "indicator--db280aaf-f3b7-4acd-bfb0-afa3ab0f37fe", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d23a602-8b45-4e4e-98c0-8baa665b02fc", "sighting_of_ref": "indicator--9757174b-abec-4ceb-b08a-4edbb301ecb8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a2ff63-37ae-4caf-94d4-eddd2c7a6d56", "sighting_of_ref": "indicator--d4458f8c-dc68-44e6-bdad-2fe013c7d9a3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac20b4e-c28c-41cd-bfe6-98c0741fcc06", "sighting_of_ref": "indicator--46b72019-ce79-4087-a563-8a9e2a859780", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e12121-f429-471f-ba01-ef93c9bd3df0", "sighting_of_ref": "indicator--082ff954-4394-477b-852f-4066b3cfa259", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91582d0a-73a8-4d1e-bea2-4706a67a7200", "sighting_of_ref": "indicator--3bd4a2c2-48d0-4eae-bade-abada54629d0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b45096d-da1f-4a01-ab98-8a33ce796b25", "sighting_of_ref": "indicator--e32824ce-91c0-48fa-9ac2-7a1189e3296a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1283c9ee-3fcb-464c-987d-85e876a3dfe4", "sighting_of_ref": "indicator--47ee54e2-f989-4369-90ee-902336dd029d", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281098c5-6251-4b3d-85e5-61fa613f8f1a", "sighting_of_ref": "indicator--14850ce2-53b9-4241-8171-7daf6d06e8af", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6197e352-a1d8-41a2-865b-8fc966d48b82", "sighting_of_ref": "indicator--cb4031df-f0ae-4924-a8b5-f78c09030816", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee09ec9-cb56-4324-8600-8b9e6af90d9f", "sighting_of_ref": "indicator--2ad963fa-4466-4914-b580-7f7463a0ce5b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6ba5e1-0ae1-4dd0-b247-37f354308801", "sighting_of_ref": "indicator--2298be06-a9ed-4bd5-ad8e-74aa752ba72c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d9dcc9-ec3f-45e4-a695-b755b0e71171", "sighting_of_ref": "indicator--dc8a37b4-20fc-4bc1-97ec-daa4b790ba4b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eda4cf2-2641-4027-a5b1-b6b258b6be37", "sighting_of_ref": "indicator--eb206624-383d-4742-9917-31251b06c13a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fe6e2e-ea84-4168-a1db-c6670075217e", "sighting_of_ref": "indicator--598ef574-eece-445f-b357-b33fb8a48176", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c0a2e0-b79e-47fb-80ea-91e4337b9381", "sighting_of_ref": "indicator--f87fab32-66f3-48d4-b764-a1ce546313c2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e459447-8f51-453a-88f4-280c507dee2d", "sighting_of_ref": "indicator--ff417671-1034-4881-a4ad-f0ec3832e797", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eb4869-ef12-40ef-a8bc-c462d50aaec7", "sighting_of_ref": "indicator--567101e9-f6eb-45fd-ba4b-8e840d969626", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb0e97f-1445-4a91-bbf8-6a8d32f0d05f", "sighting_of_ref": "indicator--5226948c-f1c8-4c44-8fd3-dc7f112197a9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395b8011-6d11-4d01-af41-805d4a1f07d1", "sighting_of_ref": "indicator--4fddf3f9-df11-4bd9-985b-fbf35249b778", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038006b8-f157-4536-bfc2-5d705a75bc17", "sighting_of_ref": "indicator--019f99a2-592a-48f1-8c4b-60ec9fd0d97a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2801bb-fb05-4a77-a946-ee1712da6335", "sighting_of_ref": "indicator--f2087dfe-7aec-4cdd-95fc-f31860e0631e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d20cb05-49a4-4afd-b189-c657947f1b52", "sighting_of_ref": "indicator--005f6d98-7249-438d-ade2-824ebaceb812", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b438a072-88d1-4f06-b1e1-c6c86112caa9", "sighting_of_ref": "indicator--007cd391-0073-4e73-a563-cb988fe05c1e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eefc878-aab6-4d65-a815-13064d9f2bb0", "sighting_of_ref": "indicator--e4b337aa-1b25-4654-a25c-130c23d010f6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84161cb-dd53-43c0-a6d1-91613ee74ec8", "sighting_of_ref": "indicator--a43ced57-f265-4ba0-9017-004df79c9d23", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e15aee-07a5-4a68-aa78-e070f7f09987", "sighting_of_ref": "indicator--0f910fd1-0cce-4a11-9f36-3ad7f9b4d1e8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584f48fb-50fd-4d68-bca7-8a893967009b", "sighting_of_ref": "indicator--58c72d14-83a5-425d-85d7-7ec5c9843a8f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6077a20b-a124-4b20-8e7e-a60bcc7fe30e", "sighting_of_ref": "indicator--cd32e5ab-098b-414c-9646-c45074bf63fb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0722d86a-5dc0-49f4-b986-36614b5836ff", "sighting_of_ref": "indicator--e72d87a2-ec44-45c2-bce7-ca18b1e31ef7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea7e8b5-fe22-4936-8854-42283b2639d6", "sighting_of_ref": "indicator--7fbfb17f-107b-4955-829f-798bedda4fd4", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa90fcc-fba3-4b0e-ae43-d9e5b96598e6", "sighting_of_ref": "indicator--67367e34-03eb-4d36-851c-d752d27416dd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a16cdd-435f-443f-a231-cf4f4a933672", "sighting_of_ref": "indicator--1bb71ffb-7e02-4c91-8624-55970363e576", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9ecdae-219f-43f9-89e1-be6163ac61a7", "sighting_of_ref": "indicator--e491392f-c8a9-4538-b822-a3a3270efb83", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092eea22-9b51-42d7-9666-7b7730a63348", "sighting_of_ref": "indicator--5120ed3e-5544-4098-a011-c01fb470d17e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d2e44c-5821-489f-9060-4e595fc20f7b", "sighting_of_ref": "indicator--58b27b62-1796-4a13-93b5-dbcd310f68a1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fbc215-1886-4f07-b710-0315ea895869", "sighting_of_ref": "indicator--949af46f-5718-4b3a-af74-8a53e7b8cfe2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a1c43f-31e6-4e32-84c7-595703284e84", "sighting_of_ref": "indicator--74220ff5-50d8-45f8-98b5-1e15f76fa938", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cdb287-83cf-4e2a-a1d9-834cbc2c057a", "sighting_of_ref": "indicator--188559d2-53f7-43a9-97ff-987b3c01e2b0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671c8810-8753-43eb-b3f7-6a1d6666de32", "sighting_of_ref": "indicator--ac5652f9-9c8f-4458-9731-3bb1b622d01e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df56fee-9c77-414d-a6ec-a99e86517819", "sighting_of_ref": "indicator--074904dd-aa41-424c-9ff9-f4f23c85e886", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6607384d-fd9e-47a8-92bc-1fb316cf9fbc", "sighting_of_ref": "indicator--d1c45b99-af5c-4204-9971-e7c75e6e4e62", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6740dab-513b-468b-940c-f19874d61097", "sighting_of_ref": "indicator--c41ee733-1f74-47b5-b462-0ac6b70f3466", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5185fce7-8e35-4afe-8302-bf101a3594b0", "sighting_of_ref": "indicator--edef0ff2-4cba-4703-9585-32ea51e967ea", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb60f8a-d7e9-40dd-83e2-db767f8c57cb", "sighting_of_ref": "indicator--be69df1d-1aa1-4a61-ad3a-200028c543f2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a903ff9d-02f4-4db8-8a7c-8306834f26ce", "sighting_of_ref": "indicator--8b1d06eb-44da-469c-97c7-94d819998cba", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a50c7a4-35bc-449c-b8bb-67bf37a6a8d4", "sighting_of_ref": "indicator--2eb60ea6-ab85-45bc-9bfd-735b9fb4c6e1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac7b681-c912-4503-8e49-00d57833be6d", "sighting_of_ref": "indicator--f694dbb1-100a-4702-a7e4-7c626366fd04", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a4cdc4-a73f-4761-8f58-952a37675e76", "sighting_of_ref": "indicator--c261195e-70a4-431c-9166-6eaf1ab60497", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a1ed41-3227-4529-87cd-038e616b3438", "sighting_of_ref": "indicator--018383a1-9173-4841-815d-12432a45d1cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ba362e-c758-4d3f-a292-31c25ce76fd5", "sighting_of_ref": "indicator--b48f7387-66c0-4574-ba72-274293490310", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d840bd65-397d-46ec-bcfc-3cb727406f9e", "sighting_of_ref": "indicator--9cd7218d-2e48-43df-82f5-b56560d0b125", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a03b1f-b5dc-40bd-8967-c5d006384eee", "sighting_of_ref": "indicator--2f9d87ae-33f5-41ef-a5d5-fbd60db0a1c0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cc1e9c-4dce-4731-b109-800724641643", "sighting_of_ref": "indicator--37792c8d-3d18-48b6-a2a1-0f797d6029fc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c893a529-0bdb-41da-8fb7-5be7e027e4c0", "sighting_of_ref": "indicator--7132e1f6-8415-4de5-a98a-d201e99c250c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea1116e-2317-4d81-88c5-d2e282a39f36", "sighting_of_ref": "indicator--1d645022-bcd8-42f0-bbe7-c0556a56dfd5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55033c5-e171-4a85-8e6e-1d4dddc67139", "sighting_of_ref": "indicator--5a4803be-5764-49c6-915d-04d2d9d937ff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8700135f-fb52-4d19-b1c6-73293a20debf", "sighting_of_ref": "indicator--dad97db1-9d2b-4031-824c-b5dcbdc6d5b8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b619f828-7170-41be-b980-7662b03fbab7", "sighting_of_ref": "indicator--e0a62840-dae2-4bc9-8648-807af1b7f44f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5800fb-857c-4957-ac88-35163655dc03", "sighting_of_ref": "indicator--031fc9c2-568c-4047-b999-91f6865b24a0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c331fb7-d2bb-4f0e-b368-7c3cf1b0155d", "sighting_of_ref": "indicator--9a5effe2-5dab-4d3a-914a-fd10a875cfdf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114e8e49-7606-47c7-8f1f-9e52860c4790", "sighting_of_ref": "indicator--58d9751b-8ceb-4c12-bd78-3bc4e9de6785", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3bdf55-b154-46eb-a2c2-dfe3c6447ddd", "sighting_of_ref": "indicator--0a1bc2da-9e56-4d5c-bfd6-c9d5b3e0a8cd", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68c3fc0-6daa-4805-8ebd-631f0f5108f3", "sighting_of_ref": "indicator--fce8c9d0-8a75-4f31-a05f-f607616adb02", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1fe176-c1a8-4f70-b962-1c0481d0e40b", "sighting_of_ref": "indicator--4929b296-c3ba-4028-b515-21db1e19ee4f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333cbb7e-c4a4-4ff9-aa63-50d53c2512c5", "sighting_of_ref": "indicator--3119312f-bc4b-4114-b943-01181203fd42", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fc83ad-a2ef-4cdb-86f4-740e7c90a12d", "sighting_of_ref": "indicator--d6e72f37-ea73-49ec-8967-0fd2f45b2f09", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb9ba18-2da9-40f2-833d-28f673d5125a", "sighting_of_ref": "indicator--beb69e85-3b8f-45c6-9e6c-45cbd1c1ce99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c697f304-c288-4688-98c3-0395eb65d789", "sighting_of_ref": "indicator--babfbda7-26df-4207-a5ae-ea2ce29cd057", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5739bc2-d751-46f4-af16-f91a098c992e", "sighting_of_ref": "indicator--c3858b3f-5654-4a5b-8b76-ceef92707ad5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544545f3-ff30-459f-97cd-502b8c065d2c", "sighting_of_ref": "indicator--b615da7c-755b-49dd-a4f2-f140f9a64dff", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3953ac-6170-4bdc-a59b-d28980cfcd74", "sighting_of_ref": "indicator--fedfaad4-6472-45ca-b3d0-c260e85d7a58", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3632b3d9-4610-4f0e-8548-afc6d0690c87", "sighting_of_ref": "indicator--c0d431f3-ac8f-4b0d-8f22-2c605acc7555", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b25dcd-15b2-41ec-bc04-a14375bae9ab", "sighting_of_ref": "indicator--62360212-55c5-43a5-93d0-59183c1989bb", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab9297c-afce-4b18-8c7c-a6dbe2c572bd", "sighting_of_ref": "indicator--f68f15ef-3353-440d-9c9b-fee607b1c461", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22225ba2-f58b-4ffd-a22c-2749e0083b80", "sighting_of_ref": "indicator--8ff63370-9ef9-48ea-8344-702aa0af1e98", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2a0478-6504-4ef1-9bd1-62cb04980838", "sighting_of_ref": "indicator--0e1d19f5-6fdb-4746-b87f-92030bf214e2", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f81b36-cc7a-4450-877e-4b0526f6ab93", "sighting_of_ref": "indicator--c9f07ad9-d7d7-47df-bbf6-d92f404580f1", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ccf37d-dc1c-4792-81f8-b1d66b1144a7", "sighting_of_ref": "indicator--af532505-6a6d-4c4b-b3b4-e17e27626282", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79692f61-6717-41a3-a0fe-bbb4f3b7e3ce", "sighting_of_ref": "indicator--af532505-6a6d-4c4b-b3b4-e17e27626282", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e4bdb1-b95a-44a8-9b04-91bb83fb5e39", "sighting_of_ref": "indicator--1353e6d0-eafe-4b4a-9827-b065a4e482c0", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e88b0c-72af-448d-9113-2677a1be52bb", "sighting_of_ref": "indicator--f4408fed-fcd1-4497-b98f-3006853c4598", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4596fa8b-86b3-4205-bbf5-c46ad20d6bc5", "sighting_of_ref": "indicator--d0f4a914-69cc-40a2-86fa-ca8c18701524", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbb3598-7ff3-44df-ad52-2e5e746c7cbd", "sighting_of_ref": "indicator--f2831d44-a510-492b-88b4-d4f96e704299", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e19981-5e43-4c1d-af8d-2958c5c75fb6", "sighting_of_ref": "indicator--268df80e-0680-4643-a5cb-695ba22e5605", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c58d4e8-6cd7-4eb2-87fb-bfa65c287f20", "sighting_of_ref": "indicator--2c8b87fb-e117-4e87-ba2f-59ac29827479", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cad10d2-b31e-469c-ab3d-e11ed8cb611d", "sighting_of_ref": "indicator--d0f88725-161f-40ad-8f77-fdefc5083748", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e946de59-f65e-47a2-984b-275a0dbaf5de", "sighting_of_ref": "indicator--4edc604f-094a-4b35-9880-0b13d2383703", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f256b3-2191-4f08-9d46-05f223d3eafa", "sighting_of_ref": "indicator--4edc604f-094a-4b35-9880-0b13d2383703", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5716a6b-c5d0-47c3-aec2-4644549a8acd", "sighting_of_ref": "indicator--4dd754df-bcd1-43f4-8fe6-f8819fcdc0a1", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca89fa4-0d6c-4fdb-b28c-604acfbe5429", "sighting_of_ref": "indicator--3a93bb1c-cdd4-4561-a5e2-759da7fa6080", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297a66ca-ca24-421f-a5d4-8cb3c5368f4d", "sighting_of_ref": "indicator--02803155-8729-4ee4-9a9d-4ec7be906c28", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc5d3a6-2d64-4469-a4de-7feef648a6d2", "sighting_of_ref": "indicator--5c84328a-19ce-4b9b-b8e1-9f967f8eed45", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9d75dc-62d4-4f01-8b72-9522bb9c871b", "sighting_of_ref": "indicator--c55d1dd3-c9f3-44ff-b7d1-7e7a77773ec8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a533a7-1eb0-4d1e-ba76-b7ba01d8821c", "sighting_of_ref": "indicator--64f64851-3acb-4dae-9d6b-161054d79d26", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4521d8d6-b610-4a7c-a685-b83c9ed9641e", "sighting_of_ref": "indicator--07f1929a-36df-4b68-b0fd-afac09680267", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc2b0d9-4152-4d25-89e0-aa65b9dcd58c", "sighting_of_ref": "indicator--07f1929a-36df-4b68-b0fd-afac09680267", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41e42d3-6635-43e5-b389-f37e6a7f41ca", "sighting_of_ref": "indicator--07f1929a-36df-4b68-b0fd-afac09680267", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9441a791-6888-421b-acb4-27eab7268761", "sighting_of_ref": "indicator--a34e7ff4-7e5b-4de7-8d57-24ddf4877005", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db013e3-b795-45ef-84e2-2f1ea7c64aec", "sighting_of_ref": "indicator--dfd61302-26f8-4806-94b8-9ee94037839f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6c5cf5-64e7-4b27-83ea-1f8045d4a8c5", "sighting_of_ref": "indicator--eddae222-f413-468d-b69f-5ba1058a4451", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7de6c3-d2e9-43d8-bbe6-c2d8f356b094", "sighting_of_ref": "indicator--d59a5726-677a-4230-a5f4-47f904a0ef80", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa9dfb6-2085-4837-a24e-4f4a1906fffb", "sighting_of_ref": "indicator--91cd0969-e910-4514-a540-a44a66ed7506", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9400bef-e04f-4379-a8de-930977e3b21c", "sighting_of_ref": "indicator--4a855330-5e21-40e2-87e3-1d6844a3e0ce", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f7fa13-cb5e-443a-9982-99f8288ea68a", "sighting_of_ref": "indicator--6b786ce4-62b3-43b2-baea-130a5c367379", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ebb021-aef2-4c6a-b8c2-56e7d3982cb0", "sighting_of_ref": "indicator--65a6c8c3-88fc-4635-9809-ad05c451d464", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8ea6fb-3979-4781-a597-2ac411427543", "sighting_of_ref": "indicator--b70e6063-ba49-4111-9632-8f514e5676ec", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a416274-03e9-49fc-9719-b70bc1842102", "sighting_of_ref": "indicator--f70a7b98-bb60-431b-bd38-381b67c7a07b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cca6e83-0c6b-4fee-a3ca-2b74e259af69", "sighting_of_ref": "indicator--2badff1b-c7ae-4c26-b298-d434187428c5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6c7a4d-b332-4683-9c9b-18f708d7fb96", "sighting_of_ref": "indicator--4e815767-8b0f-4538-b1ca-5ba3d2156488", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427d441c-e3fe-4a0f-8d72-076db63b82cb", "sighting_of_ref": "indicator--c9df90fa-5664-40aa-b5ee-e7576512dfca", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17df1c31-e9c2-472a-b027-f0fb66155f7e", "sighting_of_ref": "indicator--2f556c4d-fbd9-472c-8552-54bd82a4bf3c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe23d8e2-b3e9-4f4c-80a7-8d75d6a6a7f8", "sighting_of_ref": "indicator--2f556c4d-fbd9-472c-8552-54bd82a4bf3c", "where_sighted_refs": ["location--a9d16746-9f42-43c3-9b86-4f432481b400"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658bee5a-7e76-4f5e-8465-933cd2d8ba15", "sighting_of_ref": "indicator--75bf442e-6b53-4ee7-b5be-35917fb10b51", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2738e707-0926-4620-9f4f-b3dd468ec1e8", "sighting_of_ref": "indicator--bb37972b-af9e-438d-ae8f-69c675cf6669", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85045fd-437d-4789-8089-c0ea0a41222a", "sighting_of_ref": "indicator--8083fb3b-895c-4efd-8176-106ae25f1c97", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ce90f4-7025-4f54-85a5-4e27bb3edba4", "sighting_of_ref": "indicator--c37497a0-c0aa-432d-a106-19bfb59efb90", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e27e97a-9559-41a8-a44f-c525969030ee", "sighting_of_ref": "indicator--3bd4e440-4be1-44a5-bc3b-b971d497cb44", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a3c50a-41ed-4cbc-9e09-fcbf9e7fb730", "sighting_of_ref": "indicator--9ca884e8-d7e8-4bb3-a362-7d6f3395697c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1646ff6-1104-4d28-af9d-b1ba0b5363fa", "sighting_of_ref": "indicator--a4890051-2fd5-4eb2-96fc-ca6c41353920", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de173d3-1331-426e-bd71-ed698e0c9450", "sighting_of_ref": "indicator--a0640796-0490-4289-ae8c-a9579381dd1c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7ffc4e-d0e1-42b6-8085-45ac182ff81f", "sighting_of_ref": "indicator--179c8ef9-7a49-40b8-8447-eefbb3447efa", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0170f32d-86cf-4c88-b3c1-a561ae2f8667", "sighting_of_ref": "indicator--91bc9d5f-68e2-4ddb-b24e-de7b83b638c3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8599897-047d-4d11-a8de-501dab719c1e", "sighting_of_ref": "indicator--76342270-b900-42c4-b73d-2a6ac9b2a960", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113e277f-81ed-4806-8a70-14264d0800bb", "sighting_of_ref": "indicator--270927ab-26cb-43f1-bb61-6aabff3f9f6e", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327f5b10-523a-4bf0-8474-8f40b067bd6c", "sighting_of_ref": "indicator--bb2e85c3-99cf-49ba-9c8a-a077961b3338", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ce3c82-fef8-44da-98ee-637fe74112a0", "sighting_of_ref": "indicator--5fd76f27-53f8-4c87-aff8-8c5d391a43f7", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee35c001-11ba-4949-856c-de2b817ca70f", "sighting_of_ref": "indicator--b5b3034a-11bd-4665-b08f-aa7255d8fd98", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8268765-9064-43e0-94a8-586b25c7a948", "sighting_of_ref": "indicator--568c79de-f3a4-401f-b730-6f4023e987d3", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03339cf-2364-4b38-afc0-1a2ed0c63c98", "sighting_of_ref": "indicator--75372360-a4c2-458f-86f3-c981d519e225", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349c9705-88a1-44c6-826a-c44419e633c5", "sighting_of_ref": "indicator--5fb30cdf-aa2b-4024-9e00-93d81fa38ef1", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548dde4a-3869-41fc-a9aa-4c3be6513a75", "sighting_of_ref": "indicator--a786c30c-929e-49bf-bd06-8d21931b3c9c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f63017-0fc2-439a-b147-c17a1fa09dd5", "sighting_of_ref": "indicator--bf59df05-c44e-45f7-9147-32944061874c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94836508-fe5d-4565-825b-7528b48c0712", "sighting_of_ref": "indicator--e53611c0-4e78-4d59-aca8-d80d7d2a49ac", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72803811-a064-43b8-9841-6d634ea4cd63", "sighting_of_ref": "indicator--c93783ec-7107-422c-9aff-8c30b231c9cf", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50860c1-98be-4af1-ae9c-0f772e0a325b", "sighting_of_ref": "indicator--be52e3c9-2916-43f5-ab55-0e78bbad2d2b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a237654-15d2-41dd-8883-6ef5d705bfdc", "sighting_of_ref": "indicator--74d271af-26ea-43b4-ab20-7c7f7bfefacf", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbedeb8d-e32f-42ed-a934-f47281d0c980", "sighting_of_ref": "indicator--4bc72941-9cfe-4913-9d89-f7acababcfa0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d43fec5-201f-4a6c-ad68-1d6178d40de4", "sighting_of_ref": "indicator--63ecd907-f812-4dc4-836f-5d05fc844c24", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca7acab-1ec4-4454-b7d6-62cfcd7e0996", "sighting_of_ref": "indicator--e87eda92-1a61-4779-a36f-0cb76a939a86", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08f3b62-91e1-4245-a996-ba5ce863c668", "sighting_of_ref": "indicator--be557038-6942-4c09-81ea-955cb0bb7ba7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62448a7f-54c7-4036-82a7-c089dc4ba1b0", "sighting_of_ref": "indicator--1331297a-95f8-4a5d-98b8-1ea36d4a07a5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6741507c-5dbe-45bf-a500-01a18a6108b1", "sighting_of_ref": "indicator--46e960e0-2096-4d1c-b699-0fe9c8f45ca7", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31275c96-11b8-4f4c-af69-92e301c69f50", "sighting_of_ref": "indicator--2a28196a-42d1-44e3-9d86-3776e9258b42", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319a03f3-5ebf-4d1f-a71f-6238ccde3977", "sighting_of_ref": "indicator--f5955750-62e9-41eb-8304-cb5a17342081", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b532241b-b500-463a-b961-1c618374d45d", "sighting_of_ref": "indicator--380f1397-2797-4b72-a1b7-fac05b35e45f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b773ca-c07f-4fd1-95fe-9e68ca6ad7e3", "sighting_of_ref": "indicator--35ba445b-2576-4052-941d-d3b538d580d5", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf27b907-065f-44c2-b321-4fcdf00f0c3e", "sighting_of_ref": "indicator--dddde2d9-d8d1-4dfc-9540-a23abe334983", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc333c55-a318-46ca-a400-e9ab00a96295", "sighting_of_ref": "indicator--7b0bb7f2-302f-47a9-aef2-3ef4a4cb8ef8", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0910282-3fd4-457a-a641-66bf7d57d5f9", "sighting_of_ref": "indicator--0616493c-cb8b-4044-8c44-51b197575fdc", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5613249e-bc03-4680-b515-a34a594b5886", "sighting_of_ref": "indicator--0479f047-74b2-485d-9db9-ab7059d2c3df", "where_sighted_refs": ["location--373c33f7-e326-4fda-a204-6048ac52bd43"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f23048-360a-46ce-af86-e98a619eb680", "sighting_of_ref": "indicator--f2085040-a32f-4742-a301-f4ebc5ee845f", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929a2e36-687c-48a7-9847-18baefe8fecf", "sighting_of_ref": "indicator--4fe96f30-ae41-4078-9eea-d783f4be2204", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cd8c59-c02d-4cd6-8d2c-a74df7de056f", "sighting_of_ref": "indicator--b5163d6f-5a91-459e-990f-a49c4fcf63a6", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c7f53c-fa96-4f11-93fa-d5c4715cb3a2", "sighting_of_ref": "indicator--f30def6f-e237-4adf-b356-6d7cfdb4fd5c", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9de8ca-632b-4f78-b997-1fd6aa069964", "sighting_of_ref": "indicator--c7e06e37-4c05-48b3-bf2a-44158586007a", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e33bdb-2f3b-43ed-a83f-9d1191c392d3", "sighting_of_ref": "indicator--f38983f5-59bc-45d4-8e36-6eb3433a189b", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58c55c9-5090-4f4b-85e9-09c48cc9992a", "sighting_of_ref": "indicator--99d23713-ff0d-4d85-8cb9-ae8b4e0a0ae0", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94c9e01-8b9b-4bc4-9532-722b9556f768", "sighting_of_ref": "indicator--67e83913-99ad-486b-9ba0-0dea091b9dc9", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d915263f-0976-4ee9-b607-17d354e235cf", "sighting_of_ref": "indicator--fab84598-ebc0-4699-be37-020786521301", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f47675f-66b4-4445-b52e-d26fc290a928", "sighting_of_ref": "indicator--f5aafd4b-1e98-4d0e-a70a-e6ca4a92db99", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654a0388-df31-48e7-b970-f9f6e2960dc3", "sighting_of_ref": "indicator--ec0679d1-b89a-4156-adce-270a776d8322", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8856c5e6-f1d2-4d3c-92f9-6b3d8958e7ca", "sighting_of_ref": "indicator--f90f6359-0595-4d7a-9077-6ac1de9d3699", "where_sighted_refs": ["location--377da949-dc8b-4606-bb44-aa8e6636dd3a"], "first_seen": "2026-08-19T00:00:00.000Z", "last_seen": "2026-08-19T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--4771467a-f184-496c-a57a-9138befbd17e", "name": "Threat Report for 2026-08-19", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-08-20T11:00:01.090Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--377da949-dc8b-4606-bb44-aa8e6636dd3a", "location--2a6dbe86-4b8c-4903-88ce-8c3cf06496d3", "location--373c33f7-e326-4fda-a204-6048ac52bd43", "location--a9d16746-9f42-43c3-9b86-4f432481b400", "infrastructure--009a218f-0a95-4382-8c32-6f2ec171b64a", "infrastructure--d6fbbf5c-f562-4f91-a79d-5316c29b6f52", "relationship--103dad90-9f59-4712-aa0a-f3c00faf5a0f", "infrastructure--963ed623-02a3-4d6c-bb49-d9160d0dd02c", "infrastructure--eadff763-98ff-41ac-93eb-7b071162d185", "relationship--5f208493-ef11-4728-8a57-dbb0b6ae5a84", "infrastructure--203e2937-0791-4f7f-9288-0506a9e4a10c", "relationship--14222635-6fcd-4f6f-981a-0880111ac0da", "infrastructure--79f587a1-1e4c-4938-a186-241bc594d051", "relationship--c305081c-d480-4654-98fc-44c8251a5c73", "vulnerability--8c2d939e-e4ae-4ad7-8b59-9e6939f117d3", "vulnerability--33b94e6e-8bda-4d2f-bff3-a39b3d5e3187", "vulnerability--0bd3e549-ecf6-4a17-8378-45dba1533e77", "vulnerability--144eb3b7-226c-48d1-84fc-614d19a08ee3", "vulnerability--689dc27c-ebc6-4b07-b6b7-5b76d64f0399", "vulnerability--04b30a2c-731a-40e6-b839-cff8952dd34d", "vulnerability--ee0b9713-dd37-40db-b20a-9b357e4caf4a", "vulnerability--057f8879-e1f0-479d-b6d5-eab7b39d4678", "vulnerability--936c41ea-996c-4d52-8311-0cce370449fb", "vulnerability--ad4e7fd8-fa82-42c9-b9f0-b3e45fb74e42", "vulnerability--2f3c530c-f3ae-4594-a59f-18f111f1c5c1", "vulnerability--0d21ae39-ed83-4196-9d43-30a823f856c0", "attack-pattern--de37a587-ea6e-4f07-8cd6-ebe65a9e79ef", "attack-pattern--a841d696-cb24-420b-9d1a-d7f4149837fb", "attack-pattern--bf47a23b-89fe-4708-a316-3b190265bffc", "attack-pattern--d68beb7f-4532-4b2e-a12e-71eeafda9bda", "indicator--2f1259d7-1a05-4142-b89f-4bfef815d10f", "indicator--08a158f8-0085-4d8a-966d-74d3e58a0ec9", "indicator--c22489b5-2f68-4883-998f-c572be158c22", "indicator--df9621e4-00ee-4855-bb51-7ef7d8f6301c", "indicator--046c0794-ae59-43fd-88e9-0ba4b365819f", "indicator--3fa58be2-7731-4c1c-92e6-a2954a386d47", "indicator--56864b3c-9cec-4b1b-8629-7b9608601bfb", "indicator--7ebc2b4b-581c-4c21-9d74-fa6c6e87b67b", "indicator--95458625-99c1-4ef3-8bc8-0259b45cb77e", "indicator--46576548-5a4c-40ae-8e98-8ff910a26057", "indicator--bb562c24-bd5c-4f62-88c7-db4cd186be0a", "indicator--e8607422-a037-419c-b476-3c63495ea241", "indicator--3991b05c-c216-4b42-98a3-b9630fbc17a5", "indicator--3274e6f7-50fc-4cf7-a9a2-61b3ed742d0f", "indicator--c2fe90d5-c047-4ef4-82b8-b3d47caab9b0", "indicator--e821c81e-a753-447a-8e6c-2599f402233a", "indicator--884ca849-2a5f-4116-88be-abe9955a3a18", "indicator--6dc5a008-dac9-40e7-a7a3-493e8b6a5bd8", "indicator--a4a8f209-e0a3-4b5c-8931-a980107dd695", "indicator--2d4b4559-17fb-4102-a7fe-e8123c40f681", "indicator--59d1af7f-4e68-4e76-a72e-b131fc188535", "indicator--995924a8-a8a3-4f12-8161-ebdfc6f44cf5", "indicator--90fd6fea-2591-41fa-aa85-0ece203a309f", "indicator--4b85869e-a26f-4034-9ccc-c0155a38db9c", "indicator--53f305f3-e0d2-4583-87ba-16ec24f01ce7", "indicator--e26f79ed-c04f-4e62-b849-968c3ec4e015", "indicator--6185364f-cadb-40b1-b109-1bb8717ac2a2", "indicator--2f3d74e4-1a51-4256-839c-035e72e98494", "indicator--b06a8888-d0e7-453b-9f9b-3a944755ab73", "indicator--6918e289-b991-43bd-9659-8602fab32355", "indicator--83cfb5f8-44b8-45ff-b2b0-3d78c492514e", "indicator--04bfd4ee-a15a-421a-a3d3-21bde3bf73db", "indicator--113c62ed-8510-431b-bacf-b1379acf77af", "indicator--8d17d113-a175-477b-a9dc-c0a19231e5af", "indicator--422ed32b-d43b-4247-9730-0e549a5c31d1", "indicator--9f719712-8091-480a-a46e-878be9e1db7d", "indicator--4aa55f27-3b80-4bef-9042-9d7bad645e49", "indicator--73fe32db-4d90-4e10-a7bf-6f35db83a2a8", "indicator--4eac0fac-a836-45e8-87c8-5ed1efe3b194", "indicator--a57fee29-f5e1-4995-952f-a8ddd8141268", "indicator--5133f952-0f4f-4c07-9909-380a41521d03", "indicator--eba8a06c-7227-43d8-a720-fc32c75f0fcd", "indicator--f8a98d2c-cada-4089-8317-8e3fcf3e7b00", "indicator--bd0dac5f-e600-413b-92f1-a59d82669e09", "indicator--8d819562-94e2-49b1-aef4-a71c6c3734ed", "indicator--2b342059-1c15-4879-97da-7a6c8e9b8106", "indicator--9af87cae-bdeb-489e-ac40-f6f5c8fef9c0", "indicator--a9cae339-9295-47f7-a938-41fff87b9aea", "indicator--20dd0d35-4513-4af1-a7ea-b268d69c09c3", "indicator--77354c84-39ca-4ef0-9364-c17636674d9f", "indicator--bf74edbf-8e6b-4063-a88e-3367a7b485d8", "indicator--5d7cd92b-a414-4c09-af16-2bc7a8ed8f45", "indicator--b9941a39-67a7-43e2-9ec2-fc4f1bd1cd13", "indicator--762befbb-ae3a-4496-9ee7-2e3d32fd00e4", "indicator--3f37f5a3-f861-4234-a86e-ad4412fe4566", "indicator--3dddac59-ab39-4b65-9e73-e6708eb7eabd", "indicator--54f3ed77-b5e4-4e3c-9ad7-ba57593e6fd8", "indicator--21aed8c0-e838-4e37-b232-2cd27e0b5a18", "indicator--c724fb31-8947-4a24-9d93-886e54ace812", "indicator--147727a6-13f1-46f6-a445-90214e3560fb", "indicator--705dd12f-993e-444c-a524-8e208dad5037", "indicator--5c4ebd9b-b4d6-4362-829c-c921f80daf4e", "indicator--3eef4767-f418-4e44-b654-5aa2ffdb2d7b", "indicator--962d0840-234a-4830-9956-6a6b8cd9201f", "indicator--bc32f053-3338-4fd3-afe5-a6f68cf9100a", "indicator--efd423df-2501-46c5-bcde-5718612b3370", "indicator--a67e8698-b3ee-421a-a4a7-b06680f11d8e", "indicator--2c1291f6-4dac-4e9a-9e79-e238eab13f14", "indicator--80a610f1-0845-4a18-ac25-6bed5e14367e", "indicator--dbae2f36-a33f-49e1-9471-ffe7ed10bfef", "indicator--8e8a1ceb-c503-41cb-9a13-2bc97e173c10", "indicator--3e45fe1c-2edf-46b8-bf1e-b32eae8a447d", "indicator--14bc7477-fc17-437a-9bae-32ab9cf5c8ce", "indicator--3f163b5a-b253-4758-93c6-7a7a84a87a3d", "indicator--e396d53d-9119-4005-96f9-6fbc7b41bc46", "indicator--7f9e3f79-4506-491c-965d-171f0d1cf47d", "indicator--4a1fe69a-045d-49fa-b18a-8e59c85bbda0", "indicator--72575f8a-f69a-4f95-b3bd-5162e07f4784", "indicator--2b98be49-0bb9-49a7-ba76-97f05b4071ca", "indicator--3015990f-090d-4899-add5-514c958aa34a", "indicator--aa7ff968-0a9d-424a-bdd5-ee7135487fb4", "indicator--17af217d-f113-4656-afa8-d41548e7aed8", "indicator--b48ce318-f3dc-4eb2-b03f-4b4f836567b4", "indicator--9cffa435-8f1b-4e22-8a5f-e89e2e479a14", "indicator--77e8c10a-a274-4134-89aa-a86e0dd0f825", "indicator--43c2bb83-ee25-4b97-ba1d-07126f7efd0d", "indicator--254c66fb-c493-452c-83cb-81da5e22d0ed", "indicator--2c9844a3-45dc-4ea6-b92f-ff556551d57f", "indicator--31bc600e-bc52-4342-abfb-62deab9f7531", "indicator--3887c11b-f9c4-43cd-8669-5adbd1a4fd51", "indicator--a18c3736-18a6-4c69-9f96-c40f62ec0452", "indicator--51197019-e762-40ae-9dca-d4a5dd486725", "indicator--f5516521-dffb-4cd7-ab20-27c354f3444e", "indicator--1a6f6852-851b-4f0c-8e79-e4611d42fc8a", "indicator--4240ad55-874f-430e-84ea-0e0fcff05a33", "indicator--6058154e-3a99-4706-b970-5ca2fdae5103", "indicator--ada97d82-2f77-4080-aee3-ee7693df7960", "indicator--84695f5c-b425-4e43-a91b-40df3928381d", "indicator--c0217057-0898-45f7-a438-b3842000f2bd", "indicator--da546ec3-cda3-444f-acd0-1a6e8d92bed2", "indicator--30e7ec6d-d4d6-40f7-bb8f-0501ae0f01ef", "indicator--22448901-1c64-4e21-8539-01365a239727", "indicator--5a287d28-6d90-462c-9f00-c964ad9f37a3", "indicator--beaf69aa-2f57-4288-a81e-320a0518643b", "indicator--f141e533-68fc-47aa-bf9e-b3030428afce", "indicator--e9825d7e-973c-48b1-a6f0-35a45f98a1ea", "indicator--10687f5e-fcd4-44bc-ad27-8e53ab32d6c3", "indicator--283fded1-7804-4d89-a017-40602b03d9b7", "indicator--201da164-9d0f-4069-a30f-19df7ee275b7", "indicator--aecb89d2-94b8-4953-ab29-e273a87517f7", "indicator--21396f7d-ef09-49dd-acb4-9ffa3feb4412", "indicator--be2bf043-1e22-4cef-8da0-15b41a820091", "indicator--64f68de9-ef41-4b83-80ed-b72a4907d34d", "indicator--69263597-611e-479c-81bd-365333ed045f", "indicator--41b709c9-4598-4b4a-85d9-1207244f9c49", "indicator--59432d2f-9a31-4f98-b113-0120d8ddcaa5", "indicator--a3ce4888-6266-4bf5-a5a3-e2760629c136", "indicator--cb5fa590-7bd5-4fcd-a189-060daef9da18", "indicator--7e53f378-36e7-4e6a-8e48-a90fed1e3f06", "indicator--21e3119c-3fe9-4c8d-8df4-bb95290d006f", "indicator--db4aa473-d1cf-4f12-ab35-cccd19ae69ac", "indicator--fb880761-7777-4d55-978b-d30e67dbcdd2", "indicator--8f5f0d5e-3c82-4fcf-b93e-c6607328128b", "indicator--44fddf0d-f7cb-406f-b3b8-65ab03cedcc7", "indicator--e069b92c-e6db-49bd-a3b2-6854a235ccd8", "indicator--6c5a0ad0-561d-4630-9b1d-ce81b61691f0", "indicator--991e6786-12d5-45ec-9292-96e0bb267032", "indicator--20864bff-6e11-4b0f-bd06-3d11d51816da", "indicator--edbde90a-e92f-4104-8914-8801acd75061", "indicator--8a397a1c-2698-42fe-9be9-7145a2120648", "indicator--24b317aa-8128-4df8-a99f-d5350e7552ec", "indicator--8ac8d89c-6be3-4852-a603-27e5c2df23d4", "indicator--52a3859b-a377-4e8f-8e62-18e58e3aa564", "indicator--8a821cbd-b776-4757-94bb-a371fc467ff3", "indicator--5dd0bce4-c265-4fb0-ab4a-c576ddcf2a24", "indicator--e7519d6a-9792-4d12-89b7-ffeb959855b1", "indicator--62200ae5-2157-44d7-a308-46c61ff1f26e", "indicator--8606444e-efb8-419c-8d97-ec8f00e35111", "indicator--8019eb52-a81a-4fb3-bbba-10f8ef2d2007", "indicator--76d0b9a4-6319-4be2-a827-2b6ad4c916e1", "indicator--f80b1676-3d0b-407d-86ed-428e813aea06", "indicator--7cbe4e95-6b23-4ae4-88c9-88bc155bac6e", "indicator--d9b771eb-abfb-4b0c-aff5-cd48243051b7", "indicator--3c61b57b-0e86-4e51-8789-48afb065d7e3", "indicator--9828d870-8732-40ed-874b-5831ed276b2f", "indicator--b6369050-71c7-42c9-bfe9-2ea242fa6400", "indicator--8d0ae921-dccc-48ff-a970-9ab048cb1438", "indicator--3009d6b9-2ac9-4cb3-8274-22e276cec960", "indicator--a96f089e-e080-4ef7-a60f-7329aca1c554", "indicator--22f61e18-3798-4143-bf94-2d8bf8eb917b", "indicator--90a61fab-3d87-43b6-a809-50d539e6b439", "indicator--bab7989f-9768-4e02-8067-8c3de5442e4a", "indicator--a62d2242-38d4-482c-bf96-afe7dbb41887", "indicator--5ac2eba4-51ed-435f-b4a4-1c2539d375b2", "indicator--1f9313e3-fe41-499e-b8f0-be6f80d54ee8", "indicator--0c7a9edf-34f1-486c-b44d-cc1f89ba9286", "indicator--f7a488ca-4209-466f-8207-d9148cde2f87", "indicator--d0bfd431-2815-4c11-8103-485d3598d59c", "indicator--3bce2465-39c0-4955-86cb-927e0639e608", "indicator--09dcaa1b-c6c4-4a25-ad00-65c639a8b732", "indicator--712de9ae-e291-4f88-9098-05938130b53f", "indicator--776ee932-fc57-49bc-83d6-a64d50a85ed8", "indicator--3edd1a94-f88b-41ab-a39c-9224f68448fc", "indicator--b5e5ccd1-5a9d-4867-ab74-cc2f8cb927f6", "indicator--7c07f10b-dbce-4a4b-accf-8dff0cfb9a59", "indicator--301b27ea-b005-42e8-84c2-78266aad1925", "indicator--8b89f61e-d935-40f2-90c4-7a282c92c62b", "indicator--3fd221a8-91d9-4615-aa60-78c24b720437", "indicator--a311d5e3-b4fa-4f0a-b13e-9dee51e93ee0", "indicator--c694ae89-80db-4529-9f5d-dc1b201275f4", "indicator--6aefee57-c7e0-4cbd-9a51-2e8af19e3a7f", "indicator--b7772e4b-ba50-4b79-b797-41f10dc5de9e", "indicator--787137a7-669f-4d36-ae47-8d0a383c3565", "indicator--7373c49a-35c6-4be8-8a34-17ea2108cbbb", "indicator--74970137-6f43-4315-ba7e-d1fe99446340", "indicator--a4743c82-3685-4131-924f-d7ad730e6e01", "indicator--d8211704-c1af-47f9-8b83-53ca5a6a804c", "indicator--548c9a7f-84cb-4e04-81df-56ddfb583785", "indicator--e0d7db96-4efe-4bce-bbdd-b7f46baa5468", "indicator--0cffb452-0006-4425-b34b-676069d54035", "indicator--985f7ac3-dabd-45c5-adcd-a7763e1196fd", "indicator--3dc8b7b3-0ed7-44fb-955c-9d64f4663cb8", "indicator--e8abb65b-47f9-4248-a2f1-155c090525af", "indicator--bb5a0109-f9d2-49c4-a1b3-e537b67bc49e", "indicator--c6a849e9-2370-4c8d-8bba-45ccf54e49a1", "indicator--e860c926-1b68-4ba9-a1bc-d15b5fd120c5", "indicator--4d4ca92a-9cd2-40eb-91e0-e9daae063307", "indicator--5ee72b78-d142-4d3f-81dd-1300f543fdb1", "indicator--7e5eb444-ab7a-407f-8546-b0ca2c110109", "indicator--a1cf4799-0e5c-408c-a8d7-a82440e35e56", "indicator--27897efe-3e12-4040-a9d9-65c2e2d8aa96", "indicator--cb2bc590-60a7-46d3-b563-d42862ed99fe", "indicator--7a59bfca-2be4-4e0f-80a5-e3989ef22e96", "indicator--727c329f-8d84-4415-af5a-3cc77a85ce2a", "indicator--23de335d-d11a-48ca-b69d-b6ab8936e2c1", "indicator--fcb68dea-b01b-44b5-a978-e5e7c3fe6612", "indicator--d9f715fa-3ded-4c97-a614-0cf6c11750df", "indicator--57e38106-557b-4535-aa65-99719385c03b", "indicator--92554c34-8f52-407b-9b83-2f3a8fc0d14e", "indicator--cb1b2e00-b731-4554-a573-4f91323ca375", "indicator--62c28f5f-5360-4f9d-9553-bd6fce750baf", "indicator--48aad1c9-bae7-4c0e-a1b0-69bd61f252d5", "indicator--c6b75492-9c17-45a9-a306-fe736d2917fc", "indicator--4e0a80c7-b5aa-447d-bba0-41488e17aa59", "indicator--4eee9e0a-e6aa-4ca5-b65c-a27df7bb21d0", "indicator--d5a61eca-2886-4e35-b187-b1473c7687e1", "indicator--60168870-680c-4efe-bda1-e3a80f3f1f2e", "indicator--131d8afb-6d33-4305-b526-675edf471b7e", "indicator--5d29add4-0553-4c90-b886-40fe1361245c", "indicator--c4ffa5b9-255f-4af3-8342-b781533a7b46", "indicator--882c5b1d-a7ee-4806-bd99-b07f307afa86", "indicator--3472a5a9-db37-4f70-bf68-214b1279c9d7", "indicator--8f82b894-8dd1-46f8-a490-9524d5c0d674", "indicator--5acae3ee-4e8a-4a3c-801d-044684480965", "indicator--1eb49e77-8c36-4390-988a-a31cdad2a976", "indicator--0a45c05b-d0e7-4f16-91a4-914a3787cf0e", "indicator--2891ada3-65ed-4f42-873f-75d76263390f", "indicator--2d40d05f-9420-4f5b-8b33-38626ff76c2f", "indicator--965ea2b1-5981-410e-9e30-97cbfab97ed0", "indicator--5eafec2e-a301-4378-aa73-de1fffad5977", "indicator--fd514569-1887-4e5a-ae39-6d045142f749", "indicator--31101928-0c33-4e63-84a1-8e324e6d83be", "indicator--cf28def1-de3f-4a51-bf7d-bd1b372339aa", "indicator--a0433e04-1e85-40f9-a9d2-07dc4a80c9e7", "indicator--e9599f49-a99d-4d36-aa30-b0aa01587b1f", "indicator--7f4fdb1e-059d-49a2-9ddc-f504f3a55697", "indicator--11596f0e-e6b9-4f51-8f19-ae85e89d8e1d", "indicator--184e9cc2-5099-42fa-b663-fadd256f0568", "indicator--ce782466-a00f-4b00-a2de-0a1d00f5a133", "indicator--f4f40638-42c5-4f5e-a060-58c633f1899f", "indicator--a9734a44-ae3f-489d-b817-5f3c1829b01a", "indicator--892f896b-185b-4d7d-b575-88d355ba8a55", "indicator--6690e775-b672-4ca4-969c-d51cba947d9b", "indicator--7e8f346b-c08d-4aeb-8148-756b61ac97ce", "indicator--882db528-8ac7-47ed-9b21-1887b52daba1", "indicator--ef31b955-54db-41a7-ba38-acf80197b180", "indicator--ea63dca6-85d2-4557-841d-cda78a2dbfda", "indicator--3bbc8078-2a71-4f1b-9e9f-debf2926714c", "indicator--141aa766-9aeb-49a5-8f7f-b427b48fc339", "indicator--647234d2-bab1-4031-af6f-7a460afb6fc1", "indicator--a1a4ebd7-d390-41b4-89aa-9fca8b67fad8", "indicator--08434f64-78be-4ffa-a986-d727b6c0da5d", "indicator--ca1ff4fa-2c33-4e4b-9270-cae271a9f27d", "indicator--9d4311c4-0009-48a8-999d-29d0885e41d5", "indicator--b03f78d0-6d9c-4b98-9954-eb57d675b03b", "indicator--f9b73d95-b0ca-4aae-860b-acce4bc1bb96", "indicator--2409399f-ee1c-460b-8e72-c58b91f869bc", "indicator--1a51d913-34f1-466c-ae28-8295f548bd60", "indicator--0105a363-bc6b-4716-89f8-7b6715dad102", "indicator--41152907-e83e-41b7-8f3f-9f41715aed0a", "indicator--14fd390c-4ac3-4beb-9a91-c70056c6be2e", "indicator--0b53de52-9ddf-44ec-978a-41f1e1606b7a", "indicator--06a82279-88c5-4b11-8af6-c0f7c3b2d350", "indicator--86000682-d49c-40c8-b341-f95d49af0b87", "indicator--361fefa4-97a8-41fe-bf72-560c2f3cb0a6", "indicator--53cf3f6b-ba29-4f71-b522-6a8e70c95fb0", "indicator--490ae09b-b919-46dd-9c70-886ea07c10e7", "indicator--de090bd7-562a-453d-85c3-b1eabe166f98", "indicator--25195fe7-bd74-4cd1-903c-5808a56ded85", "indicator--97cbd8fd-963f-460f-893b-d05eaba2491f", "indicator--3da14c3a-0540-48ae-8d2c-60727649daf2", "indicator--2cedc498-ad01-44e4-9595-27e5d21ee7c4", "indicator--d3b82ad0-e6aa-4455-b4eb-ce9d13732d53", "indicator--a85b6bf4-d223-41b3-90a5-701dbdea52d0", "indicator--20476a72-4b6c-4b69-bbf9-c359350199bf", "indicator--c6355e63-5301-49a2-bb40-40945bf0133b", "indicator--5c15ea98-3be8-4b85-b08f-785d446e923c", "indicator--fb56133c-a215-4a26-aa9a-325545bef91b", "indicator--c359a549-ac08-47bb-a95d-f74f882ce87f", "indicator--3239c005-67ca-4a10-b6af-1eba994211c5", "indicator--859585d3-a885-4f1a-a715-8cf9b899b3a7", "indicator--8ca9beaf-036b-447a-bb25-de35c7780b34", "indicator--ac8f47ec-d88c-42a9-8c34-20e7e0de5e50", "indicator--715189cb-1c45-48eb-9fe0-8024dd99a65c", "indicator--fb1fdf1d-42e3-457f-9b5e-bfb84fee707e", "indicator--b9459a83-5496-422c-bfa4-46011a26c3a8", "indicator--7a699043-2c3b-4c8e-993a-2ba3d48a0907", "indicator--c6960c01-2792-4f5c-8191-8dea2765a1cc", "indicator--21ce0554-8e09-414e-9c45-3b947adcc863", "indicator--4397c1a6-2362-4746-ac55-3e11e6065206", "indicator--a46a849f-725a-47a5-aa65-14416cde2d7b", "indicator--b6e8c389-449f-4996-9d05-4241c2d1b852", "indicator--3d767ace-d554-4b41-bda1-fd29b635bcbd", "indicator--00f70c68-2580-4947-8a7e-da26e763dee3", "indicator--716fabaa-a0e6-42c1-8cc2-2429abd041e5", "indicator--857a01ee-88d6-4f0f-91e7-d29d0afcddef", "indicator--ca441025-6c00-4055-821c-7510dcd6296b", "indicator--522698f3-ff8a-4356-a8aa-f6545f97cfcd", "indicator--9074c4ec-bdf4-45f1-a9f8-a3a8c6e913e1", "indicator--897f8e26-cfc7-49ed-bba5-f11c9408ee37", "indicator--6d4487a5-129b-4d6f-98ec-db8261656c48", "indicator--60b7cd32-0652-4665-a99d-03662a5e78fa", "indicator--05c68823-e025-43ac-bcb5-018f4b09fa67", "indicator--56093b03-5187-4ef6-a085-0a8649a04421", "indicator--cb7812f0-c9aa-4510-b1d6-bc48421ce382", "indicator--0a2e32c3-6cb2-4616-8764-39c932784903", "indicator--4bf8ca21-8efc-4781-a810-cdf674d927de", "indicator--3c04314b-3df6-4578-8f9f-cd22b53da9a5", "indicator--fa04dd4f-48dd-4b61-aa43-d7fdab5c922f", "indicator--3a48c961-4428-4670-b84e-d16d69e3d036", "indicator--0df467ac-a327-48ae-a1f2-7b90ea384128", "indicator--421e0c22-a408-40fe-875b-f8a0fe515f36", "indicator--a14249c8-13ee-4cdf-af05-c6f6655d9b34", "indicator--e07e136d-d288-4269-9d94-f5d229ea92fa", "indicator--9129c6ae-609a-4fac-91f3-287739c455c9", "indicator--c282f421-1c0d-4c02-ad19-701ca8b94b71", "indicator--6da4cbb0-34b2-4cb8-87a5-6ad0441988a7", "indicator--1c29d0c9-e34e-434d-a90b-0414cbe553d0", "indicator--5bb401eb-f8a5-45f7-bf70-d14e49246790", "indicator--6dfbe077-9adc-457e-9c57-e00ff35e7d11", "indicator--69f0eb84-563a-4f7a-aebf-9c744fdc7a69", "indicator--3432fee0-eb27-4efe-8844-57768dd985d2", "indicator--3be2ae12-172a-495d-8325-41450ab9c4f8", "indicator--94d9f4bb-3961-4d8a-99ec-03475e7544e7", "indicator--bf2f9b1c-dc2a-4772-88d8-8c5a7afd4eb2", "indicator--e63ce4e2-a7cc-4b4a-99f6-9f1cc12bd8f7", "indicator--804fdb2f-e206-4576-b2ea-04047ff7526b", "indicator--0666c288-73f2-4574-b233-d29f7e088b0d", "indicator--4861a0f3-aa72-4198-b5de-063c7e19209c", "indicator--a2ee8744-2168-4e02-b217-20ff25ff11d2", "indicator--d7353eb1-6575-4921-b9b9-e9721fe9ab38", "indicator--26f37439-af5e-471b-b935-eb5fa8a5be39", "indicator--0fba92e6-8fec-4af5-87c6-a3003e2044e6", "indicator--54206bde-92bc-4bc0-b792-a7ab50391d86", "indicator--411d5575-a41b-4884-a9f8-fb16bfa99b21", "indicator--dee0d701-3134-4794-b536-5ee490304640", "indicator--f3e82206-3d3a-4f94-9241-2a150dfcd6af", "indicator--89d45349-b4c9-4e89-b09e-06f500199720", "indicator--7bfa6c5c-3573-451f-82b8-d85badfcd681", "indicator--44fef540-6a66-491a-a865-584da31541ba", "indicator--1fd7fb45-5ded-4204-9230-3d5bd13f6a24", "indicator--90147a2b-a896-4206-9b5c-65d249f2a051", "indicator--ab37a51a-48f6-4d80-a978-5d31200b0550", "indicator--a0866832-e0f7-4c4c-bf22-ab86a7f61559", "indicator--c813ed9f-1c7c-47ed-b4ce-35c1a4ce2c0b", "indicator--2d4ca8ab-6627-4080-ba00-73b60f9d2037", "indicator--b3ab4dd6-9c86-4834-b23a-07d65509ac34", "indicator--e5825883-dc45-47db-b3c0-b05a2a2dcc17", "indicator--148514e6-37a3-472f-9b0e-362afebafde9", "indicator--e3682f4d-200e-4ae9-acbb-fcea9bb431dc", "indicator--75a9ec27-e7bc-4425-a174-51a0d1897632", "indicator--3a1887ad-b4c8-4c20-b641-89ea4d40da44", "indicator--136ac42d-3d0b-4fbd-bfca-12532121acb9", "indicator--2cfcf717-b32f-44da-b8bf-938ef8d5bd40", "indicator--cfe4c31f-e6aa-48e3-8ccd-f51d83a6968d", "indicator--28c4de00-f457-41d4-b6f7-5780fe1da6a0", "indicator--03ab93bc-d1c5-4597-ac79-7643c05953cc", "indicator--84ec956b-70bf-4df9-8fd9-9e91aaeccd75", "indicator--97135c9d-a5bd-4db2-9946-70c55725a94f", "indicator--dc7754c1-9c69-4e88-84ed-6aafcc5c350a", "indicator--f5113d22-f810-476b-a264-5bfee1733dc1", "indicator--7d4f4215-5f61-480a-8065-d48908548b01", "indicator--cc58105f-a328-45ad-bd93-3599b7582a01", "indicator--cebaae80-943b-4fe3-92c2-71b35c027025", "indicator--7f52281f-58f8-4c64-af0f-1195926504b2", "indicator--212c377d-6ab3-4347-aa30-bb3cf45056d3", "indicator--ce5162fa-0c26-4227-a4a5-93a569ce32e4", "indicator--d2bc3997-825d-4f91-b33d-e2f84533f2b9", "indicator--24700cca-8724-49e3-852e-a98ca0069fc1", "indicator--cbd35f95-371b-4b7e-8ae7-bc902c802c76", "indicator--86703e3e-17ef-4d16-9d7e-ece4ccfe5725", "indicator--d30462f7-2184-46c9-a0b9-e5da91fa2ec6", "indicator--6bae4214-37d6-4d6a-b04a-3a7efdffc4b9", "indicator--c24c52e5-7954-4f7f-b6c7-9ec2e35704b3", "indicator--d6d32d2f-6f4d-4af8-b011-b303be871fc9", "indicator--a7aa7285-fbea-4c5a-aab3-e9e70c7da0da", "indicator--0ee0011a-84e5-43fd-adf9-844c7bb54569", "indicator--45166133-f838-48b7-ac23-5d039462f449", "indicator--abc499f0-2aad-442f-a881-4123359ca30b", "indicator--0ea3f8a8-561b-4564-8a22-04d06835049b", "indicator--117af6cb-7286-41eb-b990-46267e846378", "indicator--488eab48-1e60-45ac-a2f4-141a9140534f", "indicator--7174b4ad-3bf2-42ca-9efe-139e18b5c294", "indicator--4ff2494b-97e9-482a-bee2-1a9e259ca1de", "indicator--cf2556d8-23e4-4bb7-bf09-83589be6e185", "indicator--b43f9736-fa90-4cc3-aee9-9ba2f0a6cf31", "indicator--ebf3d8fe-125f-4046-b493-4273f627c7ce", "indicator--89e0a212-a478-4719-b541-a02a422d05be", "indicator--6cf63577-454e-489a-acf2-f468764fc239", "indicator--647d18ea-1269-4e59-b279-27b7337f450f", "indicator--25fd1677-8e74-4361-825d-355a3d621b25", "indicator--0f941c72-7bb4-4faf-a5e9-5d3eca8d9682", "indicator--60627b6d-68a5-44d9-bd44-0725819c52ef", "indicator--785c90cd-f141-432b-9757-313d13d310f2", "indicator--6356da9a-4642-4950-8ba7-b572c5df143a", "indicator--da8b4102-945a-4b0d-890b-23cf1787df80", "indicator--28c75f35-a78d-4f7b-8a7b-d23e886f43fc", "indicator--276205dc-e702-4ed9-9db3-11e8a932597b", "indicator--407f5b60-7a70-4184-ae52-78cecae5173e", "indicator--c5ad380f-50d2-4f8f-b8bb-ebf0d00b3dc9", "indicator--80f0b8c7-ed23-425f-a463-beca6e7f1145", "indicator--d2b2f2ac-d791-407f-9a90-27e75ca9fd97", "indicator--9297d0f2-082b-4e8b-b877-b6c195675f31", "indicator--509d4ef2-0231-4ec1-87fb-326090082190", "indicator--c967df90-433f-4d5c-a99a-0a14611e7784", "indicator--5b334204-56be-4228-8634-96c1bb80ab10", "indicator--917c2467-1aa7-412d-b34c-bab9b962ce43", "indicator--b793ee2a-f511-4d79-b938-a92cf9e9f535", "indicator--393a4f76-2bb2-4d6f-b037-1e717a6be878", "indicator--f36a5b3b-09f3-4a49-b0f1-43586d225527", "indicator--a7c27a07-0fbb-4f9f-bc8e-ba14a992514e", "indicator--71afd709-211e-4108-85eb-2a059322c99e", "indicator--b2340ca3-7ba9-4743-8df5-48d9bd71dc0d", "indicator--ce9d8930-900c-4e91-87ba-3663a68baa2e", "indicator--6d960733-f221-495d-af3e-1d67e493901d", "indicator--dfa149de-30c7-4314-a017-e89fa37ab3d4", "indicator--c0dabbfc-1576-43de-a696-e90c74aea94f", "indicator--3b85f5c6-b769-4c35-98c9-4d959f0c6471", "indicator--2291440d-c311-4b35-9ef8-737fe1903d05", "indicator--4987cda4-691d-4bff-bc2a-d8db235fca79", "indicator--68a9254a-e400-4a4f-86db-359f4246f7e8", "indicator--1536659d-9029-408a-a665-bc343c308483", "indicator--0ccb0a1e-eb30-4147-8152-c7c223ce7cc3", "indicator--461085cb-6632-49fb-8753-40cbdee73b08", "indicator--9275ee05-00d8-474c-9a6a-57d8b810a4e6", "indicator--1c1bb2a1-672b-4732-8cc2-76efd87a34af", "indicator--7ed8ef76-e1c3-4585-93af-62be08b3f25a", "indicator--d9bbe4f1-28d8-43a3-b696-cc29262ddf5e", "indicator--8dec3d7b-d535-4d36-9e44-ba4cc763e4e3", "indicator--6832ebc3-c458-4038-971a-7b1006bf3da5", "indicator--b68bdfdc-4ae5-40ce-8220-76c61f0283f5", "indicator--e8bf19bb-37df-41ab-8e0c-cd382cc50192", "indicator--0aaef619-a0b2-477a-a2cf-5d1ac35cf367", "indicator--6df69afa-2a92-4016-8dab-ea642989a12d", "indicator--d5eadb4b-6365-4ca8-8180-f3305acf4660", "indicator--66ae884c-b135-4ee6-8ed5-516d29354e4f", "indicator--83ff2d1f-213c-4072-92e1-9b8cbfff5896", "indicator--448ec259-a89f-4198-b18d-455633777de9", "indicator--84201f76-e6c9-4029-b298-5d1b5afa983f", "indicator--dd070dd8-ac5e-4367-9e10-865b2b79947e", "indicator--4a604d74-394c-450f-b3c3-865c885b39fe", "indicator--86458ff9-df75-425e-a760-5d765aa8b14b", "indicator--f018040f-4047-45ea-abab-0fde879a93e6", "indicator--130e83c0-6a8d-441f-89a7-77c8be2798cf", "indicator--a000a2e5-d507-4b02-97d9-372b2732abf3", "indicator--0f70215f-11f7-46ee-b813-2e5564403b78", "indicator--200dfaac-15ab-4b69-822b-c1011f79b460", "indicator--6d7f3680-7cbc-411b-b720-a11c09cae5b0", "indicator--c6a1ad33-0cfd-4272-955a-4a632fc2ae47", "indicator--0f1c7045-a45f-48e4-91a0-d6da8ec302ad", "indicator--0d1cc4d3-7aa0-4ac2-ac81-cff67195370f", "indicator--c1bc2943-756d-4994-b29b-eb40b1c7d749", "indicator--ae48c2cd-427f-49c7-ada7-9386c75fd9a5", "indicator--8194e655-92e4-4e7e-8f87-e8de6f3bf84c", "indicator--ef5c67b5-2d69-4ca1-8079-2d26b9855b0b", "indicator--6b5039cf-a1b6-4cc5-af99-45b68d07821c", "indicator--960a5da9-da1c-467e-9603-aa5d3a75785b", "indicator--019f220b-03d3-42bb-8cf1-af3f513e3b10", "indicator--146848a5-1c9d-40af-a2e3-eb1ae51d1acb", "indicator--390a1c32-decf-4344-bb8e-586daf7034ec", "indicator--57d7349c-3528-4506-88bc-b7c629e0a2a8", "indicator--60c4f7c4-ca34-4448-80d7-05a0b01421ea", "indicator--0a378c60-9314-4d34-9492-96c051fb03cf", "indicator--948c8f75-d30b-4d3c-a946-94058a304239", "indicator--d7f63e5d-f0f2-4a9f-9daf-40954dcdd4a7", "indicator--dbcf39e0-ab48-4860-a048-d1c1882940e7", "indicator--a52a4744-6814-4df1-ac89-9cfe796061fb", "indicator--85e1848d-1e49-4561-8e0f-74bd45c9e9b4", "indicator--3e4bd0dc-cfc3-4381-a275-dc9871181a79", "indicator--297aab31-3289-4a9c-a888-62ab5f30c686", "indicator--ab8d2ecb-0a84-4042-b7c8-abb9d5592cda", "indicator--1eb6862c-e4d9-4d95-91ec-966c1627b6b7", "indicator--940f3cad-0837-4ac7-9db5-554ef435dc6f", "indicator--abf07f10-9e66-4a43-b05d-7166cedb9e14", "indicator--ca5bae94-aa30-491c-b687-0029fc19400e", "indicator--854b9141-4dce-4149-8e45-724137bc3a63", "indicator--6d4b93f6-68d0-4adc-afef-1d6d6c101295", "indicator--65f1b110-bdc2-481b-b603-51488f036d98", "indicator--5b75cdae-52eb-496d-b2ab-a93e42548181", "indicator--1b5d35ec-213f-4978-aee3-6c4d474ac7b4", "indicator--313b62d1-6f1a-4b29-bcdc-ff855e53b837", "indicator--c8f4452e-787b-4742-9911-eb998aa3624e", "indicator--7a5252cb-b888-4d20-b8ce-7a3ea7802d43", "indicator--799bec0b-663a-466d-8116-9b7937da442e", "indicator--936e2a9c-f5de-411d-af0a-a4847a83f5a3", "indicator--5393126a-b3d5-4833-b989-e54dba02a0b5", "indicator--0d132b1c-5258-4537-8d18-282f54e6808e", "indicator--6035720c-26bf-4f1a-a8fc-12ca7c47b2d2", "indicator--1fbe6732-9fff-492d-8672-3234613c1ef2", "indicator--b2fae730-cc0d-4fae-a774-c366fedcaf51", "indicator--f152dcdc-5048-4602-8757-ea333e65810a", "indicator--3e7fb79e-15ff-4778-99ef-3f285fd07035", "indicator--5467371d-b327-4ed5-ab4c-88c688002798", "indicator--6960d025-d037-41eb-aa90-7fb79270550c", "indicator--5fb3b3a2-d6fe-4278-904c-c2784e026307", "indicator--5a75aa23-ab0f-4e2a-8891-13f770981b08", "indicator--cf7a64a7-de5e-49ab-b177-1693f5f31576", "indicator--ced70c26-a9a5-40fa-a71f-342d42245457", "indicator--f3656b00-b416-4b32-ad6e-cffca56e533c", "indicator--44eb6023-3807-4dcc-aa8d-46847ecb1a9b", "indicator--1d206df3-89fc-4eb5-80ac-b44e387d9ada", "indicator--a019645f-6353-47bc-8d2c-6c2e17e60659", "indicator--26b035d4-6aa6-4e1e-8f55-aa6cddde1470", "indicator--d325dc7a-8473-4cba-a0fa-1a1f68ddbb66", "indicator--8c5e541d-2baf-4e45-83ef-8ff530f7407e", "indicator--2131b2b2-a3f6-4503-a869-0127f75e7815", "indicator--1c82d6f8-b0cf-440b-90dd-ffb8d73dfa31", "indicator--6c996058-ddd5-4bcc-8667-39d1344e6798", "indicator--d65e5da4-3716-4ba8-98b9-755db4dfaa18", "indicator--3552e6cb-2585-43ef-9e6d-8c9ac3bd6506", "indicator--61e3d496-e668-4d07-8111-314be206453b", "indicator--20105ca0-50df-4cfd-b2e1-ac4f670779aa", "indicator--04a6684d-f37e-401d-8fb3-eb78b366fdc0", "indicator--43e7d955-adb4-4303-a542-6749bce669f8", "indicator--c5efb7c6-c3ee-4f4d-8f4a-9ee50fa863bd", "indicator--a72b22dc-e6dc-4689-b1d9-68285ee57465", "indicator--64978d37-a1a2-4555-9739-edf11e3a67ba", "indicator--81b74694-1b1e-40ed-9acd-7d83136820fb", "indicator--00be984c-97eb-40b1-8a4a-30456fd2268d", "indicator--3fbcda6d-8486-49fa-8933-d306fb9fd509", "indicator--5d45283e-52de-42a8-8439-4f71faa796fd", "indicator--30f9df9d-5e0e-460d-9bd0-6c2a8f3bc531", "indicator--d56fdff5-406c-412b-89e8-db759275ceff", "indicator--f8db1fda-3111-4129-8072-fc6ff5c7fa11", "indicator--9e577a7a-28bd-4863-8e30-7b500b0dd1b7", "indicator--df5681d9-c84f-409d-89df-3b51a455788e", "indicator--7b074fa0-a9b0-4b24-8672-a664d57dc5e5", "indicator--a77f524c-3ada-4e78-a166-2ce0aefa3749", "indicator--d1ac5605-b36e-467b-8ba9-45be3297867d", "indicator--6f4a7362-1402-4c50-a201-1d870b8125ab", "indicator--4d6c93d5-24f8-4b01-ab52-50a73e2ec4d8", "indicator--ffb1df90-94d9-4ccc-bc1e-2ca8b0a226a0", "indicator--268f455f-eb6b-4680-af41-f271766851ca", "indicator--90501edd-859a-4c12-834d-6f6002e4eec7", "indicator--5796b42b-438d-4f78-8e52-5a9edecacdb1", "indicator--eb799113-8e2a-4723-a1af-2ce7d5981d74", "indicator--4422f1f8-b7b2-4f12-9214-07da25c1a1dc", "indicator--90c9a4f6-db95-40a0-96d6-0ebeda06712c", "indicator--2ee3e1c9-99eb-4bc9-bf38-d39c6f3e7541", "indicator--5323c693-0b4c-4175-b9d9-24b52077f2c1", "indicator--f02e4480-7212-4665-936d-f2c56b28bdb5", "indicator--1ba3ef85-27cd-49e9-8d12-6fc9c75d559f", "indicator--ed797689-9c74-4cfe-8602-85de037cc2d6", "indicator--664b0912-693a-481f-a1ab-8390c4b2b989", "indicator--62917e81-bf58-42ff-a707-f0c463719a97", "indicator--843b496e-50f0-422f-a93a-a1a5ab282ac4", "indicator--7d6c211a-0e4d-49ca-b74b-69b376758ee6", "indicator--9baa160e-d4a7-45b7-bb75-db000ffcda8d", "indicator--9e2496e8-e23a-4059-97cc-3bbbc008a53e", "indicator--05078c1f-6c0e-483c-bdf2-1a94eba4dcbe", "indicator--bfafc2a5-98dc-4ff3-841a-048a79d32429", "indicator--498e5aa4-1db5-45d7-9629-52becb176085", "indicator--25d85312-e740-41c9-9563-a196a58e61fb", "indicator--fe9f8a6c-a0cf-499c-86a2-d5e338007a45", "indicator--efb72f7c-a14a-4c5e-a98d-4981e6011a60", "indicator--ff9a3b5f-a2bb-478a-b856-c67e2f5a72e3", "indicator--9b29cf3d-6a10-42cf-9874-bace852c7f71", "indicator--925c651e-c577-4e73-9932-9167a9054500", "indicator--dc3c04e0-bffc-4bc0-8a1f-4d4ae0860951", "indicator--e2677e89-7c03-4a78-a340-2235f282aec4", "indicator--71fe2e22-bd59-4a6a-9d56-80d814384ac7", "indicator--31c5d502-5ed7-4acc-9a7a-c90ae8fd7b01", "indicator--ed69cccf-4834-497a-9f1a-9921d966b81c", "indicator--271c6934-58f7-4b91-b841-a9f4e6cb6f71", "indicator--ef9ba9c5-5353-4fb8-aab8-5fdf73de4279", "indicator--a1b37b14-b768-4372-86f2-88830d771290", "indicator--21cd85eb-ae05-49c8-9f3c-3c8e5591740c", "indicator--cd28adf0-1ff0-4e5d-8ee3-54a32eb760fd", "indicator--3a2efe53-dbdd-4ca5-8bf0-1047230c76a3", "indicator--79279a39-d844-4d58-96f5-1567b8bbd762", "indicator--9d5c85db-3f71-4266-92aa-b7d9d441af79", "indicator--354b00b3-5a68-408b-817b-f7a137f74c5a", "indicator--7fa4c928-4640-432d-bb51-d613fe3a99dc", "indicator--6e9b9911-9fd8-40be-9f75-fd9b0e2112b7", "indicator--e6e65b24-bbb3-44ef-83fd-99fd0029cc68", "indicator--d2059e13-6bc5-4b92-a5ff-74671c434f82", "indicator--ebde72f2-b5fa-4d00-8da0-90b5e7782880", "indicator--6dcf68fb-d8fc-404d-bf4c-8797a5fc3d9d", "indicator--3cadbbdc-234e-4762-aabd-bb59f6c0bdef", "indicator--545707da-2e4f-441a-9b7a-a48554a8a1c7", "indicator--ada1ac0c-a3db-42c5-9108-ed485a395a75", "indicator--d7d7a2f2-4c87-4cb1-8285-5c8bf2740b87", "indicator--b93046ad-d242-4e8e-adce-38ce79e9a5f8", "indicator--e8216fd0-fd8c-485c-a863-e093fae09588", "indicator--d7a49b5e-d8cc-44bb-864e-cb4b5027215f", "indicator--07eecf1f-d7b1-4454-84d1-6ba5f69c2830", "indicator--be97165f-af5d-4aae-a1bd-8ad7ba156ba2", "indicator--6710295a-96e2-4cb5-88c1-d43051396f35", "indicator--e5299944-9924-4d5e-ad65-28039179873c", "indicator--189e0b9d-d10e-42c6-a06c-2258cb14742f", "indicator--1f3f509a-a62e-4599-8008-9f037c221186", "indicator--d691e32a-fc2a-4384-a18a-8fd1edbbf288", "indicator--be192480-661b-47ed-9cd8-9bfafce35fcc", "indicator--a04da9b5-95a5-4293-b2a8-d1394521f469", "indicator--79275caa-51f4-4ba3-a182-5b7e2c21eec4", "indicator--bf00cb8d-e581-4589-bfc7-4f7fddce8fe8", "indicator--132437c4-1026-47d4-8074-ef10d242d60f", "indicator--f6390eef-3a25-4989-8604-93e62df61c57", "indicator--b9523da4-c7e7-42b2-b5c2-1d83de88fd17", "indicator--b79ed34f-01a6-4b65-968a-885a65d055be", "indicator--77aba2f5-fec1-41e1-b0ef-3a9f891bcae7", "indicator--38d60a9b-cca4-4f3f-9550-4fcf6bef4ef7", "indicator--55f772d5-56ed-428a-8adc-018bbb2a20d1", "indicator--9332cf01-cfea-44a3-9acb-5bf8bbd1288d", "indicator--e59b58ac-f579-4f4d-9e12-b56ed0f70102", "indicator--7cb9188e-1861-4f4c-8cc0-64edf1d09a7b", "indicator--03ff98eb-686f-46a4-a3ad-93bfdc71da3f", "indicator--fc5a611a-e905-47a1-aaad-bd2f9e73962b", "indicator--41ee323e-704f-4060-a368-7fe63eaab045", "indicator--dc5ffc0b-7c22-4032-92dc-5313de88682c", "indicator--b82b6cc8-82e0-45fc-abee-96d85100c520", "indicator--f806c817-6b58-43bc-9126-13e56413086e", "indicator--ba4639d1-b39c-4434-9dab-9f6ba026462f", "indicator--48701089-6cab-4658-90db-fe2bc5b02589", "indicator--e8505c69-642b-43a4-94b2-9c3fd0efd656", "indicator--50ed4b8b-c8f9-457a-9590-8dc2e52769e4", "indicator--b4bcb51e-1651-4233-bea4-17eb8b962a7a", "indicator--d2fd3f7c-723f-409f-a2be-7cd858ab7bb2", "indicator--3f43fbba-6712-45d1-9b1c-83b6c86067ba", "indicator--283d540c-a754-4fdb-8fb3-c78647300677", "indicator--b5843092-c0ff-40d1-bd24-e18dad2d396e", "indicator--f11c480b-02f2-442f-ac72-79cccbc75622", "indicator--393de175-4691-420b-91db-01e113de3669", "indicator--abbd7269-e8d7-4646-8727-2ff67b13aace", "indicator--a5ea7f4b-1bf1-4aaf-81a6-2935f400658e", "indicator--0bc04c4c-7391-4424-834b-0a087fe76dda", "indicator--3fb77001-e5a2-4b60-957b-9b6f88ae9b70", "indicator--65b5ed00-b0d3-4a19-93a0-621c9ffbe4a7", "indicator--224b7b19-f585-4022-9dce-973ef65caa0d", "indicator--0b5570b4-b8c9-4822-9a88-7021e7d74641", "indicator--f7739d76-3017-4035-b55b-66b5255bc518", "indicator--9a1ac368-4a46-439b-ba0a-a3b9a99ceba9", "indicator--f6330684-dd08-48a5-b9b1-5af4c2108dab", "indicator--68671ff6-aaa3-4a26-acdb-0aae42b4bc2f", "indicator--711c9540-69c6-4563-8203-b15ce146d46f", "indicator--bffc0aa9-7df6-4e90-9c5c-76099f815c95", "indicator--29da30e4-16e2-4af4-854c-27efd7a398d1", "indicator--b2ebd2d3-e900-48ca-b5af-c078b744c8d4", "indicator--9ae5d5bf-11a4-4697-ba1a-146803a01972", "indicator--97185e27-a68b-4be7-a5d3-f82c662fb664", "indicator--8a5eedc1-1188-4405-a901-7e994e697c28", "indicator--102164ee-3521-4dba-bf7e-22494d1a7a71", "indicator--49270c8a-28b5-4718-a9e8-aecf80f7c166", "indicator--712876e2-9e6e-4121-be73-63db67452164", "indicator--09b9ec51-fc44-4d81-a5dd-f3ae5f69c3ac", "indicator--0189f71a-8d81-475e-9723-93b7525f7512", "indicator--adf63771-a928-4850-9ec6-431036146beb", "indicator--c3767681-484f-4767-a400-cbded846ed82", "indicator--178bb7c1-8b78-4189-ac93-ada384764d46", "indicator--790cc5d5-542d-486d-af9a-c8532399d4dc", "indicator--f4a83cc9-e01c-43ae-a4f6-75e5850a8d41", "indicator--ba3a46ef-4204-423b-815c-6b376bb81bf9", "indicator--2a51747f-f581-4bdf-bc59-871e7af94ce9", "indicator--84c7d1ad-2dd0-4e22-bebf-c4561959af87", "indicator--e01c10be-4509-4ea6-8746-cf349a26bb4e", "indicator--6881aa99-374f-4b44-8d7b-f57844d7c555", "indicator--4ffd7e01-6915-42e8-bd33-787f8019752e", "indicator--78d6e96e-0827-4c6a-9d36-936021fad4d0", "indicator--3979f513-9739-4a11-88da-6d32e5f17ab4", "indicator--dde30d0b-333f-4bd2-a32e-0213c51da2ec", "indicator--85d050cf-ffdd-46c0-9f5b-7fd909748e1c", "indicator--b046b08f-ecab-4441-a523-ea248ed6c2ab", "indicator--4ccbe354-6430-4e89-8bb2-ef761ac9bbf5", "indicator--49ed8609-94f6-4f89-b566-07f1f9f8ccc4", "indicator--0ac46a82-147f-4b70-b0f3-2ebc3eae6038", "indicator--581fca62-278e-45df-b292-a9d705653b4b", "indicator--37b65d2f-bba5-4de1-ad98-34befaa79f85", "indicator--208bf565-92aa-45dd-ae3c-87ddcb149189", "indicator--a02630c4-90bc-48b0-97cd-b58708dafb09", "indicator--2e79278e-4dad-47f0-9821-0f2139baaecc", "indicator--472d86fe-02ac-47fc-ab5b-dbb940f189b5", "indicator--fedc32f4-b773-47d7-ba95-9f205c91fb38", "indicator--0731e16e-8f7c-4eb1-8c9e-c7dc1974f88f", "indicator--3b1c0410-a9ac-4047-92ba-ccc088a00a15", "indicator--a79a4fcf-d6eb-4b8a-bc6a-5ad0e90bdf0a", "indicator--65b2d0fa-2bb3-491f-9dc7-e8051ea557f3", "indicator--9e0904a2-bbb0-42f1-b738-2772b83f436a", "indicator--4ae14e97-8980-46bf-b7c1-dbbc6de13ced", "indicator--848df202-ee1a-4f5b-8977-9b0a75555d52", "indicator--877fd40a-1c31-4882-b967-73ad5a0b3c40", "indicator--f6954549-dcbe-44e7-b133-3fd4dacb2b7a", "indicator--0ea99df7-093b-41bb-b252-046c98a9a9fa", "indicator--41ef47b1-7254-40c7-b9f0-8a94e57a84d0", "indicator--d32cffc9-8bf9-43e4-8044-eb20c48ee511", "indicator--3ba662db-0900-49e3-bd5c-bb08689fc379", "indicator--cfd46f04-9fd3-475a-9f3e-94d0345f8dc3", "indicator--16aa21e2-0e85-4fe4-8a36-da216f577e5a", "indicator--9941b3c8-2ceb-4b8c-8926-c76437be7f1a", "indicator--61a4e13f-369b-4004-b1fc-7485751cc223", "indicator--cc958989-0f6f-4b0e-8428-8e68a7120e10", "indicator--dcc8efd7-670f-4755-8511-a49d5ccb4883", "indicator--f5e67198-4bd6-477e-8438-2e345daf80a0", "indicator--adb6f227-aeb9-465d-ac9a-a2b26abfee5b", "indicator--49bfdae6-b430-4d77-810d-e9b06df629b6", "indicator--649cadc7-8296-4761-af57-b55c958bb39b", "indicator--4d905395-ecb3-4de1-97f7-16fc66efa41a", "indicator--a8a9096c-3116-44cc-b0fe-9de98ff1c5c1", "indicator--ade12725-769e-4196-9a47-0b9efc994df3", "indicator--bcdfa10a-194c-4bcd-ba46-58afbf86a6c0", "indicator--fdd4be39-c5c5-40f8-abc8-a717757ab67a", "indicator--b09a4efa-e067-476b-9d52-8352452df1fb", "indicator--0fbabe49-1667-47a5-a9c8-006bb2d3d9ac", "indicator--7c3b0054-b45d-473a-badf-ef2a19b4d617", "indicator--c421f0b5-b9c3-4027-ab0a-6c131fa6f5cd", "indicator--4b9ed1af-4354-480f-8658-85a2612e2a2f", "indicator--ca18f670-c83f-45f9-89f6-9b192fae8c7c", "indicator--240a14d0-0b56-44ae-a3b2-965110720d58", "indicator--04ce824d-dff2-45cc-a2d9-6b59a17176b8", "indicator--3e775e22-c708-4c69-b4ce-392e3ed5c537", "indicator--4515fcf2-0ab7-4353-b084-4e9d8442ce78", "indicator--f83cf809-45ff-4a1d-be4c-1e576fe0bd65", "indicator--168e2b75-909e-4481-8803-1ef34e115dd5", "indicator--5b6b2df8-5beb-4c02-b645-38bf69f1b2fe", "indicator--2f51e0b2-fa9f-4aa3-80ff-ad5f75c090da", "indicator--896f32be-3071-4d77-9911-19a0cfdd2922", "indicator--15ef93e9-d1d1-4d25-b384-9cd4dc5039ab", "indicator--546c4215-6cb7-4ee7-ba4a-7ee9e403e5ec", "indicator--d4e042ef-05f5-4326-9907-750cd001ad70", "indicator--d27f8b44-c7a8-4d17-994a-6ad789e9a21e", "indicator--0fc7ac99-cca5-4b6f-abe7-96b4b230ea3d", "indicator--bbcad1b9-cef3-4f25-9f4b-91db790e12fc", "indicator--4c486611-bd61-4d21-b624-e6178ff25f39", "indicator--b3170cda-6849-4675-a8f3-00348a22d8e8", "indicator--31a7b6a4-6de2-495d-b9ca-b869c3bf7215", "indicator--d8c5d068-bd6e-4489-a389-eb7369cc7762", "indicator--ccf690e2-d533-4d7d-b94a-b322533282b4", "indicator--5b085137-6d90-4fd0-8ffa-9c708ee5a008", "indicator--eece844c-5175-4d6f-af2b-f2978deba0f9", "indicator--a686a8fa-faf3-4463-9358-c9598bcd093f", "indicator--629b9435-af45-4893-84b3-06f9c106bc9f", "indicator--df87e697-2ee4-4f4e-8e20-a49e2eef1074", "indicator--cddedfad-b447-4ff8-a189-1580da32a8ea", "indicator--ef6761ff-603d-44fa-a25c-959d086b463d", "indicator--fb65e25e-f626-4ab6-95dd-02b4b8dd7c2a", "indicator--1601ad5b-4e07-49e2-8023-1dc85b12989b", "indicator--271e423e-be0f-42c7-8924-902750a055fe", "indicator--47696101-aede-4085-904a-b6fc7b2562f5", "indicator--5879976d-3e3f-4eab-9c6f-a287630ec67e", "indicator--e64bb1d6-705e-46fe-9231-00af9751e405", "indicator--133fad35-2c29-4f23-b4ae-5ac432f42faa", "indicator--85d3f933-bc0f-4ee9-be44-81f3b6e89225", "indicator--4496d870-89d8-4420-af75-dc808613ee03", "indicator--fbdd1100-3933-4318-bf09-ec0d2c65874b", "indicator--31fd1195-f22d-4320-82d5-8a23a8e266c5", "indicator--15bcf58a-d199-491d-89a3-d9923ae0f0f2", "indicator--056cd962-54f7-4dfb-8f66-bdc738bafe09", "indicator--8bb36dda-2310-4594-8d5d-2e622b21388c", "indicator--29bf0aec-bd41-4a54-b199-f41e335b97af", "indicator--75132953-861b-4c58-9baf-1719da25c27a", "indicator--04905965-24d4-46cd-b674-97be80d109d7", "indicator--0d407bed-2e30-4093-b4bb-6e82c70f3212", "indicator--24b5c2a1-e595-424c-a82a-1153d497486c", "indicator--a9daff71-252e-48a5-935e-923936a92057", "indicator--db09d62f-20bb-4571-9bc7-4ba089a6619e", "indicator--26401f65-7b4a-462d-a6a4-9efe63f3d2e8", "indicator--30ba6015-130d-4f90-945d-f6c8f7e314c9", "indicator--7c3f0f28-6f4d-4a8f-ad57-62f52a37961a", "indicator--3f28b6a8-2fa5-410a-a9b3-c5d40f4796b8", "indicator--a3ed98e6-55f7-4c37-a143-9c41f2514a00", "indicator--80ec30c7-cbbf-4e75-a2d2-de3b6fe47c9d", "indicator--6b421eb7-f157-4a89-b41d-7f8a03a303ad", "indicator--df0ab8e5-53d1-4a03-8857-49725af3fc89", "indicator--a4ca041b-fba8-45bb-a29e-1b20d799bfab", "indicator--7795ca46-510d-4606-a4de-ec9b8ce5567e", "indicator--acb91653-d67d-4472-a811-7d409e0a82fd", "indicator--604aa0bf-1d66-4049-9fce-2deb9a621ac9", "indicator--ba18092d-4e69-4753-acb5-03f858eae11d", "indicator--475e6b3b-ed39-4468-95f9-2c8a835e2cc5", "indicator--f55e58c1-0223-4229-9531-a967ca954f1c", "indicator--55d02572-d7fc-4f90-b9d1-47bc6718690e", "indicator--61315ca4-e313-4f75-a076-a06f0e65dd90", "indicator--033ec764-8ce9-489a-a254-73915269356f", "indicator--974885ff-90d1-4e7d-b146-c0013ade4d3e", "indicator--d5e3df3a-282f-4278-a7f6-eedf29663ddd", "indicator--d6e40bbc-57c4-40d9-9647-c062aa824951", "indicator--e7d2007e-16ab-4846-b081-24192f0e2251", "indicator--5b368a5e-6774-442a-93df-5126d5b71483", "indicator--ab7aaee8-272d-4b8d-b975-c163e63c06b8", "indicator--e5b6c7ec-c057-4283-a495-3dd2066ffa3f", "indicator--6f9e9924-6b90-4a07-88ca-51c7c6a891ff", "indicator--52e75eaf-4ece-4d24-8055-c2a627368e9b", "indicator--5fd59a34-7b9f-4aee-a239-49339231689e", "indicator--ff9e37a1-906e-4e7a-9ed0-43b289ba6988", "indicator--7db08305-3fa7-40a7-807f-5797785e8130", "indicator--53b8c7fa-6148-4c52-ad74-4c49686895fe", "indicator--f5ba6cdd-243a-4894-82c3-55d578ff1df1", "indicator--cccbdde7-e8b1-4805-b895-b61c12f87024", "indicator--03e3365b-9706-42fc-865a-a960e12b27a7", "indicator--f9b71996-755f-47e8-949b-dcd5ef56f715", "indicator--c5cc83a8-b758-4e43-8c07-3950d27ee42e", "indicator--97b9a37a-fc6a-49c8-9fa3-913794f969ca", "indicator--9e386de1-c958-4f1d-8059-4827a53759c0", "indicator--14194118-2f7e-4ac6-8dc0-162e40dd268d", "indicator--cd63c014-200e-4420-a3b4-01cbe293a7b4", "indicator--b314ce4a-a51d-4bcb-b400-f4a6c7fd4caf", "indicator--5befd266-0810-4fd4-8b90-3024169c0aef", "indicator--38546362-bfdf-4358-9b68-4666461c2f10", "indicator--c90a1489-620c-4bbb-bbff-d3126e1c7537", "indicator--f8834646-6e89-4c01-9a35-ca2714ac3000", "indicator--5ce6ad4b-0ef4-473b-abad-eb451353c761", "indicator--76c464a3-d9df-46cd-b15e-cb3dc125bee5", "indicator--df5e209a-0bca-4e95-9e67-f9ed1f8db028", "indicator--babe93f8-e308-4639-8e30-8e2e6907f5ac", "indicator--60b937c2-3f0b-44cd-857c-8602dbd275fc", "indicator--df6af71d-ab4e-4b88-9ab7-e27af478f49f", "indicator--5f5e47d3-8282-4848-95eb-1f969dd84cf9", "indicator--970a2dbf-b4da-4c90-a9e0-ba636be9be7c", "indicator--b6533200-d6f1-46a6-8ff3-4492b807e1eb", "indicator--deb8be41-ec6b-4aa9-a45f-180cc984d512", "indicator--2765e35a-fc0d-4c1f-a8d9-ae5d1e8a5753", "indicator--e9b7c89e-da3d-4581-bdfa-c306112e3840", "indicator--f1a3935c-8c4b-44d9-ab08-8e317278c077", "indicator--cb631694-9254-4019-81a9-eecda2489ec1", "indicator--4f0ca9b5-c93b-4d27-9289-3f5a4ec516f8", "indicator--84610d80-e19e-4682-a5f5-5a1c6de92b57", "indicator--75edc00e-d28a-4c88-b998-cc614913922d", "indicator--d3c9165e-f812-4162-b167-b595d556c693", "indicator--7ac87e02-d5ab-42cf-8b56-ef4ce703826d", "indicator--e59473d8-a1a7-4a8f-b25c-3ffa0de86970", "indicator--c06f9859-ecb1-4b6d-92b4-be94b7fdeca1", "indicator--38d16686-1a83-4623-a522-846e0f847f5a", "indicator--6c40089c-8c74-4a4c-a192-66363518ecb1", "indicator--ff16e163-ce85-44ec-acf8-7ad669151ec7", "indicator--82721c0f-4797-4b0d-9e68-3bea2920c932", "indicator--6aba45a7-afa9-4f31-91ec-760104c7f15b", "indicator--237ce613-b789-4d00-abaf-e29b5cb5184e", "indicator--64650c5d-d6fb-408e-90ad-157d8811d776", "indicator--7083960c-9bfa-4b63-89e5-769271eb6bd3", "indicator--4a8bc1f0-c083-4479-ad49-ac59569c279f", "indicator--bd543171-ee4b-4230-82be-baf950c2edb8", "indicator--c9bbc2b5-f6dd-44d3-a82c-b5ac44f8bb32", "indicator--292c32d1-e179-47d0-930a-f53e7cb2cd59", "indicator--a32d5fda-c1d1-4d41-832f-b1df2c8a23ad", "indicator--fe6d6d25-6922-4cc6-9fd9-82a792e67040", "indicator--fa598fe1-9251-4602-9d6e-23f112943663", "indicator--6eb76b67-0498-4d72-a7ff-835082e719a6", "indicator--66942855-3695-4f21-8b83-602d55c67a84", "indicator--a21b153d-8a55-4783-80c2-87a4378ee904", "indicator--d3bee5f7-dfbe-472f-95e2-654f5a3005f1", "indicator--86005a3d-7df2-471b-8214-de01ca57cff0", "indicator--a75fc8e3-9a9b-4c89-a19a-9447109fb4b4", "indicator--8b5610d8-a649-41a9-8c86-7a909ebac06c", "indicator--338733dc-2375-4b39-ba1d-081818d4d45e", "indicator--46e77346-18ab-413c-bd1f-7e90c2663961", "indicator--58643d62-5ade-4514-a818-e71ace10542a", "indicator--b14215c5-5c98-4a35-bbdd-0f2227798cba", "indicator--4f76e04c-b675-4a3a-a56d-d0c6c7efb468", "indicator--b803300e-ec96-4f57-b4c9-f28f6e693948", "indicator--43101e74-6403-4122-a6b3-694a96c17a21", "indicator--591e37e7-dd40-4451-9023-1c739eb67ca7", "indicator--2232d597-a832-4ded-bdfb-451dafe01232", "indicator--1d2de643-ca8f-4d6e-ad38-2536ccdcd787", "indicator--9171b893-5099-4a87-877e-68ed1d1c6431", "indicator--fb189f36-61bb-4e06-9f57-c0f40b68fcfb", "indicator--bb3bc405-1d0e-4896-9444-31c934cdf4b2", "indicator--7d837af5-42f9-4f7d-984a-b1ad5d3b7c34", "indicator--1bfc0903-581b-4d33-a195-befff4d8813d", "indicator--328deb36-fee4-43f3-a247-f2ccea9e3e0d", "indicator--78c77fe2-49c5-44bb-ba27-afd3a4618479", "indicator--6b9be4ac-81fd-4b16-bf7c-cd12fddbd9bb", "indicator--1ca0335d-1c18-4a52-a305-9de77b6601d1", "indicator--16bee097-c463-4a7b-8bd8-a6ad747ca77f", "indicator--fb7bbcaf-78ce-488f-b720-dd44b0ac1aaf", "indicator--2a37a7b3-4394-4eb1-b2bc-8954bbaa8240", "indicator--e8b59af5-121c-439e-8478-cd750e6c5f5f", "indicator--0964a12b-355d-4b23-a567-bd82ae15e25e", "indicator--a844ea95-c9f9-4372-9cf1-4bc3bcaa31dd", "indicator--f22fcac8-9548-40f6-8421-dbd6e09b63ca", "indicator--8e80a48d-f6c0-42f9-b081-d620a253940d", "indicator--9d4acd5f-9e67-4ce3-a805-28a606f7b906", "indicator--7613f02f-0f0c-4d93-b44f-4be2da3f8a26", "indicator--d5b81f20-d67c-413f-9b4b-58d0f7aa727e", "indicator--f873f9c6-6ff8-4698-bd28-ed0f291da992", "indicator--0fa43433-b385-493b-a7df-1c9048d194b3", "indicator--c6e6f52a-0217-49af-964f-e7718a69cd55", "indicator--715488e2-b617-4aab-8dff-2dcaba8b3b13", "indicator--625a1a62-8a97-4f81-946d-eb8bc38737a7", "indicator--2feb48cb-66db-42c6-a084-6f230e9771a0", "indicator--0f16eaee-a7e1-4b97-bc8f-da16662ac756", "indicator--9ec1a9ab-379f-4d89-a1dd-95089d37d012", "indicator--fbe36ea2-cda8-4289-8b62-e7c4c3400142", "indicator--386dbd4d-e3fc-4a1f-ad9c-5ed924e9ffd9", "indicator--d43dd0e9-2bd7-4876-a936-7ada61cccafc", "indicator--c75b82f0-c292-4c21-a128-6fb9b8e2195d", "indicator--94c28649-9891-4199-abf3-2845052b55b4", "indicator--e8232029-260f-40bb-aa86-bff83c22dd09", "indicator--123e714b-5068-4cff-90b0-5e2a4c431202", "indicator--b6393c66-9d48-4b18-be93-484b0b7fbf83", "indicator--5540099b-87c6-4797-8d4c-6590ac8ca83b", "indicator--3a61567d-e886-42ea-a91e-eeefe30d5583", "indicator--622377d4-88c6-43b0-908a-ab74872d292b", "indicator--8ecafcc4-cd52-4e5e-9703-d492492b4cf0", "indicator--5f3a7f91-9017-4745-8525-ffe7768fcefc", "indicator--f38e66b5-1345-4b12-b8cf-9e5ec8771d62", "indicator--e2d4b44b-eb60-4169-ad23-56bd5ecc8485", "indicator--771acab6-4f54-40c4-b6e4-14d05c527d28", "indicator--a761932a-b97d-4ef2-9efb-556c761005de", "indicator--38bbeafd-489b-4507-b4c3-cc549b236014", "indicator--32a2dfdc-148d-4745-8400-b6e8d54ba90c", "indicator--c41452f9-82ee-49e3-bb44-1fa489e6511b", "indicator--92073ea4-2579-4077-a1f4-68522077e50e", "indicator--59010d65-6931-411f-9c57-466c02dd85c9", "indicator--b535b827-2936-46f9-8fbc-4ac77cbe2221", "indicator--adb88a60-ee5b-469f-83f6-2f3517483a5f", "indicator--dbd565f0-2688-485f-ad33-5b9284a901be", "indicator--7b6af4a6-7962-4101-a727-c35c7546358d", "indicator--6f422ebe-3a88-4ae0-9c88-a1064f3911ef", "indicator--9c9d21c5-4612-4294-9b52-e77c4e4f195c", "indicator--df78ba10-3b78-4bd8-9f09-c110f263eaa0", "indicator--a157fa48-7a5a-4ca7-bd83-11357a6e6db7", "indicator--29a4c70c-0c18-4508-a8c0-03453f9b599e", "indicator--60ddf3e3-93ef-4b97-b9bf-298e70fe886b", "indicator--b9def0f6-5308-4675-869f-eff25599c724", "indicator--1c064caf-9288-4e18-a236-a76c08d6e08c", "indicator--8959d3af-86f4-4f1e-bb3d-891e12836af5", "indicator--4e42866f-1ede-481b-84e7-b9aae9e66fdb", "indicator--bb4ee562-afc2-4ba6-a36b-b91297dda859", "indicator--2d21f8f6-446f-4eb3-b255-1df8924efece", "indicator--5f40fd8a-180f-4d8f-9f12-bd769ef9f14f", "indicator--df5dddf4-47eb-46c5-b349-dd7598f5dac8", "indicator--c62c780b-53e3-47f0-a98b-b1e9f4c22dff", "indicator--a1b3bf66-6845-41dc-a870-cfb18698168b", "indicator--8403c39e-62ee-4645-816f-c3f0398a7872", "indicator--f4614cbf-6eb9-4999-99eb-618b85100f84", "indicator--4e4c9a34-eba2-41a1-9b79-bafaf8d0a774", "indicator--f7b1e15a-eddf-4a50-a84e-7683c6e87497", "indicator--bc3cf383-590a-4501-937f-986a32232621", "indicator--341780ef-f3fc-4156-9cd7-e9f8f40b5eeb", "indicator--560105bd-c42a-4c79-be66-23f76e6d1cb5", "indicator--d09d5cbe-7aaa-4f36-95c5-df0e9e0eacce", "indicator--134cb242-626d-49a8-bf50-43254f60df88", "indicator--e2f76436-ba80-406d-80a9-b9e61d9a2199", "indicator--12b57127-fae3-47ba-b550-fe4c162b8413", "indicator--b630bac6-00ce-49e4-86bd-f2cc7e7d3ab9", "indicator--2b1b9be8-dc79-431a-94fe-f401c4e6c73d", "indicator--1b892400-1f91-496e-8616-aa4a56e9f151", "indicator--f0273aa9-d972-4589-b57a-192af38d5a8c", "indicator--9e23acc7-d457-475b-95e4-56e7f857d02f", "indicator--bbc20e03-d6ac-4045-8898-7056b13cc8a3", "indicator--ca0d96cf-9e55-4578-869d-36878b3ee04d", "indicator--e060d653-a044-48a9-bd00-a94f275011e2", "indicator--e5a0e0c7-02b9-428b-888a-05b62ba06225", "indicator--d1fdc097-0168-41cf-9a29-7722b46a769e", "indicator--ba55ddef-fcb9-4048-95ae-a30717d08e54", "indicator--a6c9630a-ccda-41c8-a56d-5337ff65d40c", "indicator--c7ecca4f-7f28-4bf9-bbfa-1d52cedd1100", "indicator--d75dce92-ff65-40c9-a453-4b7a67f359be", "indicator--2c4c145d-99d2-41b5-90e7-1d169a633301", "indicator--d55a98e6-5b3a-477a-bfda-4e5ccc87ca7b", "indicator--323b6062-0f8a-4a7e-aff8-975e8fef33d1", "indicator--a2085348-1be4-4d38-abcb-9374a2572bb7", "indicator--ddacea81-d548-4329-892a-3b445a734cf4", "indicator--10702cf6-93ed-4f12-ad63-32c68f25f5da", "indicator--b08052a2-8296-4f5a-a981-4f0e4b47d242", "indicator--5c3a7c06-afa4-4725-9e44-d4053bf7b89a", "indicator--1371e9ac-5148-4ce7-9102-605bf042953f", "indicator--0b057e9a-5eb6-4a86-873d-00108053f780", "indicator--0443a728-4d68-4645-b58a-9a7315f1b254", "indicator--9d5cf5e1-19dd-403f-b20a-90277fd772ee", "indicator--470d9eb5-8d4e-4997-bee4-17f2ca500524", "indicator--62badea5-dc88-4e71-bd04-ab3f53be139c", "indicator--14d992ec-b1ff-431e-b1e0-4f914379cc28", "indicator--08d96f4b-819c-406d-affe-b6fcfcd38c7b", "indicator--116b4ee1-4425-494e-b30f-6d5946c583fd", "indicator--9b6f9f1a-980d-42d4-bea0-f77d50500261", "indicator--6e13b7ad-16e4-4066-9f38-dd6bf2c14543", "indicator--ea2ae7d2-af10-42bd-9ed9-84057b33e633", "indicator--8e960c9b-a8d9-4e6c-96a4-ad96eb91bc16", "indicator--100fec14-68c5-46c2-b1ed-6f89ced1ab25", "indicator--9a54f4c4-6c5f-46c9-a0d3-941dab698115", "indicator--3cc68fe0-0f90-4555-b5e2-a85e8e2b4921", "indicator--6e3407c1-72ef-4aa6-9d4f-fdc2179df6a0", "indicator--c4604bdf-2d4f-4219-b618-2eb8c168fb2a", "indicator--fb99156b-f54a-4dbe-879d-edd8900b7b8f", "indicator--0b8f65d8-2a0e-41c9-8bca-9d7809f61be5", "indicator--50651590-c325-4c6f-a781-3a0c7ff9ff18", "indicator--f35965c5-179a-42aa-ac5a-000e4b8b0cc6", "indicator--b4227492-c42b-4625-8e41-8ebc398ddd1c", "indicator--99f6dec9-2132-45b2-b438-a32df94e5ed0", "indicator--824038f1-227a-4a03-b8e0-440759696fbc", "indicator--a3d798c4-78d1-4ad3-9f7b-f165a01bb3b4", "indicator--cfdd3085-450c-4d21-b9ff-413784e8d5c8", "indicator--a613390b-5cdf-4f42-8820-83b0f13a3b6f", "indicator--24acc72b-b779-47a1-a645-b915fa7552c0", "indicator--57061a41-5e10-421a-b7de-945ff31f6fd7", "indicator--049d6e40-7c83-49e2-b507-f8a3c2a74e70", "indicator--c0a05b1f-1b91-4b7e-98fa-ce5dd41ef694", "indicator--8d9df5e6-ff28-4d24-9776-e2c78a46025d", "indicator--d72779eb-9ba3-4cb2-9a28-964666da9169", "indicator--938a60ed-c60d-4b5d-b736-08c85dd1a480", "indicator--171e4308-3d4c-431b-8276-12e79adaf3d1", "indicator--dd5a79fb-628f-40da-b5e9-2b253b3cc0a4", "indicator--fdd1d2aa-20f7-4978-a397-f739f204f07a", "indicator--5e46fc10-ee83-4892-ac85-feb4e5811da9", "indicator--10a932ee-6c4d-4f6c-a385-f46246f7bac4", "indicator--ef4596b2-fcb2-40f4-9c9f-6210ea19fbc7", "indicator--00bb3815-1974-4861-be4d-972880fc39a7", "indicator--c9acef7a-3dea-4c2d-995a-e6b511e2b8ba", "indicator--65c7808c-08a5-470b-b32a-1e963934ea44", "indicator--725e1938-18ed-4a74-b930-f01f6c465f20", "indicator--27d21ae1-2670-462f-bfba-0bdf604f7ae1", "indicator--dda6b9fd-f818-469c-a5cc-7534283423ad", "indicator--9bda3d64-74ee-4479-b2c4-614238e00127", "indicator--43bb621d-e632-4a62-98fb-c08432355e0c", "indicator--a09df269-3996-43e3-8dec-a870c2e6f821", "indicator--fe1b745e-0132-4110-93be-5535877a738e", "indicator--f492072b-182c-4a3d-9b23-9d12a7e2f2bd", "indicator--cc995fb3-ed03-48e9-803e-9581e3e1fa9d", "indicator--f748cc80-403b-4e10-96ec-f03c3817761a", "indicator--a41cd1f6-4bfd-4526-9921-65db23c4e39c", "indicator--a11acd58-a40a-4635-aeea-454bd9214102", "indicator--a15f5c7a-27d4-4bf5-b347-e53af3d5959b", "indicator--6e3ca366-f539-4272-a0f3-080211d3f858", "indicator--68071a40-31d3-4de0-acbc-d80e0f06f9c0", "indicator--2a65b9cc-06a7-429e-b681-b9006f7cb84f", "indicator--09f64ec9-5b97-42e1-b859-eae155fa0073", "indicator--c8a0ab55-0d72-4a85-b064-adb5434d3b19", "indicator--82edc6f4-86af-4328-86a2-df09e3208444", "indicator--2f4399e9-138c-4f77-b590-78583f862590", "indicator--32657e02-3c07-4c48-9bf6-43fc66afa190", "indicator--c7b9743b-f0c0-4c0f-bf57-e3e1f8bf6f8d", "indicator--e8bb2b2b-3d2b-4dea-a857-cf6ae8b6728f", "indicator--7a277cff-8c6e-485d-a746-39e4cc9194a3", "indicator--cb96db5f-4f41-4fbb-b256-847c23fac2ee", "indicator--a22fffb9-022f-4899-bc9a-9d127ee21a7f", "indicator--1ee62df7-41f0-4f6a-9be8-aa96ef7f2cbc", "indicator--e2ecbc4e-5a79-4d32-8634-f21a9754c035", "indicator--19a94312-6d86-4b78-a985-7334efd55471", "indicator--61ce9d14-4056-4497-aacb-3b065c7e0e19", "indicator--ae1afbdc-51c5-40ab-90d0-2a75296efad3", "indicator--0c870185-fde1-46e9-ab10-a5fc27501265", "indicator--d382f999-9f08-48eb-90a0-fade78ecc402", "indicator--fb592d62-4978-4555-9e58-ec43dc62f055", "indicator--6a5c25c4-9d4b-4f6c-9a40-fbadcb6cfbe7", "indicator--590d18f6-bff6-41d3-a41f-0dd140be4654", "indicator--a54b903c-9b0f-49e2-8924-f64094a2ebb4", "indicator--553f597d-0783-46d0-86c6-8ef4d8f54cd0", "indicator--c3129d75-a1a4-49ef-9cad-d5ccd40b1d15", "indicator--2f257630-5e07-4f39-b196-dd6c18887ea0", "indicator--b7587520-2a77-4a92-b3b0-35dc6c653288", "indicator--ff8c429d-6b1c-4f04-9920-27c1cd06eff4", "indicator--efe2d300-a95d-4817-aa70-a0755a2c8eb4", "indicator--9adead8b-21d4-40a2-905c-f86d4c39807c", "indicator--1221a56c-23cb-412f-a2e6-5e72d4d332c6", "indicator--bf8ccb75-1129-468a-9730-2c59a1c5ebe8", "indicator--8a4d317c-3c67-4ec0-af4d-61b8ee6a55a8", "indicator--b38cb166-c5e3-4b2e-bc36-e12e220fdaa7", "indicator--d0566d26-acd2-4a7e-a57f-3a53c5a34bea", "indicator--4fdfad72-17dc-4a96-92c4-431afbef93d9", "indicator--0ee1ec0a-b671-4860-adbc-8788a6b6b384", "indicator--f1047ca3-bea3-40c7-836f-22ec6a669fa5", "indicator--9614f872-41ed-42ad-91e4-c39feb7cc625", "indicator--cb3e1c76-6b8c-40a8-9c20-f2e3402300cc", "indicator--1fbd9dd8-55cd-4efb-90f5-f348d4894c19", "indicator--30cb989f-9639-4e7c-93a4-b757e8c3b291", "indicator--db6496d3-0e1b-47c0-a9d1-f48ff6f9e3b9", "indicator--bb819d4b-9056-43cb-a350-45b68a892339", "indicator--df23cba4-8cec-47c2-a69a-1d9cc9b574d6", "indicator--337ecaa3-d7f0-4a97-a5f3-879dc4ee8b0d", "indicator--9e2110e4-db9e-4941-8ad6-cbde197526b6", "indicator--5a5d88e9-9e62-43d9-9117-e2fdb9c13107", "indicator--8f264ecc-52ec-4dc1-a2c1-756a72c05151", "indicator--949ec959-8d53-4e10-b801-b4dbe22992ad", "indicator--43cb3bca-97d0-4823-b98e-d31d862ae729", "indicator--5cda5eb1-49cc-4e99-9a5c-a2f555279a64", "indicator--605b042e-40b8-42d2-be1b-de63c7ccbd99", "indicator--c89bbd04-e370-40fe-8353-948a118a0ca4", "indicator--2cdebe62-2c06-4d35-962a-16b25f9cb5c9", "indicator--add90290-c5b2-44dd-a3f3-efe0237c26be", "indicator--db6a1f9e-f2bd-41f4-b0fa-8e068ae5ef99", "indicator--00138f68-3875-48ff-bf7e-78c13a3910e0", "indicator--73759b05-3d20-4c51-8ca9-c64cc98d4672", "indicator--1bb4315d-545f-4f42-9f30-93ee59ef0bda", "indicator--b4c58136-b5e0-4a84-a4b8-72efe0a12cb9", "indicator--567870d1-8900-42a4-b967-b3c066a757be", "indicator--ef66e3bf-7d14-4f13-9251-e86dc107b67b", "indicator--579b4bb7-7664-493e-8bfe-1842376b6582", "indicator--6b31dfe4-e4c5-4af7-be54-bbe8f793a23d", "indicator--ac47c645-a2f4-42b0-a93f-46c413b08b09", "indicator--e63bc439-0917-446e-b036-63fb11ac11c6", "indicator--5385ed2a-195f-4107-950e-8d21f22c3fb3", "indicator--4ae28a57-74b3-478b-b6ce-94c9b8d1170d", "indicator--c4c99f38-6a07-44d6-a7a2-b18a15c149e0", "indicator--700e7703-efe8-4ff2-8f6a-844c85343833", "indicator--6344435f-cad7-48bd-bf1c-9d69cfdc60ea", "indicator--92625f3a-c0bc-44e2-87c2-033e949abae9", "indicator--3aaa0acc-e652-49bd-929e-fa7afb3f3db6", "indicator--33477da6-5ec0-4e21-9cc5-b7808695fd2a", "indicator--95529d98-f61e-48d5-820d-36890307518f", "indicator--2eabdf96-a32e-4862-855c-7b6268a5dfa1", "indicator--2032976b-ce80-4deb-8220-cdc4c8f1224f", "indicator--e0d0b11e-ded5-45ac-ba2f-7768fedfcf41", "indicator--3d07607d-d76f-4bc0-8884-cf5e4e540cbb", "indicator--1aad2c96-4ddc-45ac-9af5-f6d7c7979eeb", "indicator--2af146c4-a6c4-4604-8c16-2e9a4844182e", "indicator--69441770-bec8-4c04-82ad-5c4bf9ece2c8", "indicator--1f58ff6d-09a9-4e07-96db-c704c21a4952", "indicator--448756a0-18dc-419d-a0c9-4682ca911b59", "indicator--92bc1526-8cf9-4f84-8a6d-88840b40bedf", "indicator--65d78ee4-9272-4db0-8f56-dd1b47f2f2e0", "indicator--f71549a2-cc0a-49f8-936e-7b0a4139e929", "indicator--14c76f8d-513e-4e5f-8025-ad94d56427dc", "indicator--f7035ca8-12a3-4738-a809-ef01f68c83ec", "indicator--dcc040c4-c704-49b4-ab10-0b77bc4caa63", "indicator--009c5c4b-7c44-4b90-8f14-40e51c8895ea", "indicator--8b0e227a-d4da-4207-8e4f-c5e2794729bc", "indicator--bd22c037-0f3a-4699-9f0c-01465669b31b", "indicator--c5a5e66e-aff0-4f2a-9a9c-162c98cf52e3", "indicator--b445f126-3b6b-4728-97eb-3648393a46f5", "indicator--66230108-658f-4bf4-b1f1-2bfdf9bd087b", "indicator--31a1e4cf-0c31-40b7-97cd-84735b43276c", "indicator--6a73d23d-478a-46cf-823d-006e4efbfaee", "indicator--63222d03-faf2-4c1b-a89f-1313e9c5c3eb", "indicator--f2b98ba3-0487-42ed-b028-d1e576a08e9d", "indicator--f72c8da4-4bfa-4eb4-8500-594c1be6b66d", "indicator--02db7411-4510-4a70-8cd5-1d87bb51aec2", "indicator--bcf06ce2-096f-4544-9f64-ac14ab603107", "indicator--3f3349ff-729b-4934-8a75-842152a9df88", "indicator--23c72154-cfb2-4d39-b0b3-5c0dcc13ac36", "indicator--cfbfc705-be4c-4e80-a9d7-7335de7ea5a3", "indicator--36a2b13a-f2ed-4412-9485-4c8f041e780f", "indicator--47242df1-8a7b-4685-a33a-2bef4e441e25", "indicator--d534d59f-0e26-4328-84a4-40dbcdf53832", "indicator--2096e1fe-f751-4255-be6a-0aed06266598", "indicator--30fa5385-7422-49e3-a866-c28237c6c22c", "indicator--855d2df0-2c36-4f84-93bd-1d62a82d3233", "indicator--9de1991d-1694-4c96-b3dc-2ba9722b42f1", "indicator--08d977b1-eeb5-40f6-975c-be4fa0442372", "indicator--a61c4be7-2735-4e6f-bd32-d8e153601478", "indicator--098e7f8f-985f-48b1-9954-408d688d473d", "indicator--b58a40e6-69e8-4e5a-98be-4f6c8dab97f6", "indicator--f45b4b32-f911-4712-bcb4-b5674711b597", "indicator--d19b81d0-77aa-45eb-989b-15c1d9bbe1dc", "indicator--9fb213b9-0d60-4ed4-9e8e-c8f72f8eb85f", "indicator--643a0dd6-0110-4dbd-9c73-57dd85a264fe", "indicator--f3f099b3-4547-46d5-b3d6-33c6f5854cf2", "indicator--85d4ec3c-1533-416c-934d-f6cd7ccc4adc", "indicator--ecc292a5-314e-4e0e-b033-e23c7c488a62", "indicator--c50952c7-d864-4efa-a8ed-961966ea4946", "indicator--bdce9ecb-14d8-4e83-b0ca-a157428569ef", "indicator--0e84af9c-82aa-4e23-ab61-e953fd803257", "indicator--da22189c-e5b6-4a11-b427-861e7697daf3", "indicator--f3043d47-396c-464a-88c9-ddcca1cefe96", "indicator--b833bb6f-346d-4631-90f7-d15bdc5ec3ae", "indicator--b6cd2ad0-7e65-496a-ba0e-2034ba0ca84c", "indicator--64efd94a-2183-47da-866b-8b0e0a76d1a2", "indicator--b859f369-d0a4-44f8-9ba2-a0ba4b12c8cf", "indicator--150f3420-c8f3-4f0d-80b8-1860915492bb", "indicator--d7c30ade-44b6-428a-b01f-dae75d02efe6", "indicator--191eecf9-c755-4a7e-8cc6-ac84d515ccf6", "indicator--6cc79be6-1b1f-40d0-81fc-29144e47f71d", "indicator--237e11ae-43c1-4bbd-ba0f-522e99ebf0f5", "indicator--344cfa3d-698d-4838-b466-ca9630c452d7", "indicator--356c07f5-ab97-4cd9-ad01-58c91d1b610a", "indicator--3998bad2-17d7-4c95-9aa7-9229299db7a2", "indicator--473364b6-a812-4e13-b4ef-e6d54458188a", "indicator--e1cd16c2-8026-4c6f-a9a5-57d5e73302af", "indicator--8f0769e8-3804-4229-8aec-561265487c8a", "indicator--e53fac12-ceef-4301-b950-272a1d41bc32", "indicator--f3d2fdda-16cb-4377-baed-a2bc1b780b44", "indicator--1d610712-f13e-4dec-b6c6-eb5a1d327ef7", "indicator--4f4e2424-ccb5-481a-8ca9-4ab9c71c56a4", "indicator--95e6c1f2-872b-4ad7-bea7-aca13f16c099", "indicator--86e4b05e-bde1-418f-9b04-86eba722029c", "indicator--853ecab7-e751-45ae-aaea-014249b80a4d", "indicator--d9b67e1f-cf68-4646-bc81-65b2003313cf", "indicator--8f2dd6b0-3309-42d0-a6df-9ea6dccc7977", "indicator--44ea7e89-f64b-40d8-8089-029fe864da7b", "indicator--1049e10c-e73e-43ed-aba8-5ea8b653056d", "indicator--583fa67e-853d-4db5-8d46-e51f98ade76c", "indicator--7665f348-bba3-405d-b239-efefd647cadb", "indicator--ab756073-76d4-4b64-9803-c9943e888355", "indicator--4c84eec9-011d-4822-b5ad-407b3ea24315", "indicator--ba8c5261-36bc-46a1-a679-3a4a2dcbf4ea", "indicator--79143fa9-d173-40cd-8ffe-38a1347ea838", "indicator--7a16256e-b0f2-4f1b-85c6-b20e96ea761e", "indicator--3f037a9a-2270-41e3-90fe-da3058663a63", "indicator--df5cb2ac-4fcb-4634-a631-6f3f2a9bd946", "indicator--b9c6d296-1e72-43d8-88b0-ba58bb9f2064", "indicator--a592d8eb-107e-486a-a539-972b066f0f63", "indicator--ce1fbfa8-3afc-4436-b54f-8414180e1f7b", "indicator--99ab7fcf-98b8-4a3c-9c55-debd64a559a9", "indicator--90c046a5-52b6-4f07-a6ac-5506c3a4e407", "indicator--cfdb455e-2bc6-4383-83b4-50ea48e61081", "indicator--60527283-16b1-4645-b393-fffe64c16994", "indicator--c3fd8832-9f63-48cd-b8a3-f7c79c34766a", "indicator--f001cd6d-a92c-4a97-9877-132f89e1efde", "indicator--6b86a40d-07b4-44c8-a9a1-8d42fbebf20b", "indicator--9d85a268-61a3-496b-b15f-d35c99358615", "indicator--6c63583e-64b9-4ec0-80b6-6b77bea321f7", "indicator--f6df678a-8878-4ab1-a6bf-3006ea588a06", "indicator--39a352d5-8fc3-4f67-9387-64e28c50ed08", "indicator--85002489-d4af-4cae-882f-c18fa13b2323", "indicator--4485bbb1-c247-4542-9f3b-31a1d9945418", "indicator--b0221fcf-c67a-48e6-ab76-f89aa951deb8", "indicator--91ce5d28-5e63-4f4f-9195-7f42ad5fbc0b", "indicator--398980cc-b6c4-4950-8b97-f895aa7c19ce", "indicator--03f4932e-d9bf-4c96-b9a5-6c59d6cd81c5", "indicator--5ca0e7db-c348-4417-975c-79109ddaa6c0", "indicator--9fb366a7-47ef-4d68-b82a-c4d6ebbcc40e", "indicator--77342a92-360b-4b12-8e2c-ce6a1803b3b7", "indicator--f217c971-5fd9-49c7-abaa-764993e46fc6", "indicator--563574d8-6785-4531-84c9-dc98ad0f6fd2", "indicator--79fe97b1-27dd-4219-9f40-d1ecfb3589e9", "indicator--b30d2d45-5e32-4d14-8a8f-40833a27d7fd", "indicator--a787cbd9-cf94-4f79-a72d-7beb2e7a1d3c", "indicator--200967c4-0e99-4123-8078-2d944c200d36", "indicator--5ac102ee-c051-4bc1-9268-79253b1b4f32", "indicator--50f814ed-088a-4bfe-a64b-5b678578ccc6", "indicator--6a5dc3b2-2909-4131-88e3-31a51efe4ea5", "indicator--ccb7cfc0-0687-46fa-bb45-17a17dc0c6a2", "indicator--2dbf50c4-70a6-447f-b556-0c0753f92902", "indicator--85b1d9c8-f792-4c70-9e64-bbf09f7befcc", "indicator--bcc14fbc-f470-4c66-b645-30f6f8f51da8", "indicator--5c1340e4-f01b-4e3a-9650-cdeaf73efdbe", "indicator--3a3333a4-8a3a-4e53-be5c-02514700a187", "indicator--dde86672-39c2-4106-8a16-ed06991969f3", "indicator--5581a258-a415-405c-a518-fcf9736b88ee", "indicator--90c24c06-8fc2-43d2-a67c-2cae5a1ca0af", "indicator--d77b937f-1205-4ad9-9fb2-aa84010388fc", "indicator--32ffd40c-ade9-44d7-907e-0632991e4351", "indicator--f6574da1-8b56-43e6-bf96-1d05b538cf12", "indicator--a39c398b-37a7-48e9-bb3a-3782879c4019", "indicator--57c0e5c7-807d-42a7-ac80-2a974a36fbde", "indicator--9db920b4-b1e8-41ee-8d57-087807cf1046", "indicator--b24b96a0-31b2-4d54-98be-0f797c975880", "indicator--4e3bda40-43aa-4c17-a133-57b2cc05918f", "indicator--43665e5c-7824-4efe-a3c7-d394c8b8c31a", "indicator--ddd6c68c-90c1-413f-8cd2-a33f8c2c36df", "indicator--faff354e-0b44-418e-a7da-2ec5fd94e7ce", "indicator--9922cf5e-4d83-48e4-ad5d-d820f7597afc", "indicator--0855aa80-7707-4537-b2a2-239fd65848dd", "indicator--740ef77b-d07c-49ed-9eb2-24e701b6ce72", "indicator--0572c02d-9e2d-45bc-b96c-c328aa7f37dc", "indicator--dbb0f816-8801-470b-82c0-6b8c4a9fd9da", "indicator--3fac7348-2e19-4638-aae8-731529ce2f5a", "indicator--cafe0ec2-bf40-4e99-bea9-a37fc3744475", "indicator--2f7d0ad0-0766-4513-9814-188994c85e72", "indicator--8338cc4d-ab02-4d2b-ad41-f1d7af56a5df", "indicator--46da3a9e-1760-4a5f-89ee-d685e210ff48", "indicator--e5c18d95-86ff-43ae-99aa-cb28163dc986", "indicator--98844eae-050a-47d2-b0ec-29a385a43732", "indicator--f70b1b2f-0123-4dc0-88fa-3bd6ced7bdd0", "indicator--982f29e7-6539-40e8-829e-9f909498409a", "indicator--1924ea83-2463-41fc-9a46-debfbc43d716", "indicator--0b936884-d572-4ec0-b6a7-2728d8508f4e", "indicator--d9a58a2a-8342-4a57-9757-14b6af6b5896", "indicator--9e155c33-767a-487f-98d8-e9a0c4387a45", "indicator--08426724-511c-4356-8720-0946620642cb", "indicator--1691555c-aee6-45b3-8ad9-71a41a0ab766", "indicator--6fbe47cd-d5ab-459d-b62c-69883b211a30", "indicator--f6ec7f4a-74b1-49da-ad80-3e6407c33412", "indicator--5fd623e3-f8de-4e32-8db8-ad3d5bbd7860", "indicator--5f270651-a6b5-46ea-b881-243b8e772efc", "indicator--d343e72a-d500-44c8-af7d-21e1c10d35d8", "indicator--dcc4d39b-8170-44f9-9e1c-61dc4f56f4a1", "indicator--ebc626a8-c0c2-47b2-8752-86ec9b91cac7", "indicator--a0a6ada1-d63a-4469-82f7-1eef6bdfe716", "indicator--a25f5603-a6ae-432b-abe7-3b245c344203", "indicator--c3d1699f-b6d6-43cd-8ed1-7157505f8cf9", "indicator--8f605de8-15ce-4a3f-b928-8bb5ee4b796e", "indicator--0a47f4f6-3c40-4c8b-a6dc-2de5e160f8c7", "indicator--f95e9748-c676-47e6-beac-e2dc5e7064c1", "indicator--a9044cd0-d021-4f91-bb66-fcd9e72fd762", "indicator--b21e6d5f-a5c3-4904-9b9a-63bd9786557c", "indicator--cb40328c-e55d-4f2e-94f1-5c308d0cf816", "indicator--75f1c73f-d808-4f7b-9d2d-06f40b7f795b", "indicator--d0626441-518b-4d40-ad17-2eb37f2b3a22", "indicator--d248bc19-7d62-45d4-a0d8-96d54c4ddb45", "indicator--73fb78e3-3b10-4b74-a823-fcff8d96a73b", "indicator--11f189c0-d510-41c7-8944-0830a3772c3c", "indicator--3745ad7f-efe6-4439-8efe-5a827e70ba27", "indicator--052c0d3d-560a-496e-a565-6e4ae8e0d972", "indicator--96b7ea01-aec1-4028-842e-718a78930798", "indicator--90718389-65e9-4e53-b614-4ffd125b14ee", "indicator--2a52673d-17e2-40a5-ae51-4d9890527070", "indicator--dae259a0-2af1-457e-8b46-30737982e2ab", "indicator--0b82319e-c81b-4ef7-9c45-87a862602a40", "indicator--710325ab-118e-4697-a5ec-464ff5436186", "indicator--da03e229-aeef-43a1-9984-0ca44a29adb8", "indicator--645890eb-fe9b-47ab-9b20-bdaf85a6b7b5", "indicator--d3b319ec-4476-41aa-974f-1749e5342b72", "indicator--5772dced-bdbe-4bf1-bdaf-ba53aeaa888a", "indicator--025ad209-b238-49c9-b8de-57638dfd6f6f", "indicator--cf8a3bf7-2819-4c7a-87ca-b7bfef932335", "indicator--93cc8f69-ae6c-43fc-b9d7-ea831831efe8", "indicator--96503612-b3fc-446f-855e-cafa213f4fc1", "indicator--16f20a89-0615-4c90-82de-901f1f3ae00c", "indicator--9c4ee789-d96d-4335-b83f-6f62e6256d63", "indicator--7066318e-de9b-4a5e-a620-bf3dbff62f26", "indicator--2493a3e8-648f-4208-8dbd-3d2493daca0c", "indicator--c8acb220-cdfb-41b5-8332-38991ada2776", "indicator--dbc786f9-8ff9-4388-96a4-2d4f09fae69c", "indicator--14068582-0422-4489-afd4-c0a2eb3d29ce", "indicator--bae6e414-4c9e-42f8-91dc-e925ec886b6a", "indicator--469ed15a-a303-410e-aefc-7d05a6ab8f26", "indicator--1b565592-2e95-4921-8099-cfe0dfcdf1cb", "indicator--946f9c10-0ca7-4f29-be0b-fa092bc2b1b4", "indicator--a01cf8f2-1a0b-4448-9756-fa5071198fa2", "indicator--e124a224-5adf-4d63-97b0-735cdff399db", "indicator--b4467c90-0307-41dd-b499-3b124542f64b", "indicator--338e157d-12ce-437c-aca5-09fd01edf48b", "indicator--de871a44-97af-4026-8bbf-866ae48fd21d", "indicator--303f9bb8-e76b-4111-b103-76be71b3a2fa", "indicator--2b2f4ddf-760a-444b-8123-c5732036d941", "indicator--d1d77dc1-2456-4ec7-b254-26c87ab05c8a", "indicator--05cfcdcb-e5c7-420f-94bd-0ff95c49e05b", "indicator--fa8ea3b0-be05-4635-a5a7-2e899db14d8e", "indicator--9117fb7f-1542-4b58-96c1-976cdedcc774", "indicator--6cf4d2ab-25a4-4876-b363-6cc5e1bcdccb", "indicator--d39187cb-128f-47b2-9b46-8c2b2a4d4c43", "indicator--47d7c2bd-1a1b-4a5f-8605-29c032d68e87", "indicator--d6ef320d-719e-4b08-a234-75fe36969a1b", "indicator--2135f762-152e-4370-8d47-52b25b40eed7", "indicator--4f514534-74d0-40d4-aa9b-ed20d7209679", "indicator--2b628137-3445-4b41-bb3e-3dc4e4241f22", "indicator--94855125-0089-4572-a674-e15b41b5e6ef", "indicator--e2a0edf1-00c3-440e-add9-bb72cbf639a0", "indicator--df594617-91ba-4cf0-ab0b-260f37596251", "indicator--057e7297-cd29-4660-ace0-4ddbb686af77", "indicator--d4433aae-aef1-40ee-a23a-4b6f207fa0b0", "indicator--720a7d91-a2c0-461a-98ae-6f73cecd7494", "indicator--c921847a-5053-4859-9806-7a2d2bff5a64", "indicator--8d4a7918-57d3-4c72-99b4-a47242c1a43e", "indicator--b90232bc-e03f-4df6-a155-5386bce0dc37", "indicator--e02eb2f4-4378-49d7-b2f8-ab47b4f4403b", "indicator--7a383d16-2fbf-42a0-85fa-5416b7b46ad6", "indicator--82caded5-22db-452e-b9d0-795660d3f79b", "indicator--a6024e8a-5529-40de-962e-ef70104078c2", "indicator--d724c645-7e7b-45c1-a130-e25883650092", "indicator--8c5a2df6-40c0-4f2a-8c07-e740803b6c29", "indicator--e5df9ed8-60fe-49bc-9a1e-537de70ae9f8", "indicator--29a5670e-42d9-426f-bafb-eba375cb25a2", "relationship--f62d6423-69b2-48b4-9d2f-5bd2cfc6f2b3", "indicator--6839716b-ac2c-4b03-9384-f1dbb8958c29", "indicator--df26b19e-cb6c-41ef-8fb2-e375403dc0f4", "indicator--41dff1ab-ebdf-47a1-b70b-63b155934b40", "indicator--350130c2-1543-4159-bb5f-8d7c49ecffbe", "indicator--e238ee83-8d75-4e5f-ad6b-c5741082b3b6", "indicator--e0c3b203-7a3a-4d86-aa74-4ceae65ba055", "indicator--57194465-252c-45b8-8e10-0176170738d8", "indicator--3619521d-7678-4fa0-83e8-551116d3fb67", "indicator--4e267d02-66c0-4102-a366-0d6e473f1fe3", "indicator--d147f679-8205-4def-9ff6-62e372044b96", "indicator--0d6bf18a-06fb-496e-964d-845756c4cf30", "indicator--5da7acca-663d-4e85-b0c0-db4da2ec0af6", "indicator--4449aeaa-0308-468a-97e1-0da1b7dd1902", "indicator--32181d45-a732-4fc0-810f-997182a12408", "indicator--f4ed893a-c7c6-4d91-8710-cd85a4397e8b", "indicator--28ebc592-1fbe-4e25-86fb-8c9133bfce6e", "indicator--0ad7d18c-ab02-4d68-bec0-6d38fe5bdbac", "indicator--f2c9a88b-ed51-4acc-af0c-1732410dc206", "indicator--2bb3b6cb-275f-44e7-a731-feb72354d39a", "indicator--e3e56be0-6b23-4a03-9a5b-24a785ec47dc", "indicator--75c64e14-b336-4d5e-a6fb-ae030c9694b0", "indicator--bdf32b85-248f-4e96-8ac9-db4b7d392528", "indicator--1176175c-9fd4-4a72-a90e-1b177432e30a", "indicator--492d18b4-be36-46d3-a262-4701f759fe4c", "indicator--0301323c-6a20-4dec-a8c8-188b8afa912f", "indicator--e0c94b56-323b-4165-8490-ee3a6283580c", "indicator--60ab97c1-bb56-4d2d-8555-d967e03375ba", "indicator--2c1b4689-ab35-48dd-a3ec-608ad2ec817b", "indicator--b21a6c46-5baf-4d32-854a-99977d729c3e", "indicator--aa530ad6-85da-4d86-a464-1991c49a7342", "indicator--51dc4518-fb63-4e15-83c9-f6ef34df6a3a", "indicator--dd8624a4-8f17-4ed7-b3f4-99bad14abea8", "indicator--3bd1f712-ad87-4dc9-a1ab-c98a930bfd2f", "indicator--5d013391-f6d0-4282-a387-6ccdf6af0be6", "indicator--929f1352-0dd1-4ab3-a24b-2e263f573de4", "indicator--773d5f1a-c603-4c2a-b62d-8ab0065528b7", "indicator--19c8edee-475d-40fe-8eda-9506ad3186d7", "indicator--a8733982-f556-41d9-bed7-451a7fafce10", "indicator--782f8dd4-31ee-4189-9434-54a13d86bbe6", "indicator--540c8112-d47e-4307-bada-cbf5ccf87460", "indicator--c6ee06c3-f32a-4e10-94db-9a5b50e9f969", "indicator--35e01fe2-24ea-4182-85b3-9983c734d2ef", "indicator--16ce2986-7a7e-4cad-8492-f53e1cc8ffa4", "indicator--f4c1d6fd-59f9-4379-8a26-89e86b5d46b2", "indicator--a8faca7d-44aa-42ee-a899-b2825351a9dd", "indicator--a69cd2fd-f2af-4090-9a8c-5346ca592ac1", "indicator--bdb9dd67-9b57-4145-b045-141f76b7e578", "indicator--9e8c2fc2-c6e1-4ab0-9bca-d2daef510721", "indicator--1171a268-f834-4270-b195-649c474ccd81", "indicator--b6d83390-c2e8-411f-97be-a3696f993cce", "indicator--2284809f-95dc-4f4b-8e0e-52f12df3c0a0", "indicator--9deb96c3-92af-4d36-9d5d-bf66dd861b23", "indicator--4a9932e9-ba65-472b-98f0-d25f2feeb110", "indicator--d9297b08-4fca-4a29-8682-3fc4907a567e", "indicator--03746d7f-b3ca-4875-9d1d-0dd8e0403d67", "indicator--576a83ad-5175-4962-ba35-88b8f7cd4d23", "indicator--96674dc5-76cf-4761-a823-55f96165c3cf", "indicator--43957495-f0f2-4b7f-86be-ece555aaef72", "indicator--dfa1f32a-cd29-412a-969b-6ecd32ab90fc", "indicator--eadbce79-035e-4dea-979d-948a0844081e", "indicator--0e178b1b-ed1c-4e9f-b911-a607e40e9385", "indicator--3c7f1602-ed09-4094-a93d-f29ffa2376ed", "indicator--32273799-9f33-4f50-abd4-fb36b2902b9f", "indicator--cc0ebf74-d959-4503-b468-4fc01f8a6c13", "indicator--de601d26-30b9-4a7e-b086-05b7c39527d0", "indicator--0ae91b6f-721a-496d-96db-798a319c1ebd", "indicator--bcaf439d-c039-47ad-b6f7-5067f858bc57", "indicator--8e50176f-4fd1-4c21-b408-6a37aab97c2b", "indicator--1f08d125-8c1b-47cc-b227-b841c1394634", "indicator--f5e7be27-e57b-492c-b876-d7906768f0d4", "indicator--f8b9ddc7-850e-456f-950e-39ab1cbbe98c", "indicator--def40d02-5c1f-4e09-9c7d-cca92774344f", "indicator--a11b95be-84d8-404c-887a-47c13ab3cc2f", "indicator--37e042b0-afc7-40ab-8aec-1ba4142254d1", "indicator--82d4128f-60d8-4010-adf5-c1b63fba47d5", "indicator--c7e6c51f-9c40-4b7b-8db5-0ad7fe2421e1", "indicator--4230f7e7-7731-4090-ac5e-23612d9fc234", "indicator--25e783be-b78e-41cf-9274-0196cd1c3c0f", "indicator--ade0fb40-c0ec-4323-ab62-291bc3062901", "indicator--75d5ff63-81e7-44bd-9f63-c9a9470f07f7", "indicator--ed72e0c1-4f72-4ff9-a504-89a572892530", "indicator--1c84ba69-71d1-4a76-a385-55fb0ffd4d1e", "indicator--4f5c78a8-1408-41cd-95ce-83f2930536fd", "indicator--475fade9-94c8-4ab3-9e4c-274e93e1704d", "indicator--f144abdf-ff88-433f-974b-a1d86c7aa617", "indicator--69f2d1b6-042c-4ecf-b68e-a141f3c6ac80", "indicator--d9850eaf-e200-44e4-a77f-325d7f21534a", "indicator--3385e47c-b44e-4e19-a6fe-a24b3ccf2ad1", "indicator--b07bd1a1-a019-445a-b13c-a89e25fc33af", "indicator--e985ae31-8be4-4ece-985c-83d02400dae0", "indicator--e82fa1c5-4bb0-4baf-8551-5e4988e8c532", "indicator--7bebe7a0-b84c-4e0e-a0f3-5701a4d7b0d9", "indicator--c90e3a22-7eac-422e-b6ea-6dad0541f576", "indicator--1478110e-04eb-4209-a9dc-e3ae5e68c452", "indicator--3b968148-280d-493a-b55e-ea94c79fa5a3", "indicator--f11a0078-1b2e-4c57-9e55-1bd2a56be78c", "indicator--a5b32e19-f64b-4c22-a262-dff255fa0e09", "indicator--73a3d57f-65de-43bb-b562-d58f6dd110b3", "indicator--4c68e5d4-f754-4931-98bd-070f1ea040e4", "indicator--25e3564a-cf0c-4133-bb6d-e0b62ad4d9a9", "indicator--ea7198da-cee9-4e98-a352-e66b8f4a0a1c", "indicator--2c0b83e1-69e7-4169-9e3f-6ac7683a6df3", "indicator--8c32de62-7d1d-44f0-a44c-236827badff4", "indicator--26d897b3-6ee3-4bad-9f7e-8119dd11ad31", "indicator--8b7f042b-8c6e-4314-ba37-52a092e095ab", "indicator--51d28047-2c60-4c36-8c3a-40eb637fddff", "indicator--d4009f8d-8c5f-4ac5-bbcb-40ca57f1397b", "indicator--82184e9f-5012-4ee4-becb-444daa28c7f0", "indicator--11853d92-1cf7-46f9-9100-f11218d518c4", "indicator--c7ba8113-2f2e-46c8-98e8-73f6d90e125f", "indicator--bef738b0-a1b5-48bf-8782-6af3a5056b01", "indicator--24742efb-b676-4941-8c2a-c82eda227f6f", "indicator--51229620-eada-45b8-9836-82659f7e3431", "indicator--8b8b5033-4570-4e48-a968-a283897d5866", "indicator--d289e0e2-018c-42fd-b1bd-3f99af1158a3", "indicator--4a97972a-d9ed-43d8-8eae-67a9629c50af", "indicator--36c297a2-853a-4747-a9e6-f92518d59079", "indicator--c2e1152a-8db1-47b9-8a80-d1a8b83dacf5", "indicator--37cd5198-9abe-4744-b1a2-da22508e3b07", "indicator--5fc00c06-7983-4053-b74d-7ca93450ced5", "indicator--ee960aba-3a74-4ec0-bdf9-36b5b95b98a8", "indicator--590076a9-365f-4852-b4d4-e2d064edabda", "indicator--fb4ab8de-c585-44cb-ac57-43f7c759aa3b", "indicator--14c7916c-6af6-4c1a-a58e-ede76c18e78a", "indicator--0f4b5767-8fd1-4782-9dc0-221fd1804990", "indicator--a7ea4086-f9c0-4a7e-8e38-669e108ca8a9", "indicator--0a46e94a-2acb-46f3-96ac-7932b94d1a74", "indicator--9a10c9fa-889d-4638-b0e1-ff8224dd7b7e", "indicator--db2c354b-9aae-459d-bce2-37feb66284dc", "indicator--3b80113f-20cd-4481-81c0-8835ecf84ad4", "indicator--9f809afa-924d-4654-af34-c7db29411bdb", "indicator--e77e6155-164c-4333-ad25-8e26751527df", "indicator--de45093b-20d1-48d7-8242-e9c5e121b4b3", "indicator--b8cff93b-c244-4516-a020-6f7563ec27b3", "indicator--199f5ffb-5aa7-4e75-9518-aea54ce72b62", "indicator--4110fd4d-e510-4b0f-bd7b-dbf340e6efba", "indicator--1e66b0b6-797c-4ae5-ae92-5d11d8f1b5a9", "indicator--80d4d69e-0c47-4802-ba2f-7e0fb3ff90d2", "indicator--d616dc04-57d0-4ead-915a-32551a02ba4f", "indicator--4059661f-c0c6-4b7a-8cdc-2771692043bb", "indicator--1bb33e5a-a25a-4f31-840e-0afd2e43b732", "indicator--60a3536c-6e0c-4fc2-b873-36b4cd0c2f01", "indicator--a9b130a1-d0b8-4b0b-a838-50648ad0d799", "indicator--28e586f0-7635-46cf-9161-16587c05ea6f", "indicator--a40d22a6-4cc9-44da-831f-aa1dad46bd0d", "indicator--66bdbe15-1f27-4d25-9678-9f1a2b41bdfe", "indicator--5e81e8b0-e6dc-40e4-8080-6e0791506476", "indicator--3e7a65da-242a-49d7-935b-0229ce5b670c", "indicator--034d98cd-9122-45d8-a3b6-d690f77cdf39", "indicator--7a5ad2d3-f03a-4c38-8c63-0eefb069d333", "indicator--2706e7e3-295a-4bde-9658-114c07a879ee", "indicator--fe1c99ef-4593-41be-be3e-c7d054e5bddf", "indicator--c68e8711-a405-45bb-be8e-a7d483fd5d4c", "indicator--73e752be-a1f2-4a46-a236-89b9f3ea9bab", "indicator--5020647f-3f69-4a32-a61c-47a6e451f4c6", "indicator--62d5ee40-a46f-4f60-86e9-10d1efa35ed8", "indicator--1ad57df7-b720-40cb-b3b9-aef53b4f7ad3", "indicator--cf227735-9a83-404b-aa07-d85736dca625", "indicator--33aa1acd-f425-42e5-a221-91b82cb2bd40", "indicator--36fc01d5-787a-4bd8-92d8-b70e09c73405", "indicator--2141d158-4e78-40a5-b3fe-507dbcb00d0e", "indicator--9c6fdcb8-c68e-4698-8f36-63270fc2471c", "indicator--6cc4edb8-685c-4e85-82eb-acf37b0ff023", "indicator--9732948c-8cda-4efc-9782-2a791d8a2700", "indicator--de0b52f2-5ffc-4a80-9d4d-263123c26243", "indicator--22d502f9-f4df-4e84-9e14-f1803407dec7", "indicator--278453f7-37f7-4066-8a2a-09a8b48bc094", "indicator--f9e6e0e6-ec26-461a-a7f7-b1d1ecaea720", "indicator--8fe5a668-6619-486e-bc30-7b346df0bab7", "indicator--24b08d61-9a45-4531-878e-6abcb7ef2ca7", "indicator--412d417c-07cf-419f-97d4-2192459dbabe", "indicator--713bcb65-1c21-4807-8ac9-64d831d1028d", "indicator--6b43b82f-9623-4ba5-86d8-ee130b96f190", "indicator--03f428e9-830c-499c-ac82-320d5d1a8224", "indicator--83df4193-7abe-4499-a19d-40297cd79b97", "indicator--346bef6c-5ae8-4462-be41-83a939d7ccd1", "indicator--d73216f6-c70f-45b4-bacd-11a2562d22cb", "indicator--99da6a79-f80f-49ee-a714-f335fd4c64a7", "indicator--d413cc60-b577-45a7-9134-c14700bf60df", "indicator--495cdc1d-1826-4a09-8c11-68c6ac7d251e", "indicator--bfe799f5-dd60-4130-968b-2db41aaa613a", "indicator--2e4e5fde-1cc7-470e-9a44-10dd7e8d2cb0", "indicator--d1dae36e-97c6-4719-9778-6a3e663c4bfa", "indicator--3a7db418-8e8c-43ed-beec-6e5287efb854", "indicator--900a96fd-51c6-493b-8c22-137040b69b13", "indicator--cca0c227-2c2c-4c3a-9e7d-62f9e9fd9004", "indicator--da244a43-ab4b-4e12-befc-7b76ab7288c9", "indicator--7597332f-1320-4504-a4e5-ebb24c8b9bdd", "indicator--211b4645-c11c-42de-a5f1-5519fcd83734", "indicator--b3895577-ff4a-48c6-8f66-bb0e96789530", "indicator--0a89fd71-c926-45a3-8629-1cb08964f737", "indicator--b5fb2b03-292b-46ff-a500-d7bf5b42f699", "indicator--6af3ea8e-d79a-40dc-9a58-555e5bded294", "indicator--d5b644b6-c134-413c-aa80-5514d2c7c7f0", "indicator--970a8753-e260-4857-b798-96febbfdfd24", "indicator--73b328e9-750d-4173-911d-18542d8e2cd5", "indicator--2b4fe2b7-bff3-4af4-bb88-ca75915005ef", "indicator--17405580-d7d9-4ef3-8c4d-9a389280cd33", "indicator--1a5f41a4-c28b-4904-b6cb-69a9edb5b63d", "indicator--e71c24af-841e-44b3-8c57-9db528a7ee3c", "indicator--c09a23d5-4cf6-42dd-8df4-5275dd6fe9d5", "indicator--0b7b6d49-10d1-4965-923d-1104a68bcd19", "indicator--27cf11d0-38b5-4bfa-8b5f-18b27229c650", "indicator--5fd3bf0c-d90c-4d83-a85e-904196ef8afb", "indicator--cfb60b63-b95a-4d46-b2e8-90b0283111ae", "indicator--9ce83c15-0413-46e9-841c-5be1f9878e2a", "indicator--87a03d00-46ad-413b-a72e-9917d00883e9", "indicator--5319a345-e544-492a-8152-5fec719788e1", "indicator--52ad1f87-f639-4727-afd6-9009f2059dfb", "indicator--6bc887ba-4b51-4e2f-8165-7f0cda9cc93c", "indicator--64dffebc-37a1-4ae4-9aa2-b4ba795d4150", "indicator--c75e0689-eafe-4b77-9497-7df023195871", "indicator--3f2ed5cc-67f5-470e-9f56-e890d042a2c1", "indicator--5231b469-dfbb-4226-bf78-78731a28b053", "indicator--9bf12930-d8a2-45cd-aff1-7cfa3f5646b7", "indicator--596925f0-b0bb-447b-b465-a4d9d842eafa", "indicator--1f7dbcfa-c098-462e-a410-ba14d8877a4a", "indicator--45b3946d-8f2a-442c-ad73-24a9adaa1bf3", "indicator--d42dd16a-7af0-4001-93e8-221276d19822", "indicator--2563ceeb-3534-426f-beb0-efa25b68b0f8", "indicator--65bbdd70-7b65-45b7-9171-e72cda902d89", "indicator--6de74966-9e1e-43c7-83b0-b892f40a96ee", "indicator--9ed9fd0b-cddd-4337-8837-35cf5cdf8798", "indicator--7c177067-ba27-43cd-970a-c0373ee43538", "indicator--76319b48-686a-40c6-b566-1b6939d59a48", "indicator--4c19005b-03e6-41b8-9020-072f2ea4b392", "indicator--22ac4bbc-5b2b-40f1-9eaf-41d629da8bcb", "indicator--6ac8cd4a-8657-4874-be03-cf0dcefee75f", "indicator--cee760db-f197-4d62-9da8-e2ae9ec35d95", "indicator--32807810-7ed3-4093-ae3a-7e19e854fffb", "indicator--b4637006-0e9c-4901-aa3c-06fc1c8b12da", "indicator--064357ef-353b-4431-9622-938b405efe7d", "indicator--0cfbebdb-e7fa-4047-b93d-1afde48556ba", "indicator--c2944c1d-9163-47cd-a89c-7ea65155fd43", "indicator--360c1596-c6f0-4cef-9698-850b28dd7963", "indicator--722e026f-cd5c-4729-ae27-08b9b62e59ff", "indicator--8d80dcca-bc88-4e07-9d96-93b241e082cf", "indicator--ba94a1c6-cce9-438a-a3d4-96229653fbe1", "indicator--7e52c2fb-8f53-44dc-b380-c8fc8b15f6d7", "indicator--9058d2ed-e6e3-498f-9101-e6a6a8784ec4", "indicator--6ab51d7c-df57-4186-83ff-9f62126539af", "indicator--42c41185-ac77-40b0-8e8a-cd9d86ac2f73", "indicator--de7895f2-ecf0-4638-ae03-e114ba0d049d", "indicator--ac1fc1e9-e96e-4ac8-b91a-031a0bf0a74b", "indicator--37b63f0a-0116-4b23-8083-fd675f9a197a", "indicator--61fb04d3-48f7-418b-9e5d-22dbd086f82e", "indicator--f6c677dd-31c4-44cf-8934-28f397a7fe79", "indicator--f5273776-e903-4ba8-a263-d1840197764d", "indicator--9e2c7c12-dc48-41d4-9be1-3802647c502a", "indicator--236b45f0-3c21-4d2b-9303-ae2e22b80e2f", "indicator--58c79e4f-82bd-4de2-b408-8f66700172d3", "indicator--807592f4-cb89-4212-a78f-ed6eaac53f01", "indicator--4afc0f26-b6b4-440f-89ad-46241f3897b1", "indicator--4422d00e-e48c-4609-b62b-ec9d81e11efb", "indicator--880d6954-739a-4b62-a303-063063af274a", "indicator--40386680-ce61-4f04-a675-e718350871c3", "indicator--b95a120b-cf14-4c53-bf10-5c1ee7a57dd4", "indicator--d932d8ed-da3c-4359-9889-84cbaeed6fce", "indicator--ba055dc7-2d98-422d-b7b3-d0e31e2f7e25", "indicator--f64e805d-b804-4b84-893c-8a1eca4b2fa3", "indicator--391f3466-1145-4bee-8109-cf74f5fd3a06", "indicator--1a3a0998-f4f8-4f9b-a5b5-7da5ce16b5c6", "indicator--b88bdd87-a125-4612-a044-2fa480cf6d38", "indicator--25e62071-d505-4d6c-9d13-703e07edd55e", "indicator--e84a019c-8720-4152-bfe2-645c91933c7a", "indicator--3c262705-df98-4ad6-9f33-f047882c91be", "indicator--d18f44e8-724a-4676-bf5c-d01c36eb7641", "indicator--b4df99f7-f84f-4650-a695-bdce82cb2640", "indicator--c7e8b7a5-8ca7-4d54-9628-7475f503b3ab", "indicator--32ada785-13a6-4661-a849-090cd65d221d", "indicator--2193d6d7-000f-4acb-af47-e9794022ffb7", "indicator--25c4464d-e1e9-42ec-99e9-9c9a8ea937bd", "indicator--7e2518b3-8f1b-41f1-9301-f1321171e3fe", "indicator--c27d2925-0414-4385-9029-f05bc8955a53", "indicator--58a7c536-75ae-4278-8906-a26a5c4d50df", "indicator--de04732b-ed49-4dba-8cfe-8ba5acd4faad", "indicator--42ef7ee8-9147-47a6-b13e-0c4eb99a9d4c", "indicator--eaeed8e7-7a6f-4c66-9031-618dc7841e33", "indicator--2691607f-a2b6-4504-b580-6933f5827945", "indicator--1466ebfb-3386-4b2a-b6a4-1f93b8e98159", "indicator--0f1bc0f9-4bff-4c23-b230-051900222a61", "indicator--34409006-af29-470d-8e8b-75ff89164087", "indicator--f9c9ea76-38d7-47d0-8ba5-cf98b5909dfa", "indicator--3c18a89e-3a10-4b78-b028-7bc9ea591a66", "indicator--e87676fd-3144-43ab-98e1-b05cdbd1f851", "indicator--c4f88482-d07b-40ea-8250-f9146eb44f81", "indicator--f22e5fcb-0d79-4d96-a6b5-dd4a0bc9993b", "indicator--37bd7456-1376-4374-9870-858f284b477c", "indicator--126b30a2-0f61-4ee4-bfe1-f9cef3782ec4", "indicator--55bf46d5-00e1-47ac-bc65-20f7e4cc64c6", "indicator--595881e2-558f-41c0-af95-a25c7142472e", "indicator--3b2cf56e-2d45-48d0-832f-301667d6f392", "indicator--3ee2413b-5163-45bb-9bc7-55ce154309a4", "indicator--c9773155-cfb2-4851-a311-188e25f4235d", "indicator--76e1aecb-8618-4df5-95e9-9a88e1d2889e", "indicator--00c22b9a-7f23-4ce0-af2b-0ed2e3073f09", "indicator--31dee13d-218b-46d4-9a4b-06840a575331", "indicator--f327a0fc-ab65-4487-bd2c-6f2afbe1af1c", "indicator--fded2730-25af-4353-942e-2a3782662353", "indicator--9ab0cee7-c6e7-4cd3-aaed-72e0e92cb267", "indicator--44a6ac9c-1e36-4410-b503-d78ee5306e61", "indicator--a4cfb6c2-39f6-4425-892c-eaf1176c24e6", "indicator--25065c66-0b34-4832-b41c-0d4ee9d24458", "indicator--c44af2d7-b2bb-4c00-baae-4165ccbcf45a", "indicator--7255b8c7-3089-4f26-8f2b-f700adc4e826", "indicator--f1dd65ac-2805-458e-91be-d6b65c41d52f", "indicator--3d2b0710-7168-476e-806f-c43be0287d17", "indicator--28c700b6-b7ad-4937-8ed9-73f172055103", "indicator--6d795c81-df87-4ad2-979f-a64ceaed471c", "indicator--ea16af77-411f-4ff2-8a57-9b32f7c94efe", "indicator--db2e579e-b4af-498e-91ab-4f0993d623de", "indicator--0580d049-5ce6-4f17-ba10-8865a84ade48", "indicator--bb58b4e8-3a03-4f27-9b76-14a7b38fb360", "indicator--bc3660fd-5e6a-46f4-a877-e315bd9cffed", "indicator--317eef63-2b19-462c-ab18-ff01186e6f88", "indicator--a467c90a-39a4-47b6-a630-cffa75e3f9d3", "indicator--1b30c976-a512-4e87-af3c-05e590cd1ec7", "indicator--6215447c-ee0b-494d-a8f8-6c4630d999d5", "indicator--5605c444-d632-4212-b860-5c4c0707646e", "indicator--756606e8-a57b-4ea0-a93a-4971b4f71e1a", "indicator--d0e8ae51-4c9f-488a-8540-16c42d9571a9", "indicator--8947ecd8-a5d5-405d-9919-e6dec74a8ea8", "indicator--da66c0fa-6f77-43f6-863d-5d3eaa800b24", "indicator--0e946044-6e47-4fe4-8261-2e62e4fee02a", "indicator--bccba39a-e82f-42c2-bf15-6cb8e19c3f7b", "indicator--bd12d386-449b-4041-bec9-4432d70c4dce", "indicator--b4d7b1a0-9417-4e99-9a1c-946d717c872a", "indicator--a64df31a-e52c-4e5d-9eb2-ceb6149f0ade", "indicator--9332337a-030d-4548-ad0f-f3b4bf7a5071", "indicator--f58eeec0-575e-48b8-b1ab-6039f185f8d1", "indicator--6bf193b4-6b9b-4e88-8bf4-65f3e1db8410", "indicator--bf86e7df-ba67-4f42-abc0-c332b1d004af", "indicator--d809000b-13e7-4ad9-9da0-1b251aa3dcca", "indicator--153abe44-ec38-4d33-9d73-a4edd67a1ed8", "indicator--7d8f380b-e490-4711-8519-9bd7e033d343", "indicator--a5e517a5-3a5d-4dba-b12d-af52d377901a", "indicator--0c7bc30f-f2b8-4845-b34d-b5963664e5d6", "indicator--292ef69f-cfd7-4d66-ac25-48bd28de1310", "indicator--a575c017-a27c-43b0-9a4d-b627e92d0f86", "indicator--2405dc25-f72a-47f3-8020-00f7c3f68d37", "indicator--e801f3bc-f29c-4ae2-80e2-e958838d1cc3", "indicator--8d0a632e-456d-457a-99b4-44be97ecdea0", "indicator--a20603ad-56c7-4ac4-97d6-67e552e6bd12", "indicator--c45ba61a-ac06-4678-ad2b-d1a5c028b365", "indicator--3a9aa288-4ec7-4a5c-9fd2-38ac7b15c685", "indicator--e36e5229-4359-43e3-9fa9-caaac4576717", "indicator--21039fd3-4969-4195-8ca5-26e39954894a", "indicator--40721f50-426f-4185-a7e1-1e0a1e2b722d", "indicator--44db25c4-d190-4d05-86ff-edce492f9a77", "indicator--915c9c5e-bca4-485a-8a34-92161c2c092b", "indicator--2228fa74-3577-4921-95b5-91fcfa33d114", "indicator--86362861-2ab4-42e7-981f-63f8e736dc79", "indicator--324a80bc-52a0-41a5-b5b1-5f3117938580", "indicator--0b901148-7338-4133-ba37-63d2c64b780a", "indicator--20e9aead-a267-463f-9b57-561438280391", "indicator--7a3458cc-d2c1-43d6-adea-2a1e8ef6f751", "indicator--05a84904-cdfb-44aa-aa32-327667597b1e", "indicator--b8673d83-1ef4-469d-91a3-817a96a01c59", "indicator--030a20db-2aa5-4ff9-b988-f7ea60485b02", "indicator--5b39089c-c7dc-4b3e-a1a6-c3948d0451a3", "indicator--26225d1d-cd1f-4703-acaa-9402bca26003", "indicator--fc0d2302-2e7c-4c92-a23b-6c688cf3e0ec", "indicator--3d85cecc-1daa-4507-a17d-1c3f83ecddb2", "indicator--e4c40ac4-0f9b-4d75-babe-48e34affe9a5", "indicator--0a96da28-d26e-43d5-8d65-de4d750264a7", "indicator--e39cab49-f3f6-425b-8d0a-bbfb196ebb95", "indicator--4a4aca18-c9c7-4d0f-afc0-55730ebcf497", "indicator--2a825c92-2601-4fd6-8bdf-f6bf39a9c6a7", "indicator--d6c32dfb-bedf-42ef-974e-dc525d2228e5", "indicator--ab3c13ff-4070-49e4-b13f-97d046b26e5b", "indicator--fc558243-415f-4d10-a0ce-9864b6f2a7ff", "indicator--896b7d38-cf28-4803-8604-fc5d395df972", "indicator--c44b408a-396f-4a86-aa38-3831cd9d8b05", "indicator--c474059a-ab4b-4188-b15c-a0817a2dadec", "indicator--016d3e29-6118-408c-aaad-bb9e309e4f89", "indicator--96886da1-d4cb-425b-a946-29a00e18eb8c", "indicator--957dc06a-c858-4675-9e20-8f1018dae37c", "indicator--85e473cf-bc65-48a1-b8cc-f649f51e08a3", "indicator--256d125f-84b0-475c-a53d-1ae9c63031e8", "indicator--27131b4e-6b54-4bb8-8997-ef8c5a933a4b", "indicator--2fc0dc6a-9329-41bc-9a8b-e32d464a77ad", "indicator--e820af3e-f149-4f55-acf7-c488f4cabcbd", "indicator--1cec6137-a5b1-46f4-a7dc-04fe1beb02d0", "indicator--0a524af3-1520-4a96-badc-376aa1237ef1", "indicator--24676df3-5782-4cfc-bb7e-aca08f3a2bae", "indicator--e5e0a82f-361e-4e41-9815-282fd571da5b", "indicator--9985b537-be78-4387-a26d-8b9772525d34", "indicator--20d1bacd-aca7-4c10-8eaf-c07612bdd16b", "indicator--d0130ecb-3203-404a-bc93-27e1fe6fdb9f", "indicator--d5f07427-b514-4d8a-bfeb-44b2352d0571", "indicator--38652da6-b8a0-4989-bd06-e15d13694904", "indicator--9ddae6fc-4d33-4b80-98e2-ee95958bb37a", "indicator--16a53548-7c77-4a09-9de9-d1fa24acb5fb", "indicator--b07e2d5b-f03a-4a74-8368-e4632221dce9", "indicator--0f760285-46ec-4ecb-ad1a-91a995e45fe2", "indicator--7ff18a44-ee6f-4131-ab7b-d81172a6c62b", "indicator--53b24afe-079a-43f4-9c7e-3669ed37c071", "indicator--05d9b1bb-a5ee-48b2-9b17-667067ec3a1c", "indicator--22158a12-dd4c-4070-8465-f92371e1ecfa", "indicator--7f2cb163-af80-4897-94d1-b66ef9ab688c", "indicator--c4e81beb-bc8c-4de4-8d6a-fcc1c981a379", "indicator--b1cc21ff-8f2e-4e49-a3cb-5626a7150021", "indicator--1f231a5b-dfdc-476f-b5eb-86f2ae154a35", "indicator--12609a49-c6a0-40e9-baf9-6d3180ff8a6a", "indicator--4c8f0244-9796-40f1-8c3c-b68c22d8877b", "indicator--0df369f2-f075-479f-9f26-4f4807173ec7", "indicator--9da71330-befb-469a-97b8-b4392a6d0150", "indicator--031e04c4-1bf7-4792-89f2-017e5051b715", "indicator--262140c0-f4cb-49e8-b076-6362371aace7", "indicator--dc9ad363-2379-47d4-bc5e-3395cb38f7e0", "indicator--ddb4b19c-fb96-4f3a-a8f5-96e144e50333", "indicator--5ad25b51-c913-4457-beb1-648fadecf30c", "indicator--631ada92-1f1f-4773-8e60-8c91e695610e", "indicator--dc4d7a10-48a7-40c5-830f-99d1983da7a5", "indicator--a408b296-c38d-4775-a4c2-85914563c606", "indicator--fc99e77d-c6cb-4e84-9208-386ca5463f34", "indicator--fe3903e6-6652-4f9c-b3cc-cbe3e8ffc178", "indicator--95820182-d03f-4bb7-adf8-f1d27fa8c6ea", "indicator--b2432302-c012-420f-9012-cdd85ebc7b34", "indicator--a22df30f-1961-409e-b4a5-fcacfa17931c", "indicator--3f0efba8-1b1e-4c26-a778-2e70e0397960", "indicator--648a952f-f251-495f-9eca-23aa9b6e60f7", "indicator--96fafcc7-2dd0-4a01-8227-90e41dab1c9e", "indicator--bb7e68b9-9fb2-4efc-8ad0-1ee2295f500e", "indicator--27bccfed-6081-4e98-973f-83ccec248dfe", "indicator--150f9954-b886-4b51-b55b-1f588ff3e166", "indicator--2902377f-c235-4180-825d-83ffd597c892", "indicator--1b08cb7d-6414-4bf7-abd8-5a9152c266d0", "indicator--7d3db842-937b-47fd-b7bf-ed99e0e55782", "indicator--4f55c598-046e-4ca2-a771-c4d063354f85", "indicator--4d8c605e-44dc-451f-b09e-029835c3c5d7", "indicator--45b47dbd-7563-492f-9856-f86d37e43ad2", "indicator--2efc3a48-e4d8-4d03-af78-71404e5abe4c", "indicator--473672e6-ecd9-42ef-ab5e-4a0087d5e357", "indicator--eac77545-bc5e-423e-945b-b7564d16e2de", "indicator--457585b7-c279-4313-adb8-75700429cfd7", "indicator--f332e5d0-bbf7-4b35-8ce1-6a1d29fd3a85", "indicator--d80e39eb-c89b-46d7-bac8-95ae219c6053", "indicator--4fd4ae24-7f3c-4efc-8273-5aac215ff990", "indicator--6b97c68c-a185-4713-927c-c22c0a5dc6d3", "indicator--7850d3f7-23cc-4c02-9bec-d346fc6cb9b3", "indicator--5c5eb6bf-fd6a-47ab-9cbd-bf408d766f46", "indicator--c146f363-2d6c-4fb3-b944-6a21e3bfaea1", "indicator--80c7b3bf-f978-424d-9caa-64974be3bf59", "indicator--f0945fb3-0c57-4301-ba09-21cd7ad30470", "indicator--c3d871dd-596a-498b-8bd2-f39d4a430cbd", "indicator--8f868a5d-3a22-472f-9e30-c88fb65bd51d", "indicator--c154957d-efb6-4dc9-97c1-092d1c73048c", "indicator--2da1d4f8-6078-4da2-8bf5-3b1177a53063", "indicator--22a6a7e7-87d3-4495-8a91-b9144906ff46", "indicator--c443e5fc-fdde-4311-beed-ec11da240627", "indicator--9aebf4d7-ebe4-4792-9c23-89055c7ac4c4", "indicator--fa1431fa-e628-4a2b-975a-c8d40a4bebdd", "indicator--2c136c41-3ddc-49ba-916e-40b0aa6af1bd", "indicator--780fd25d-a7c7-4448-8ea1-33255cc87277", "indicator--71590bf3-014c-4225-b22f-476bbce6c9f0", "indicator--ba8c7e24-961c-43f2-9bfa-326f771d27f7", "indicator--96d6238c-5fa3-49b5-9bd4-4d42490b8838", "indicator--aebafaaf-c224-4cad-a59c-1b15e4418986", "indicator--45161323-5dc9-4de6-8a6a-9649208c62e1", "indicator--d2e1b1ed-93e8-41eb-b019-a7ebb5170519", "indicator--271c730c-7cd1-405e-b1ed-4efb23e70583", "indicator--9f8a8d39-5e4b-4607-8a0e-4f10e1109e9c", "indicator--d5be1122-10bd-4421-8366-1295366057f9", "indicator--1aa5e00e-0594-42e5-874f-31d49f2a99ef", "indicator--f9b7f668-623f-48e2-9617-4edf32f4ac90", "indicator--daa54d90-c774-40a4-beab-3866725dedb1", "indicator--ddc2ba3c-6965-4c3a-b447-550997a581f5", "indicator--70584a10-04a9-4a58-bd85-350172f13fe5", "indicator--22ba53ee-f68e-4049-8c1e-873a08f9b1c3", "indicator--a1956899-672e-4ebe-9b79-f4b9811d2b64", "indicator--7bc27611-09f1-46a2-82ff-4b506dc7273a", "indicator--66e7fac5-ca91-46ba-94e8-fca4c4d1d0a3", "indicator--67cc44b6-a7fe-4ad8-98d0-671e97184f5a", "indicator--611ea04f-b7c8-43ee-b701-904fdb315e41", "indicator--0bf63286-9f85-43a9-8a9d-f1eba5b5f2a7", "indicator--12e24b1e-23f1-43b8-8474-e8ff49a1e03c", "indicator--da9af9d8-3a23-463e-9ae6-2f80bd8160e1", "indicator--1ed038ce-3300-494f-9680-20a8f2172c0c", "indicator--e15a70f4-5088-4f15-b237-160c4ba3b15c", "indicator--196bf9e0-6867-44da-af92-ed4105b78a22", "indicator--622d8c09-4e3d-4f98-a07d-0171237d0e6d", "indicator--f4a378cb-7f2c-402f-aecc-39c110382caa", "indicator--21183e86-7106-4917-a3c8-459adf464bc9", "indicator--2c10756a-22ec-4078-aef2-343c53baf87a", "indicator--b7f5a5b0-87b7-4642-a179-cc1c0909101f", "indicator--c10e6f93-d813-4283-b61e-7b5d22db05c7", "indicator--540d3512-da9d-4b5e-bf49-47c9c4051cb2", "indicator--6ab16480-5971-4dcb-8d79-983d5020ce2a", "indicator--b31b1b60-8609-45eb-9ee7-01135b5c9086", "indicator--4d8c2443-a73a-41e2-b2b1-38a7606fe0f4", "indicator--69b8eeb2-6259-402d-8088-2f8cc1992c5e", "indicator--56d7eab9-0174-4a1b-bd5b-191584d6ab4f", "indicator--96e28fcb-0adb-4386-a711-2d1f7cba5e50", "indicator--3f6e615a-5d14-403c-9a6c-090f2c063223", "indicator--5a30f199-a8ed-46a9-98f4-0e08a6668c0d", "indicator--e316c820-1bdf-47c4-9c9f-d846fc7d2640", "indicator--55d122cf-a7b0-49db-a3a2-1acdb62c1f17", "indicator--d2a68d1e-5116-499c-85d6-aa374c4713d0", "indicator--e016b4b8-a2ef-49b6-946f-49b223c47e73", "indicator--d1333e38-a797-4c74-b046-c790bb89d841", "indicator--205343db-fa86-492c-8afb-5842704920a4", "indicator--a9d48a17-cadd-4fc4-a659-1370e29c9f2b", "indicator--217df46b-6d77-400c-bec7-0fb01b6e0328", "indicator--c15856eb-b73a-4e2b-b2bb-5a660d1b1748", "indicator--a2717587-4a5b-4a97-8f27-8edbd2dd092c", "indicator--37e88960-07b5-4e33-a8db-8d437ad10c6e", "indicator--95c39875-2bd3-4c73-9799-8572b3303b35", "indicator--b70ced09-06cc-44f9-ad6b-585e8258f898", "indicator--dfd9a0bb-a7e5-4e71-9b05-bfdcfbd72370", "indicator--8609bb38-1233-49e5-a300-4aa57c5dd6be", "indicator--e175dee4-2eee-4819-93af-13a5e5b87eda", "indicator--b1088d90-6761-4ca8-9f1e-67e4c496201c", "indicator--fb901a9d-56f7-422e-b393-1b29f7ae5717", "indicator--5b9bee6a-1f32-4800-82c1-5990f8a9a1ce", "indicator--ad5452a5-2979-40cf-80f5-5c1e5478aa7e", "indicator--46681714-676a-4cdb-8218-ece390c9fab3", "indicator--d9dcb026-3653-4027-a73a-f00780db32d4", "indicator--9538cefc-e89e-461c-8442-72825f333a5a", "indicator--d23e77c4-e262-4287-b447-9318ba302329", "indicator--ed35559a-c29f-470e-a9ea-d9636ceef65d", "indicator--b18ea357-9dbc-4a8b-87be-c424adc11730", "indicator--0b3882d6-bce9-407c-94a2-7e95f1db2867", "indicator--c44d9cff-c81f-43f7-82f5-7fb24315a103", "indicator--ff5576eb-9b72-4e5b-a692-916ee96e0c61", "indicator--92f6982b-72e5-47e1-8524-9fd0c66383d0", "indicator--b2186ac0-d0d8-4181-ae35-a745b1af582c", "indicator--8766c8fd-dfe4-4d16-9b79-b8be6c14812b", "indicator--c9986215-5cdc-4979-b017-632b55c3ce25", "indicator--089aa379-13fa-434a-aa11-9440cf3ec6a2", "indicator--42b156c3-382a-4f13-8458-ced17fe7d94b", "indicator--d9bd2783-82f0-488c-b43f-27b4a733e26d", "indicator--67f1f5f8-0023-4a97-92d4-91ca78f2938d", "indicator--e3e921dd-0cbd-4102-ab77-f30cc7d18587", "indicator--c0cc102b-3437-4509-a61a-d8dc166267aa", "indicator--08502891-b102-446d-8e2f-3c9b457d51d5", "indicator--dffa6f02-2bdb-48b0-b082-f161c16b6327", "indicator--31126652-259f-4259-90d2-0ed3197db28f", "indicator--4afdf53e-d0b5-4e45-b0e2-f5dc9bf53bf3", "indicator--46fdc641-ab03-4f18-896c-04c23974008f", "indicator--5b9880e8-f9d3-41cc-b5b3-9c2dedd0aabe", "indicator--0e821245-130e-4d67-9930-b4a158e2dd1c", "indicator--da584b71-cd4a-42b6-86d8-373a6c03a4e0", "indicator--cf13028a-12e8-40cb-be75-739559a93a68", "indicator--57bb3a67-b41a-4467-86f7-af8d183535d4", "indicator--6d4f8ffe-95ce-46f5-b71f-4dd1a6c06126", "indicator--670050df-9156-4d49-8744-843744842178", "indicator--ef6710b2-de6b-42ec-ae6e-1a393b632085", "indicator--dd92643c-4080-48b1-b1eb-de6e2a9f2c72", "indicator--4cbb77cb-0cab-405f-bd56-28e8bd6b4f5f", "indicator--41118c33-f46e-4486-a2d9-fde99d276a17", "indicator--82037075-bcf8-46dd-bfa5-1e7cb8ad8f1d", "indicator--c74188ac-459e-47e5-ac97-698bdb99df37", "indicator--68a9736f-93d6-4312-ae00-8a9092467e35", "indicator--adeba295-5b6a-4442-8817-6d5948ac3b9a", "indicator--aa0dbd69-767f-455b-9f9f-344998214cd8", "indicator--7a6f1ab2-4723-4021-b81b-c01037296150", "indicator--514d6582-9c39-47ca-923a-dd81014e016b", "indicator--b1f93061-a87c-422e-879a-c7c441a4c109", "indicator--8a722dab-9c4e-4e10-bc15-a35a42370a25", "indicator--571ab3b3-4f72-4fcd-9341-aecfd417c4a6", "indicator--50100e07-6b27-4b81-a116-300c77f2961d", "indicator--616bb0d3-c653-4159-a658-0c585fb48f2a", "indicator--347021fa-bae8-4f4b-9138-3d6d41d8d22a", "indicator--50f4e754-5e95-4186-8a68-a3502af02955", "indicator--5a06f8d3-8443-47c0-a9fa-5261ea9d9da7", "indicator--87d2ce37-0ce5-467b-b365-59839948fdc1", "indicator--fd5df098-82c7-417c-9089-de281fc2fcc6", "indicator--9fb09f8a-5ff9-4e5f-889d-24757ca8e580", "indicator--ba5b5567-43cb-411d-8341-53cb409860a8", "indicator--8593de30-d93a-4c77-89c4-dad9aac6009b", "indicator--913eb01e-fb5c-471c-96f0-0ed1d81eb06c", "indicator--9cb4004d-2c20-41f9-8a43-b0067cb9beb2", "indicator--f23d6975-886e-4165-9607-603fac2e2c29", "indicator--068cd555-b35a-45a7-8af3-0b5fceb4eeb2", "indicator--0c73b240-6772-4a80-b636-f5be04198540", "indicator--77f18916-aa10-4b5c-a72b-dd696efc1521", "indicator--e671ee64-ba17-4d5c-8eb1-fd79dcc3e60a", "indicator--a1924fe3-eb77-4505-99d8-8d2de2c41d4c", "indicator--c256c91b-24f7-47c4-aa4f-7542b421badf", "indicator--4523c223-a246-4bf2-882b-c39d41e412e1", "indicator--004fdf35-0f35-4f75-bb29-eab85eef3638", "indicator--19b2fab4-9626-4ca0-970e-e758de2875b6", "indicator--9de45588-b655-4227-8815-3c58b28aa8f8", "indicator--43a400ab-a26f-4c04-ba04-18820e95ac14", "indicator--357e1b95-43db-4115-936d-8dea624e4653", "indicator--6adb2f03-568c-4cd5-a1e9-e1861864bf09", "indicator--5156785c-f028-40e0-a1ce-6d32af0248d3", "indicator--f83d8c4d-f535-4baa-9154-7e1b18a5e205", "indicator--ef08d68d-d2fe-4318-a45d-14e37472598e", "indicator--a6bb0f0a-3f00-49f4-ba36-f46d0cda6bd1", "indicator--d58169a0-f9d4-4b4d-a259-cfed9c133dfa", "indicator--1f09da17-fe9b-4f4e-ac2c-af41d7ed9b8f", "indicator--aa185ec8-8329-48bb-84f2-58405349205f", "indicator--d59a4ea0-31d2-43e4-844a-83b9f626e5d3", "indicator--21800d8f-d6e0-4d92-8aba-1756de2a6a14", "indicator--0ec2e08f-4145-4086-8660-e14f89b5493c", "indicator--01d588ec-a298-47bf-a61b-3cc747fada47", "indicator--785ddf8a-9e2b-4175-82aa-7c950d22cf43", "indicator--793b1775-ad23-4b9d-a755-68136e339b4e", "indicator--e482f838-e508-427a-9bd0-9aab51515976", "indicator--ba00924e-193f-4c8f-b7ac-0b28da810eac", "indicator--fc568269-56cc-4fb8-a069-7145680a10ec", "indicator--6eb91d41-07ad-4d5b-aba8-c42287ea49c8", "indicator--3e1c8d76-d711-492b-9495-9451b64e22c4", "indicator--ff672b41-67ed-43da-a65c-bb8201d56769", "indicator--d4fc4819-0195-4808-9b55-3c626da2c671", "indicator--956a0702-0f56-4bde-84da-f0791b8bf66d", "indicator--c1477d22-bd40-41da-aa02-40a385f7cb77", "indicator--926da36c-2c29-4687-9d46-f718244a5a73", "indicator--da2620e8-43de-42f3-be13-afea79e290d3", "indicator--5698b11a-40ef-46fa-8460-3cd949c71feb", "indicator--f1747d58-120a-41ab-a09e-8720a91f2900", "indicator--87115628-d8c4-4008-bdf3-fba027806ae2", "indicator--6f38a194-cd5a-4d05-a8d0-929c135836d6", "indicator--78fefaad-0e57-4cc8-9511-38b96151f4ed", "indicator--6f76ee48-9a8b-4025-afb6-a0a74e8e7166", "indicator--0494ab4c-126e-456e-a118-08eddb0b66f5", "indicator--9a3d6ede-589c-4900-8c19-e93de772a8e3", "indicator--c013a520-5e30-41c9-94d9-f0ea089de6a4", "indicator--7968a3b9-61d2-42b4-970d-0d04dde0413d", "indicator--a8a086e1-b7a7-4425-acdf-289bd7d5d3c4", "indicator--5adae10b-0707-430d-8c8a-34f80b925e4e", "indicator--1bdc557c-b449-4c5c-9eee-986bb45b120e", "indicator--52d4cfb9-3074-434e-9c38-c2447672594d", "indicator--7f32129e-3918-4479-b12c-b01a03be4680", "indicator--f813ccb1-12c4-4c0e-9985-5f08d85a44b4", "indicator--f43749c3-ce3f-4473-9905-c819a55f235a", "indicator--01aa6d7d-3ec3-4e2d-9d0b-53adaa13e12d", "indicator--5d5d63ba-9ca6-4291-82bd-98a7a79ac30a", "indicator--67ebffca-9c26-4034-b388-b9c9f4a85674", "indicator--1ac3cb03-20dd-43f3-924c-9722735a74ec", "indicator--e4681c3d-65e2-4c5f-9254-b3a954101318", "indicator--cab0f871-4d38-4a93-8401-486acbc89134", "indicator--988b5c12-3816-4259-b5f5-fdd6e6936859", "indicator--dd5b5cc9-59ba-438a-a868-39ce25cec5f2", "indicator--557148f8-d7e0-4fdd-96bc-c833c11a252d", "indicator--57b6b394-879d-413c-9d94-f923d806571c", "indicator--f5c7774f-aeb5-446a-9b5e-dd30bd52e74b", "indicator--9a02f02a-2287-49ea-818a-221159a922c6", "indicator--c699de52-537b-45eb-abf4-a5697e839bd2", "indicator--2db2d69b-ebfa-4860-a92b-078265ea2b56", "indicator--c8f1b222-834c-480e-b484-e8776d5a61c1", "indicator--3df64832-5cba-4db5-94ac-d5c954c378ae", "indicator--77d52ee6-51d3-4312-9645-5051f70bd2cd", "indicator--24c0bb35-09f5-4ef5-9a92-d0346521ab76", "indicator--05b76c73-2314-4e7a-b7a4-76ea06735e5e", "indicator--502e3a75-28ea-4e7e-b595-3138caa001c3", "indicator--873a4606-946d-48df-9e0c-187e8a5fee68", "indicator--41f6f84a-7e4d-4199-9de1-201d3f9f607d", "indicator--3ed470ee-7b0c-4724-b04d-1021ac35fb66", "indicator--61ef5dd7-a0f9-4df0-bc02-72f4d6a6bc9a", "indicator--16a87c71-7355-4899-9a42-ceb3b644284d", "indicator--f2b6c190-8dca-4cf5-9a9e-b2337386829f", "indicator--8a21160c-326d-479e-896a-367f9c46f0b4", "indicator--800c6d2a-dd92-47fe-8766-69648d0fd9e1", "indicator--f1d62964-11f9-4f2d-b26e-21a4f6e283d4", "indicator--4be71d51-deb8-40dd-abf7-03620b0958bb", "indicator--903a8eb3-ae40-4e2f-97b7-a58ab08a9895", "indicator--b9fab5ca-825e-47ec-a14d-510282e079fb", "indicator--e7792bac-f88b-4ee5-9745-b3f511fbc5e4", "indicator--8c2c34ab-b94a-4501-82d6-0e6cebc2e66e", "indicator--7b8919ce-d330-4da4-afa4-20930e20cfa6", "indicator--05124a11-a7cf-4b1b-9c4b-3eae453507af", "indicator--ed403e56-bbba-426f-b8af-d5f04d4e96d8", "indicator--f80e5345-4703-471f-ba56-118b9b4797a8", "indicator--a1b157bc-0ede-49cb-9d39-6babe0cb5e42", "indicator--3303876e-5cb6-41b0-bca6-12313f3a69c1", "indicator--47ffbc4c-7b13-48eb-b268-d931785a7bcd", "indicator--f9ee3f2a-e74b-49d5-bf6a-95dbb3eb6bb8", "indicator--0af486f6-4e2a-4c68-bd8a-dfebec6bfa06", "indicator--a41b0e04-e1a5-458a-89ad-be0a934efebd", "indicator--17446e7b-b126-49b3-aa5c-9298d084480a", "indicator--c1cfc86c-c726-4bfa-95f0-b591596f73d7", "indicator--b4f858ad-16c3-4bb7-b1f7-d81d092dba2c", "indicator--e4c99802-69f2-4328-a06c-ea8544884435", "indicator--093cc88e-d8eb-43ff-afd3-84c4f4c01a0f", "indicator--08bf570e-f250-47c0-b983-04598d2c50c3", "indicator--723d9477-5466-40a0-9030-a91021218706", "indicator--ccc3abbe-8d22-4732-9168-db5de4469920", "indicator--51fb6924-3cb9-4ce3-942a-0df7578d3c32", "indicator--bf2dc182-3d40-43be-b3af-9da480fbb532", "indicator--d84baba4-0775-427d-b092-3cf26276f805", "indicator--3b41ee07-6041-48fc-9159-a53243b96950", "indicator--047da89a-d50b-49a6-b28f-2f44d4d9dc40", "indicator--edde3bd3-e1ac-473e-81cd-80018b4ab1c4", "indicator--584ea03c-ff30-4dd1-9731-8cc5bf162cf0", "indicator--cd1605b9-40ea-4611-80b6-3a4a662235d5", "indicator--8958152d-1c43-400b-9ff0-432e7d5fb628", "indicator--c7e5180c-8e47-42ba-a0ec-ec165d715a95", "indicator--7a0ad7fa-11aa-4b64-93d2-29f9dc3068ac", "indicator--da62948e-ad4e-4573-8e2c-2ee9348485f0", "indicator--f9e799b4-23dc-4eef-b67f-1b4cac12fdaf", "indicator--e04bef17-a3b2-430e-9aaa-18c66896075e", "indicator--0f6817b8-09cc-4aa8-9b06-a26ac4426c1e", "indicator--b51d0f79-a0f8-49d2-b397-6aa097e00bb0", "indicator--bbd2461d-1182-429a-88f9-adeb3ac69c1b", "indicator--ecfc48d2-a880-402d-97c8-79f8b57af816", "indicator--72a9de42-ed24-44a4-9e53-21fb9bd5ad0c", "indicator--987e3543-6cb7-444c-9ea7-b316bbe219f0", "indicator--5d583a20-e12c-45be-a046-a8824a0e4f9b", "indicator--100e6085-b551-41f8-a92b-3bbbf3277b56", "indicator--01199d09-577d-4b8e-af0b-d20007c51292", "indicator--0b79ec07-26d2-4ccb-baca-fcd07bdfae96", "indicator--8e9920d0-1d09-4c79-95f7-5d296981b93b", "indicator--7b74e991-06b9-412e-935f-583dfdccefa9", "indicator--417dd0e9-4e4e-4f78-96bb-bb24672ee8f4", "indicator--f41e83b0-7f95-4fb8-bba8-56e66d444c93", "indicator--da3f8c10-9ad8-497c-bcc1-3b23bc64ff4e", "indicator--e49161c2-1473-44c3-8098-0a91633c8957", "indicator--fdfbbe45-07d3-4264-b29b-4f616e6d664b", "indicator--cf9e777b-e2a7-4224-b12c-aaf6db968348", "indicator--fa62fb7f-ff84-4147-87a0-d7b69cd2fb12", "indicator--5447ce82-1588-4412-9f39-6dd95f693dbf", "indicator--af0fadc8-e337-499c-b734-2aa13203259f", "indicator--8bad93c2-e980-4305-87d2-80423c02473a", "indicator--66344c75-e9e5-4a59-b103-c3e2be39612b", "indicator--f2949902-5480-4b7f-b02b-b2ff71d38f42", "indicator--5ee2e005-6947-48ac-b756-b53af7b66ced", "indicator--25db1e11-e8f9-4f47-b9cf-74adb19e7fee", "indicator--145d3f23-7d91-45cb-80fb-27dfe60c444e", "indicator--dc45602f-fd6b-40bd-9157-33f0c41bd22c", "indicator--a01102c0-7730-439d-85a2-1fd08c2442b6", "indicator--cce6f2a7-6a43-4843-a1fd-dfa70257d793", "indicator--ceeb40fa-3bd7-4273-a2b2-ee75515f2763", "indicator--8f8b7029-c210-48e2-bf31-f42c3d78acea", "indicator--4aae172c-00f5-4809-b292-4b9a0b6eff45", "indicator--e06c7e7c-1e37-4d60-abaa-15c497676c7e", "indicator--62cfcf30-d65d-49c8-8359-7417b74879c2", "indicator--cb9ed599-094f-4877-9a30-f88db1f07d33", "indicator--584834a1-e0e5-472d-919a-6fc6966208f3", "indicator--5ef9ab83-31c8-4d8c-be72-c579f1e6ffd0", "indicator--8f154e93-1380-4c7a-bb0b-37ec9b4848e6", "indicator--36469126-8c77-418e-be30-57b84be9cdc2", "indicator--d7360fcb-632d-4aff-9374-b046c55037da", "indicator--7b679061-c52c-46bf-9ac6-d42f2ae73d93", "indicator--bd3b76a9-2cac-4e69-9f71-308bbe5cb450", "indicator--755cb4ab-c6ce-469a-9603-d3b169172476", "indicator--23c07985-46f3-463d-a237-255a3c00b9bc", "indicator--b905a5f5-36d0-4378-9b9d-9249ad72a79a", "indicator--944414b3-2052-4689-a25e-fa69ef252244", "indicator--9223b372-05c0-421e-be25-f89894e43291", "indicator--02b2fea5-d97b-4104-b828-47301a44c0e3", "indicator--fbac5e85-6f03-45a0-9fa0-ba22171111bd", "indicator--315ab4f4-8df0-4fe7-9f2d-847ea1476eb0", "indicator--ec89f93a-3dd7-4d53-9890-209133bad97d", "indicator--dc90c63a-f21a-45f8-b4d8-aebc7886e646", "indicator--3c2255ca-8a68-4b49-ae78-df7f7006da8e", "indicator--99cdd62b-e623-488c-9b29-ff4049767b5a", "indicator--0fdef424-802c-460f-be83-c5b0a9d670f6", "indicator--9def43b5-1915-442b-a28d-2d7dd03439ec", "indicator--35c2d4ae-659e-4ad2-b9df-940ef32883c8", "indicator--e1bfdcec-ed2e-4f8b-b474-bc9c231e84aa", "indicator--6f1b0f0b-1e66-4738-b4ce-60aa33d8f1c2", "indicator--cc3fe662-0e71-4d11-8351-b610fbaa42b3", "indicator--8cb8e4b3-6b12-4bd4-951e-76b0336177d6", "indicator--505f9260-8b2c-4c76-8e8e-fb84b63eba16", "indicator--508305d4-7fb6-4b73-a797-486e0349ab3a", "indicator--a9ab6df6-8a3b-4af0-8925-20bb1cbfde9b", "indicator--eb1eef1f-fa34-4e52-a046-158ac55fef49", "indicator--bf77980c-7f31-48d8-9e82-a684d8149e34", "indicator--16a64c0d-d835-4d62-8f7a-4b0b393565b3", "indicator--c7e0ec20-8577-4441-87ad-6678e5d86ff9", "indicator--25f6842d-81b9-425e-846f-c43e15f34c10", "indicator--748ee1c6-9b41-428b-8c62-e09e810471f0", "indicator--f7cfc5e4-c547-4b02-a228-949070002545", "indicator--4db0a848-238a-4a01-bc27-0ccd96097af1", "indicator--3f636b4d-ffac-4734-b2b2-a61e7b3dbf0d", "indicator--63bf35c7-78b8-4b3f-a00d-7e5012a34454", "indicator--4b4a9587-9989-48fe-beef-567761dea9ef", "indicator--b2571b4e-f577-45a1-afbf-28bffc16dcbd", "indicator--fbb79fa2-57c9-419e-abfc-565e3b26a5c2", "indicator--b4464fb3-8b04-4b2c-8567-683d3527284d", "indicator--69e77ab0-79e2-4be3-8fca-ce0ccd7a7399", "indicator--1575e6de-3281-43c2-9afa-02841fdaebaf", "indicator--75845ca1-2992-4480-937e-4ff10703b967", "indicator--75dfa832-6331-47b4-8b96-7a635efd8044", "indicator--face05ce-b19b-42cd-8e08-203116c13fa0", "indicator--560aee13-0cd2-4c2e-9ea3-8b3373b62a86", "indicator--8f02da3b-7554-4cd4-86df-dda2062f0ca3", "indicator--ad601851-d4d0-447a-b1e6-0419b8b34ebf", "indicator--0447c710-14f8-49dd-a416-e70b2e35a0c2", "indicator--5cde2fc4-6bf6-4037-b0ec-ef26cae455e3", "indicator--6ae44bc6-9073-4b46-8e9e-36b4617e3b2c", "indicator--b484f75e-fb52-4811-978f-696b31e71aff", "indicator--b37b6067-799b-4614-8569-fcf1fa9a7d5c", "indicator--2365f881-ac76-4d07-a8e7-773515e10f72", "indicator--c8fb3b36-4a3a-4640-a8e7-4cd44471675f", "indicator--a52c5e6b-ff95-4a5f-b3dc-b123ac3157e8", "indicator--06d7b1ae-d34e-497c-976e-5bcf96c19a0d", "indicator--1a44dae5-635d-467e-a4f4-95c4b7634b4e", "indicator--85c2c73d-1b48-4d85-a66c-3296859afdda", "indicator--c09d621c-e0b4-477b-a670-624a1332ad51", "indicator--96e942b6-01e5-4ab7-a49c-680836c16c97", "indicator--3db0d3f9-2b70-44f1-892a-c8dff3bc0ef6", "indicator--b8ab8a81-9573-487d-bd39-d8e33c1ac097", "indicator--6d9e490e-060c-4505-9e79-6fb339d69260", "indicator--682e94ec-7b7d-40f2-a1b0-119740ead874", "indicator--396bd476-0f4c-453e-a0a7-42389dda406f", "indicator--9d9c431e-8d5f-42d4-9ada-a2fc581509db", "indicator--253effd6-a8eb-4a88-8f4c-b14000b69261", "indicator--73ede260-b790-4f22-8652-29ed7a249d71", "indicator--cf8ed730-dc7f-4e8c-87e8-37414b52fd99", "indicator--e8605bbf-0c26-443d-8696-29bd7512cf11", "indicator--3ac8beb0-b07a-4557-b29e-39447f38d3f3", "indicator--8aecde24-a160-43c9-9768-c9034b7b7401", "indicator--1a526159-d502-48df-8d8f-a8f61fd68627", "indicator--fb743beb-e780-4926-8fcc-f5b288b83edd", "indicator--d068818b-dd8e-49e8-a64b-4b10abd2b587", "indicator--2a1d3de6-4101-401c-a9f4-fcdd3b5954e1", "indicator--73ab3291-9f08-4582-80f4-38bc81543bb1", "indicator--b6c90d29-b723-4c8e-9bba-c5bc2b9e46b5", "indicator--fb03a7ad-c507-443e-8388-3ad421811b57", "indicator--777ecd2c-f7d4-420e-bad3-e0c71e25658a", "indicator--a2204003-7948-4101-8a30-b2c44fbbf914", "indicator--8164c956-b882-4602-822c-218bdf27617e", "indicator--aa2c1200-89e5-4504-9615-1622ca2f8eaf", "indicator--4f9a7c55-ccc2-42cd-b4ee-347521e2d883", "indicator--1f4a6611-6f69-48ca-9c82-8099ab9edeb0", "indicator--d8822655-706f-4f45-a646-e65b617ec53a", "indicator--2616ab0c-88fd-4000-a747-9f2cc34bcb17", "indicator--1fb80e93-4a07-4486-961e-1ef6899dbbe8", "indicator--390fa44c-c636-46d1-b5a3-038544015ffd", "indicator--51b7533b-027c-414d-94fb-e4a345e56ab1", "indicator--32a17356-393e-4496-9c9b-41ab973acda1", "indicator--6528a23e-1a3e-4024-97af-24728567547b", "indicator--ce77db44-97d1-4954-a3ac-396848d0501a", "indicator--fd50fb6a-30c6-4e4c-b226-199315a6eb9e", "indicator--33c9c540-0fd9-48dc-8ba8-b4c7a6e78a0e", "indicator--a1d10c67-07cc-43fd-9bce-be2f8da55b9e", "indicator--e7ee296b-9993-428f-b4b8-dfdc274d868c", "indicator--06308138-66a8-4b5b-9bbf-4c37cdf4a600", "indicator--f5b6bc5f-fbc5-419d-b124-1c1494a738d9", "indicator--7d908e43-03e0-486c-95c0-42039749afae", "indicator--60f719a3-afe9-43fb-b140-c92785a9c31b", "indicator--a64ea27e-b543-4556-9fef-238a5f05facd", "indicator--8ea7dbe8-a9a1-487b-a1a4-9a72563846cf", "indicator--a99114d2-3b57-4803-b79d-27c17c57962f", "indicator--61a541d8-6522-48e2-94f7-cb1ad49a70e1", "indicator--9d84cd5b-7341-45ff-ae06-022d5e57c059", "indicator--0d9fa997-c5e1-4cfa-96eb-48a01196e49f", "indicator--66a9e96d-e6a2-4afb-9306-32550f7c46a7", "indicator--d50b1a28-6462-47b4-9c53-ddf6dfe82f57", "indicator--29b1a73a-3c64-4540-9e7a-f275f8bc19fd", "indicator--6bbc7455-9d42-4d35-bc50-7654259b7fea", "indicator--9208a8c3-4ccb-4e2b-a1e7-9970de2a80f1", "indicator--bc17986f-8bde-46c7-a566-7b52c2a90094", "indicator--6277dabe-8233-44c9-bfb4-d069168dea01", "indicator--ed1fc8a0-f35a-4e51-be72-bb2bd86c9ad3", "indicator--14722140-0b3b-4490-b644-d16961904426", "indicator--6db0f7d4-8a25-4231-bfd5-cc3515757398", "indicator--c1ecd2e7-819c-4660-a467-17806cb00f1a", "indicator--09523f3a-89a2-4f48-9181-ca70af60d394", "indicator--963cf7af-ac9c-4770-baf3-e6d537104312", "indicator--1a2760ce-754f-4cb2-9746-659b3264dfed", "indicator--be156f51-d7ba-473e-9db4-467527921f75", "indicator--aad46c94-3dce-47e5-973e-ea0e4c9d1d4c", "indicator--fbe477bc-47c9-4b43-8277-5f3b9e6cecc8", "indicator--d644fe45-7e46-4173-bb70-e625e3ebe2f1", "indicator--ba3a2b96-bb7f-4ce1-9837-c23c2d2c669f", "indicator--c1b4a758-6010-4804-93b5-5c91ca0b807b", "indicator--e5e9558b-8439-43fb-8b2c-f8220b747347", "indicator--7fb12bba-bed2-4256-b790-c95e1da3d426", "indicator--ce5aae08-1a63-4837-bd39-559146144513", "indicator--3b203060-71c5-45e1-8b91-28d38a9b22cf", "indicator--af95b881-4960-4c56-80cd-30ff2e4011c6", "indicator--9e6288e2-364f-4e64-ac38-684f41d2d0d2", "indicator--a76780df-319c-461e-8f0c-aee045d225f7", "indicator--1f16c2ae-f045-4666-8da9-cac5dc351839", "indicator--cc8b6de7-00f2-4ec7-9d22-8ee8e15b5f81", "indicator--d02de518-5eee-4464-b61b-efcb689d48b0", "indicator--ba85ef96-80f9-4f0c-a7d5-659b8a057b42", "indicator--5eb20f8b-5fa3-498f-8d72-0004db15546a", "indicator--9f61f913-4b71-4e26-962c-8f490935a633", "indicator--0b159eb7-8635-4201-9508-621608e671ec", "indicator--4af8792f-777d-45b3-ac95-d98647f81cb2", "indicator--72cea243-d314-451c-8ad7-1063b6bbb539", "indicator--5ef74b4b-10b5-44dc-b124-faa049b8d40a", "indicator--dff79c6a-7e53-4837-b7db-229055d69390", "indicator--835dad7b-f303-4615-8dde-da9a33043b0c", "indicator--8633082c-b306-46b2-b3c0-10b52f4ddf92", "indicator--ab237b33-e774-493d-adbc-f998c5504ec5", "indicator--3cb8126d-680e-493d-a19e-32de31d72527", "indicator--e6c15bec-d99f-4c68-b387-55ff75b23136", "indicator--dcadfff2-afaf-4bee-93bc-25843b0282d2", "indicator--3c056c9d-5551-44da-82f1-e8d6580896ca", "indicator--885ea876-5bf7-4569-a672-6729aab25f1b", "indicator--2fe1881e-5335-422e-a81b-2dae3be76c9e", "indicator--f8f04c34-ed95-4fcb-8171-97cb4406475e", "indicator--9e8d36bd-f572-40a2-b5e5-c8cbc5ef48ec", "indicator--12e75595-6f28-4d1a-879d-8eb166d99cee", "indicator--c7c0235c-72d4-4e8c-a688-dd46df18eabe", "indicator--4a7c6704-6f40-4754-9bbc-69486f4e2c08", "indicator--55f0d765-9df3-48d3-ad28-cc3bc9d9f259", "indicator--7d293bfd-0f94-4441-9381-c252c71f845c", "indicator--73da6558-3df2-418f-8ba7-91cf22d44118", "indicator--699e6514-86aa-4473-b72f-4d25b7f547cf", "indicator--e226b569-9c7e-4254-9529-844b01ef9d39", "indicator--e5678b90-12e7-4e71-9f5e-0e4528ce66e1", "indicator--010d2879-66c3-4f60-943c-a0f316093efe", "indicator--bc94b33e-ccdc-4714-a2ec-06b023f2451e", "indicator--f4247238-6608-4aac-a8f2-6d67031b4cbd", "indicator--42fed4bf-49b8-4612-aab8-42d2dafd7b76", "indicator--ca4e7a1e-bf47-41e9-958f-d6f17ecb84ff", "indicator--2566eaa0-7d68-4e35-a477-65d8bbfb828f", "indicator--f4f198a3-de5e-4f26-8c3d-d1eebeb7dcb8", "indicator--67b0781d-6876-4039-bcb6-c282417cee9d", "indicator--084580ba-5e9e-476d-b486-4393a3fd9017", "indicator--2f449949-7fc9-4a92-b918-9b732171e72b", "indicator--f939ff4a-b1bd-4b9e-9105-411643aead44", "indicator--397e19b3-9716-4cf3-8b61-4411eb3c78cd", "indicator--84fbee7a-ad00-4fb1-a917-dd472ae08727", "indicator--eaa90b9a-7e0f-4276-a28c-2059c2dc6ba2", "indicator--7d2cc224-cd63-4756-b48b-4924d3b3dcd2", "indicator--57073108-a668-4e67-972f-6c28f00d31b3", "indicator--1dd0ac1a-0e80-4361-8ed1-ca855cc5c531", "indicator--4c403ebe-f5b6-4ee5-8eb3-9a30422c4cf3", "indicator--f1364cdc-b724-46cd-967c-ea41aaf3df32", "indicator--efe388e6-168c-43da-a3cf-4fca023c1fb1", "indicator--106a5ff2-1585-443a-8665-41d9344ae6f4", "indicator--36eb4c49-1ec2-4ef2-8bae-48773898672e", "indicator--11d8e91c-a1d4-4f59-b774-e921f31691ac", "indicator--85ae06de-7a8a-4a98-99da-f1227f72cc22", "indicator--3780c049-0892-4266-9be8-a09b87358b57", "indicator--ec5a1d14-a56f-4128-b561-d79dc61cc370", "indicator--f61f7db5-e4a6-4ef3-98fd-cc0e1888ecc4", "indicator--4cf66707-8673-4ae2-85aa-7d42faa93868", "indicator--cfb9a2a2-83ff-478f-8a1a-46e52138b431", "indicator--4be316c5-0db7-405f-acae-820c94a93166", "indicator--a443caf0-fd41-4a55-bcb3-6f9b38eee58c", "indicator--fbb46297-9d40-47f3-8a26-3101d6c5c7a6", "indicator--9c45d422-bd3c-46a1-87d1-5e27a939a14a", "indicator--5fc3c241-cc54-4455-99ab-50cd3343bdf2", "indicator--a3275c81-6848-4017-a61f-785ec96c0a6c", "indicator--10fbe179-19c8-442e-9077-a5d0f356b6ad", "indicator--ba736815-0b41-42fd-8f91-791af758091b", "indicator--aaa83152-a6b5-4754-be7c-1b9bc0fc213a", "indicator--8cfcdbc9-15c5-4732-9e59-cdfbc38e57ec", "indicator--37e65fcf-2266-4ce8-9a88-25971e9d4384", "indicator--cbd401b0-abfd-4698-82ff-59a3368df414", "indicator--cd7e9661-4ade-422a-8d81-869c9ef3cb1a", "relationship--bdf7dfb2-7b06-4c8b-9974-66871eeb6a17", "relationship--714a2836-8cce-4c31-903a-5978e968f1a4", "relationship--7ca3b09d-4f16-47c4-bb74-dd81bbe9fc00", "indicator--f168e5e5-60fb-4d66-bbf9-6566c4007c18", "indicator--f4914092-4d9a-4f74-a8f6-dbc523913c90", "indicator--7e462e6f-7141-4aea-97f3-a9a019c1e8d9", "indicator--10b19cd3-4b78-4abb-bcb4-f435392e408c", "indicator--8394c729-64af-49fc-ada7-a873415659b7", "indicator--c807ede7-7cb5-4c12-8e39-c1ffbda381da", "indicator--9b1d6d5d-ce8f-48a5-ab02-4daeffc13b36", "indicator--94de47b3-5661-46cc-af46-03d867d43d39", "indicator--57f7c783-7a96-4e1e-854b-849a026da4f0", "indicator--bd26bca9-3235-4229-bc8a-54fc47115c4b", "indicator--3328279d-83b3-45d1-9d6d-34fe6668a949", "indicator--52c06e57-50cf-414c-b8de-fb0be1f901d0", "indicator--3dcfc0b5-925a-4a10-b34a-ee45d5d29fb3", "indicator--08cb9e39-a3f5-48ba-a085-007221572f1f", "indicator--cc0c0a6b-a180-4aa2-80d1-e91e80a8c6d3", "indicator--0a28c3b0-6ab9-4d7d-bf15-2daeb03377ba", "indicator--0ed838e5-6e4d-4254-aad4-0a85d75e5369", "indicator--156fad28-928c-4759-880b-5f3cc338b575", "indicator--f57f71b0-7414-43fc-a5e3-bb97bb02761f", "indicator--0ccbf74b-4254-4958-acee-0d703839f907", "indicator--944635dd-1841-48c3-8ab7-4edcc0c05405", "indicator--82c15201-46c3-47c8-9136-5f21850e55c8", "indicator--14b0b3a9-bb94-4381-8121-e6389d703197", "indicator--1b4c7df4-5e9e-4a46-952f-b8dda27db4a9", "indicator--b063f399-89f3-4911-8d59-b0e00c28cc57", "indicator--6502ca1b-0c15-4566-9711-f33db7896664", "indicator--b931a73b-8e9f-45d2-ad30-5aff5f28f739", "indicator--9b0f634b-48d6-4d6f-8347-547b1544c986", "indicator--dea06608-a9ed-4c23-bb07-438accd5f307", "indicator--419159d6-822c-4fb0-bd43-494e103ad8d8", "indicator--22f39fe7-de6e-464a-9387-65a6c326573f", "indicator--c0495567-5405-4172-a1cb-e3af79788c01", "indicator--2f28310b-5819-4c61-88e5-04a0d87c89fd", "indicator--a6715c48-d7e0-4918-9dd2-f5cd4fb6081f", "indicator--8fb46ae3-e10b-41a8-8f0a-7c49f1e3fa20", "indicator--2194c4e1-7eba-4250-9c46-d392ac551e32", "indicator--736f69ec-78c4-44e1-910e-ad1def76ac0e", "indicator--aeb793b6-d866-4bed-be95-5cdbca0a1f85", "indicator--98076ce8-fd79-43e1-ad20-d7208feae235", "indicator--c3649722-1f55-47ef-b807-fa3ea0a1c5f1", "indicator--5265b609-aacb-406b-9f45-847cf442962b", "indicator--8fd203de-a8f1-4722-993d-03ba4ad465ca", "indicator--24c7bc0d-00a8-4d84-bfb0-b91d91df51bd", "indicator--1a4509ad-da4d-4ec2-a318-1fb6816a138b", "indicator--db07c0a9-f71a-4264-9312-0992c8cce35c", "indicator--50de4eb8-fa0f-44dd-b722-c2be4ea803cf", "indicator--011eaf91-c20e-418b-8374-01a2cde831e0", "indicator--18d0be57-24b6-4be9-84f5-1b20f2798c4d", "indicator--eda1d6ce-867b-4f03-8987-f1c8504ee81a", "indicator--92352c7f-aca7-43f9-9150-fd672c5d04f4", "indicator--e3a8c5af-fc9f-4436-a8b6-8cd950e0d3a8", "indicator--9f821f33-8566-4055-a187-b868a00a75eb", "indicator--bc9d6154-39a6-4c38-b7a8-8e87fe958a54", "indicator--c9b67e0f-4938-42c6-8acd-f5a5e3cf516e", "indicator--712e328b-41e9-42b0-b7ed-b5f46eb0f80c", "indicator--44fc5459-cf64-4489-a721-0df3f1444263", "indicator--c6c2860a-28e0-479d-8039-a0d04b115f68", "indicator--aca8bed8-45e1-42e7-82dd-a99a0355c3da", "indicator--cce00f38-52dd-427e-936d-0fd697362d67", "indicator--69ae5cf1-76b6-49db-85d3-3f5df87052f4", "indicator--26ad6cfd-2d80-4f54-bf30-31a37b8c95c8", "indicator--c94edbf0-10ab-469b-b8bd-5e3d96680fe2", "indicator--3849d4b3-c5cd-4315-b5cf-5a912dcedb8d", "indicator--1213fe1f-1b0e-4d45-a051-6849e00bc969", "indicator--912b10bb-084c-4ef8-837a-a090cc91222b", "indicator--3534912b-baa0-4462-878f-c85049f6b3ea", "indicator--78cef515-9043-4976-b8e8-c88f85c56fa0", "indicator--eee5d4eb-b84e-4d89-99aa-52724af4be98", "indicator--6d6c4b84-d2d3-434a-aa26-62fff8a1944b", "indicator--ad91c927-b0cd-4eb9-befb-bd43293bf71d", "indicator--dcd6d7bb-a0db-49c7-a2eb-dda68f7ce9ce", "indicator--5c6c9075-18f2-49f1-9a64-4aa1283436cd", "indicator--71d2bb06-1605-4e05-adac-5eeb392862d5", "indicator--9a5705ec-8744-4776-b95e-1b880a6a14f2", "indicator--5497f6a5-b684-410a-8d00-b0c3f8d04299", "indicator--d676d6ab-c034-443c-b671-a5ee38fc023c", "indicator--98f5ee69-4491-4892-ade4-7b168fe0a85e", "indicator--ae53894f-466a-4825-8b18-33ca7cf42fd2", "indicator--33e5ea55-4334-4b5f-bfea-a5b10bd85498", "indicator--b693bc2e-0e7e-4476-99da-ed50b060abd7", "indicator--7a6bdb4a-d4d4-49bd-b28f-187901c5eca9", "indicator--be73794e-5146-4036-845c-f2553a0e86a6", "indicator--bed5bf99-d9de-4a35-8f17-bfc8bf669cea", "indicator--70f3bb27-f0a3-4147-8e65-c3f987dd841e", "indicator--1139dc95-4c59-437f-9f66-09ebf5f8e6cd", "indicator--05e5b16b-858d-4dd2-918b-caa8122808d0", "indicator--ea65b09e-066a-4c3e-837a-68c7bbba7dcf", "indicator--ca7b6cff-f854-4871-8bc5-f72f2c17ed15", "indicator--2a7296af-3bae-4cfd-839c-ea9efdcafa29", "indicator--9945acf4-a266-4ae1-ab5d-62bb56c43f6c", "indicator--3a8f177f-a257-47d1-b0c1-068f35531295", "indicator--946a12b8-84bf-47ff-bdc5-e1c88cd0403c", "indicator--68dc44a6-50fd-4cfc-9049-1fe9833c031c", "indicator--e0d9f5a8-8fde-4e13-925a-8ef4a1bc389d", "indicator--d04de5dd-05c5-45f3-af1b-c2c1f5f3786b", "indicator--9258646c-5d14-4e06-bc2b-3ca8e1e6105a", "indicator--9303bcf7-0d2c-42b2-9d11-e719a0807626", "indicator--54c6c364-2575-4b5e-892d-c5a7db2a9616", "indicator--961674a6-994a-463c-8b6c-a8b769839901", "indicator--08d78893-f0f1-46cb-95ca-d2dc6d98cdd4", "indicator--a4b79ddb-ba65-4c3d-abdc-32b5c8794c0e", "indicator--a7c25465-00aa-44d3-9916-9d6c5d04b0c5", "indicator--f280d804-4343-405d-a194-d46827e7636a", "indicator--8a8abda7-73b0-4bd0-8bd9-eeed164b2ef8", "indicator--0eb183ba-5359-4d34-9478-0ad91c40381e", "indicator--baedd4fc-a1ec-4f66-876e-6bf1544f3ece", "indicator--480ed67e-9526-4a1c-888a-3e20699dfdf4", "indicator--534a25f9-8d90-490b-b652-46047854aaba", "indicator--ddf24d72-f8f5-4263-8389-5bc6b8e9cf75", "indicator--e7c1c679-3ec4-4e92-bd9a-5971ca4b9d43", "indicator--5bb07271-f035-4d4c-b0eb-332dce58e801", "indicator--e5703d50-9162-4d08-8c4f-0a96c4a2bad0", "indicator--ca61463b-13e3-4144-8560-88dcbcbae061", "indicator--edb8f14b-468c-43b3-bbac-1e348afee6c2", "indicator--de235216-ace1-482f-a9be-4d79c25c2f69", "indicator--4c60ec84-d111-4b8d-93b7-ac17de4df0cd", "indicator--276fd00c-fc51-49ec-a3b5-125a4bd0bfae", "indicator--397d6590-457e-4bb2-bcf0-3c8a8664589c", "indicator--624ffaa1-e8a0-4ab2-ae99-e9b12adbede3", "indicator--c7c64d5b-9051-4cfb-9799-d9064f27499e", "indicator--c53a6621-99b1-413f-9fe2-163592f08b38", "indicator--9ad23b7e-4c54-466a-89fe-a9fa341e837e", "indicator--0ce360dd-866b-4a0b-b36d-69cad85e59f1", "indicator--e2716d43-65ca-4940-bf00-7ba668892caf", "indicator--33f8a139-b741-4b6a-99e3-1ad65e0ff499", "indicator--a8d9fd96-809d-45ef-907f-5dad856edfc7", "indicator--fbf2b803-9bf2-4085-b940-5a40fd6f4655", "indicator--10a4e07a-e930-4408-bca3-b2c2b1fc6f9e", "indicator--9c8e5bf2-99e4-40c9-9c83-181533e5d527", "indicator--64bce589-7406-46db-aafc-f2933ffabb00", "indicator--180853ae-98b3-40d0-8540-c7096e59a58e", "indicator--5308dd47-878f-406c-ab7d-b0dc70fbdac5", "indicator--e04780fe-b1cd-41f9-b828-cafde443704f", "indicator--e81ddead-3095-42c4-9550-fa3627549a2a", "indicator--9fb7f124-e401-4078-8ed7-ed0865d80885", "indicator--92c5fa91-a5df-4f47-a569-968460d8df5f", "indicator--56900058-fe1e-4c54-82b7-13d1daf8c42c", "indicator--fc5189b4-0e89-40d6-9429-1f3196489913", "indicator--683f5fe1-1763-4103-bbad-3396d2d2ab6e", "indicator--5a9dfa80-8f95-49dc-8983-07eee72cb2a6", "indicator--fc82790a-1fda-4c4e-ad0e-eb7c4f8a06e6", "indicator--0bb16107-bf97-47e6-8495-cd8044571209", "indicator--fc6d842d-875f-42aa-beda-76b3883fc617", "indicator--dc70e6ae-dcb3-40a0-99a2-10b998378f6a", "indicator--be276e75-4d4f-48c9-b44b-9680b55318fd", "indicator--f7e18313-aeb1-4950-84f0-9cf5a40948bb", "indicator--3e22274c-f813-47af-a0db-aebfd0198452", "indicator--e6bb146f-73f5-4cd8-b9cc-891643b5e67e", "indicator--27f44cdf-555c-46d1-b012-6dcccf73adad", "indicator--1d40c609-e937-49ea-afea-b4d89c600ab7", "indicator--a79b677a-af68-4c08-866d-033a89742bfa", "indicator--1bb60192-7dcb-4138-ad57-24aed57eccb8", "indicator--0cf95698-b880-4201-9728-5394f1f993d1", "indicator--9fd0f15e-f540-4296-89ed-edc086b15c98", "indicator--714862d7-03aa-45e2-8bca-b69e5d3a9c19", "indicator--700b8906-97bd-4b0c-a53f-3e0ded209c9f", "indicator--62de84d9-8318-4064-9c0b-4378ac914ede", "indicator--6d8dbe79-5623-42f8-8204-e1210d6ac04a", "indicator--22de868b-0b2a-432a-90d3-ac7c3ec142ca", "indicator--eccb093e-017c-4438-99b4-a4ddab069666", "indicator--db1560b9-e6ed-4353-9c77-75ed25122007", "indicator--da0eb892-25a6-4ba8-b98b-41eb6a453772", "indicator--2b2af930-450c-4e5a-a666-5241b1d0f491", "indicator--3f3e180d-9193-46fd-9290-471a3764b001", "indicator--86ea1d3a-ec32-4193-8fa2-ff7774fc6275", "indicator--4eefbb58-21ce-4ae9-8964-1f7185b6e030", "indicator--ba4163cb-1169-4b7b-a527-1bc5d92fd065", "indicator--784a7873-5290-4731-9466-e3f16459509b", "indicator--d7f3e86b-6afc-42ac-bf34-5110f0f1169d", "indicator--4f23a3b9-f95b-40dd-974d-0d79fb7e8eef", "indicator--8f67d485-86a5-486a-a4ca-f18ee6049630", "indicator--061934b5-3bba-4c1c-8aaa-279a0b74e757", "indicator--04afa5d2-1f71-4a1c-a8f7-db66812032a1", "indicator--8eb2c0c0-2efa-43c9-af46-668fa711d338", "indicator--401be111-c7a0-46c3-b231-4c3039f30afc", "indicator--6ae44da2-28e4-4b59-a809-fe6d9b0a3a33", "indicator--14e135e9-e1c9-47fe-9823-efec4db89ada", "indicator--0290c0eb-0209-41bb-a55a-c208341395a4", "indicator--85a222d5-9fd7-4b98-8803-9249eabb2fc5", "indicator--311f3f3f-c08e-48bc-9873-2078d70e0bee", "indicator--96e551f2-a995-4e39-af0c-6e456384c6e1", "indicator--78e7a437-8b39-4065-a5b9-65aa75c09670", "indicator--64f01390-38d6-498d-908e-72f2977658a9", "indicator--02b54eb0-afb1-45dd-be8a-ddd1b2232b29", "indicator--f6464c04-61df-4ff0-a45f-c2dc41aaa66a", "indicator--0dcdc041-b271-44ae-9855-ba9172a57ca8", "indicator--1a71277c-7b17-4c63-b312-8924b7cef5f2", "indicator--b07ddd48-af65-4c53-a011-101f0e89f39c", "indicator--c3e21e1b-a1e7-45c6-98df-f9aa8611386a", "indicator--d4355b75-3a62-4a56-8595-5a026096c949", "indicator--0c2ed9d3-6a55-49e3-994d-ca2921191af4", "indicator--88bec482-0f27-40d8-9a56-df9aabe5ce81", "indicator--783d9cb5-783d-4752-927d-3de39d39cc59", "indicator--56dc8ba5-40d7-44e9-b907-b543c01837e5", "indicator--678fd1a6-98f0-47bc-a7df-b2742fecbcda", "indicator--d08744a3-d752-43ed-b440-b3944071d639", "indicator--ebb6f34b-4061-41e6-8035-caf94bdee718", "indicator--446b03ec-3db6-4a2e-8397-ae71b8c58e1f", "indicator--12aa68c0-e7a4-4459-80c0-e731f1863a94", "indicator--11ff3c02-86fe-4eac-a8a7-0cf5d61e8916", "indicator--38b81bb4-0718-4b7a-8b4f-e6ac0c4fff6f", "indicator--3a60626f-0e02-4650-bd4b-6e20ec30c007", "indicator--bc5bc2cd-15b8-4eac-844c-84f1af29b552", "indicator--135450cf-9019-4acd-991f-68e4ac1f7382", "indicator--53fa935d-e04b-488f-bb2b-bd06f0cf8218", "indicator--02c6e49b-868b-4a1a-82ee-a03e9a000aa0", "indicator--df0248ee-62f0-44cc-840d-991cd73f6a48", "indicator--ddc9168b-9a79-4d12-87b4-dff9a38692bd", "indicator--e2b6e070-4e51-4f12-bce4-5f701d201cad", "indicator--19e0a6b4-2bab-4f23-8684-c13721cfe36a", "indicator--772b1219-fb29-458a-8e10-c8ffc542e8dd", "indicator--f40e0a77-a56e-4ee3-8829-c989e5062db5", "indicator--4937d5d9-1292-458b-8227-413d2f2d95d6", "indicator--3f2d6543-4013-42dd-8bad-ef1bb3de42da", "indicator--4206d8a2-d24b-4e7f-9635-865f27d36994", "indicator--f03c2822-f2ae-4611-91e2-2c52c3bf1da8", "indicator--280f4e0e-467e-4251-82d0-89110985c508", "indicator--b3687031-ae92-402b-9d68-1d69dbac0cb6", "indicator--a6e6a4b2-2fcb-4372-a94e-47cdb4d8ed54", "indicator--459c9496-c9c2-4619-8440-1083eb909967", "indicator--e8ff867e-09ba-48de-b50e-0b98c2220f86", "indicator--74add943-dbe5-426c-ab1d-789d5738614e", "indicator--0e36f2a9-2dae-4bab-a0a3-fe02edc57f16", "indicator--c42ba9c1-5a28-452c-8b0c-eb6adfdbd1f7", "indicator--1b883921-d2bb-4a30-a3e7-4bade2522577", "indicator--51caec79-83a0-41bb-953c-e25797de009d", "indicator--68518494-ca9d-4b07-9d7c-2e49c263ee50", "indicator--be89650c-7541-45a2-b1b9-50dde1390f5d", "indicator--dd4e066a-2d09-4f80-8db9-0799adb01181", "relationship--74be8092-385b-4836-b541-5f67c380ec50", "relationship--59f33fa9-2642-4f54-beb4-bb777fba9178", "indicator--fd20783f-047b-4df7-90c8-8912727fcb11", "indicator--0d84c91d-12c5-465f-83cc-13fe2c431ca2", "indicator--7ecbddd9-1644-429e-8138-9d8538c5201b", "indicator--207e9b8d-e370-4b4a-9af8-54eaf7c859e2", "indicator--8e5f0fbe-1c2f-440b-990e-460bd438a443", "indicator--6eadc4bf-8885-44af-99b4-310186687694", "indicator--1c4644e2-e6ff-4dfd-91bb-225dfe2b7999", "indicator--5c131b40-4cd2-49fa-b882-d38a255427a5", "indicator--85449b0b-2700-4816-a54d-a484223f7adf", "indicator--f1e4d5af-74ef-4d63-8c5d-5c63d5a8e070", "indicator--61c79e32-0747-4654-9747-fcd9dae424c9", "indicator--3b99afda-68d7-4e4e-b9ec-b2b17f827744", "indicator--a5bbd4d9-20e3-4f37-9337-ded2b8d50db1", "indicator--d40ff18d-8664-4d92-a1e2-f6792dfd50d7", "indicator--01e53643-13fc-4a94-b582-7930703851ed", "indicator--fc0592dd-5e22-4bb4-b9c2-f5f2922d4b72", "indicator--9a5aabc9-dfb6-4432-a01d-b909ee6f2c1b", "indicator--ee052a09-f41b-425e-91c5-cf2725811c2d", "indicator--e0ba09b1-925d-4897-b455-15b1237978f7", "indicator--6bf6ec4c-cd1a-4385-82a0-c531b15e69ba", "indicator--a8f809ff-f760-40e6-bfd3-2adbfb530d8e", "indicator--efcd20e4-9382-4834-a522-33c1c7dfce73", "indicator--48e2466c-8825-4c35-94fd-1fabf2c36be7", "indicator--c783cdd5-8968-42ee-9353-5e2ff0497511", "indicator--b4ae9499-3c82-4fa9-b2d2-1299f9e93860", "indicator--ab0f2a32-66b4-4dbc-a945-4a2a4590bd4a", "indicator--f0874573-480a-41f2-974f-b880185353bf", "indicator--759c3aa7-a256-4dde-a61d-52fd9106f173", "indicator--15726adb-dc9b-4064-9a43-1f9a5d80ffcc", "indicator--d5904d55-821f-4dde-8bae-5129073effa2", "indicator--1efa6d1e-4938-4c23-85ca-fc954e4dc328", "indicator--11105907-aafd-40e7-8eb0-d3de8c756a07", "indicator--3952e177-5368-4fdc-a5f5-d777dd50d64d", "indicator--6dbd06b9-654e-4593-81f4-a9724ac0272c", "indicator--b808431a-12c0-4a70-a975-c51ff5454de4", "indicator--da50db6a-7160-4a74-a1b7-6ed6abbe3283", "indicator--3d30bbf9-6677-4775-b5fd-6defa771bd39", "indicator--9ef89e08-b2bf-4554-8bee-c0441adb5789", "indicator--4366d8ff-747b-4930-875b-56a00b33ea5f", "indicator--0eccbbf0-485e-4baa-872c-123932354a5d", "indicator--a66e63fa-3d4f-48b3-87c1-744820c4ad18", "indicator--fe868348-2abb-4b41-8a20-29e50568f01a", "indicator--cc00bf49-2d7d-440c-9516-21c5dd13c639", "indicator--c18f15f2-a2d2-408b-a445-8bdb644bab7d", "indicator--ceb6cb71-39b8-4514-b76e-3fdfc31f46ab", "indicator--ac0e4a54-9c45-439f-a029-e9ad61b65934", "indicator--cb215633-4303-4e9c-a725-a8d072966a64", "indicator--30c647e9-71c5-4599-8a7c-42d16d8993ff", "indicator--4b015ad8-5127-4a7a-a9b4-198899fdfe63", "indicator--900ce5a7-6713-4b94-abbc-81a75e28fc4d", "indicator--802060fa-49e7-48e6-8fab-2077c911dc82", "indicator--46d820d1-aa27-4c84-9596-9ebb3fc70efb", "indicator--75fa0b39-3c8a-463a-b923-b27cc29002bb", "indicator--fdec73f8-8ff8-4392-b596-78be2117e56f", "indicator--26bc6308-4b30-4d12-81d9-ac9b9c621769", "indicator--70403c6f-a4d3-447b-a0b2-895282e2866b", "indicator--5526dfa0-9dfb-445b-ac98-b5fccdf19f75", "indicator--8df536c5-966b-4842-a053-fcdff41ed45f", "indicator--12044589-6b9d-4e53-bf5a-488af2b8dddc", "indicator--09887105-9817-4ae9-8e01-4c6b9d29feff", "indicator--0511898d-0366-462f-b150-5194f268aea7", "indicator--eaff428e-881a-4d81-8bae-8cb9810c5008", "indicator--5d58fa4e-d7da-40ee-ba0d-acfc7fd47ebb", "indicator--d1414b30-545a-474a-a4dc-f49aa99fc047", "indicator--27bb736d-7547-4681-a1f1-45aeaac8b421", "indicator--3c064193-b5e9-48c2-926c-ff864473e454", "indicator--32b516c0-c380-4793-a910-1f250bd5571f", "indicator--ee83a4fd-0520-40bc-9078-e6f24fd2a71d", "indicator--8b1478e2-6bec-42da-870c-c69dd6ea4de3", "indicator--717fd9db-7ed2-4019-b3a0-70c1c635f18f", "indicator--2ce32515-17a1-434a-8b71-b035d4aadfa9", "indicator--8ed3d9de-2eb2-4785-9dfb-dc1a8278c196", "indicator--fc65a92d-08f1-4605-9e02-5ba0f53d9f79", "indicator--25190df7-c543-43e1-bb1b-6bb0be591c44", "indicator--066767fe-a9bc-4def-abeb-6d0af336b623", "indicator--f76d42f2-2ff8-4334-8da0-43b3223c5971", "indicator--466f7854-0985-4e8f-bfcb-be0434d5adaa", "indicator--86e4d208-74bc-457a-9ea9-74c7f14e33c3", "indicator--1e05cdb3-a0fc-4cbf-aada-24c27080a977", "indicator--e18f6ad0-c045-4188-8970-224cca4a98fd", "indicator--79b7ca2c-5ca3-4a51-b972-d60400d54e6a", "indicator--6d5e8cab-a2b8-4b0b-b8e5-dfaef7eb79df", "indicator--5e8b0146-1cd6-4224-ad17-1ff1de679164", "indicator--c0fbaeea-1360-4fe0-9e22-8f49407185b2", "indicator--332b5cab-bb12-4eee-b252-eb04d9247a98", "indicator--74838ebe-1e6e-4379-8b72-29f5bfe54488", "indicator--599bb8ef-7852-4bd7-b7a7-cfbae5ab846b", "indicator--388cc03f-5cad-4401-9f45-9949f81b17a8", "indicator--45d8a98b-79a6-4a55-b658-370e31b75ab5", "indicator--64398940-a020-4777-8fbf-f5aeb40e372c", "indicator--622cf296-c58f-480c-968f-26807f2d8e1c", "indicator--855fa69f-9a41-4dd6-97c2-264b0e132039", "indicator--e21e3ca5-cc1a-42f5-8ed1-b8deba49a69f", "indicator--9471707b-78a8-441d-80e0-7d0fe051e4bc", "indicator--ded52bb5-6256-49ac-b7cb-2e7d9272b001", "indicator--51f0b82d-6ca8-4695-b35d-b475a1a1cbd7", "indicator--167efef1-d865-4249-a3fb-79a03b779dce", "indicator--f2a1a94d-0aa1-4cf8-a775-db80a4d3fa87", "indicator--4b8f1a8c-8ebf-4907-915d-2ec1455e4789", "indicator--fdb86ff9-e415-4998-bca6-22497993f0e1", "indicator--2ceeaf15-334c-4ac0-a1ab-a2213960f4e2", "indicator--438428ef-52c1-4e31-9612-bbb3908ef103", "indicator--42be0cbf-6ebc-46da-b202-da79d5accc4b", "indicator--9ab5bc12-b0af-43c9-af21-0fb51f92f8c7", "indicator--b0ca16f7-5b03-4a3d-93b2-98c0d7b1bf28", "indicator--7b7ba10e-a676-4361-9f13-fa60482f76da", "indicator--eb38bedc-7ea5-4e03-a952-d53a71b48c39", "indicator--f05945c1-8cca-410c-ba1d-79411a6434fd", "indicator--30f9335f-1ac0-4498-8c22-99a1496eb85a", "indicator--c0e6296d-d7f5-4a09-b9a9-138172aea3a5", "indicator--53c5f7c8-a358-47da-b42d-1fbb2f5221ab", "indicator--b64fbd55-a9fb-4c41-92d1-4b7aed4fdc82", "indicator--91d4349d-a2cc-4aef-ba51-0c8f4c1343b8", "indicator--3e60f83a-738b-4e7a-a2c0-73f3ecfeee2b", "indicator--75fbe642-92e6-47f9-9529-2da0cbbbd427", "indicator--ec2bd5ec-ace6-43d8-8c89-952af5dbcfe3", "indicator--39dca561-950e-457c-895e-905a702c44dc", "indicator--0ff95352-fb11-4071-809e-addb8a578898", "indicator--16acafcb-03cb-4e9b-95d4-b20e1cc4f3ed", "indicator--1d10f932-ba1b-4dee-bd3a-e80bd2a2bf06", "indicator--f6ad158b-3dbb-43b5-a169-1710e8ebddd9", "indicator--fdcb43f2-50bd-4b84-906b-a3259de44551", "indicator--be73137a-5ed9-4578-9de1-d67611b02404", "indicator--c12fbce7-abf0-4a22-ae98-e42f9f6d85d4", "indicator--c42b8259-64a3-42ca-be8a-24e9ad11c04e", "indicator--e921d116-f57b-49e7-8962-5895aded9f48", "indicator--8fa7370e-2b83-46c0-9639-cab68418e31a", "indicator--fe363a66-b4b8-48ca-802f-e1d86019c436", "indicator--d3f0ee61-06b8-4882-9d66-517bdb2662b9", "indicator--d85712d4-8282-4f9f-a4d9-65d10113f3bc", "indicator--a3ec8821-ef87-412d-9e7f-3cf72dd1f882", "indicator--0596e3b9-d73b-44ea-9beb-b4d1db6388ce", "indicator--056fbda0-aea3-4142-bc4a-b783fc59155c", "indicator--744be07e-a9f7-49f9-a671-832de827a672", "indicator--2c416e34-42b7-45c7-9b6b-1ad0b9a060f7", "indicator--2c08c6d3-ce9d-4326-8bef-b37032d0155b", "indicator--520c757b-f843-490a-ae40-a416cdc54577", "indicator--53ca366e-afc3-4582-955a-98050f97fd99", "indicator--1daa91ab-2d0d-47a8-8097-b43d5b0335a1", "indicator--686e8439-0136-40e8-a173-87af6b7174af", "indicator--7d5a4760-9f41-49f0-af37-88b5d8fe5ee0", "indicator--1b02d3e2-4f44-42f4-8937-5682e99dcdc8", "indicator--f6d0c533-a8da-4da5-982e-26dc5bb9f1fe", "indicator--1e0ea051-23a6-4638-bd8f-aad426fd9c2d", "indicator--1daeb283-37f0-46fc-8f8b-b6a2f19ee8e8", "indicator--7f097e61-5727-4c58-bb6a-5a1804f8caf5", "indicator--c30c81c0-5080-44d3-b629-27b6ae95144e", "indicator--67f32e64-0e23-4e01-a884-ed484d51963d", "indicator--ae53fb1d-3e7b-4f4b-b116-9a1bd942e180", "indicator--07293d9d-eff3-4203-91ec-14d9627b8110", "indicator--3cfc2896-3c6a-4ef9-a781-c8b55463ec46", "indicator--970367ea-2d84-4ff1-925c-ed31a84d3a78", "indicator--c1d07b4e-5909-42c8-bb5a-555f48819855", "indicator--fad801fb-db77-48c3-9970-60482e6f2147", "indicator--bfaeadbe-8991-4315-8adc-228ccf7193da", "indicator--cd65cba9-48b4-4ed0-bf32-06129857598f", "indicator--1de29ef0-8834-47c0-8512-dd87619a4f8b", "indicator--8ef9533f-1e7b-4de2-ad67-43d09e83c05b", "indicator--62726b13-b1e7-49c5-b26b-b9f5c3c26d4e", "indicator--5465052c-3214-4f7f-b519-0be9224cb422", "indicator--d45933ab-4e9c-47a7-9415-c667522742d4", "indicator--2220f0e9-62ef-4026-bbb6-7e7dfdc15a99", "indicator--8bbcf531-b8b3-497b-8272-5da2cc056532", "indicator--e86888ae-2465-4ddb-aa82-d134933dbdb1", "indicator--1789286b-4339-45f5-aaf8-e9b8574a04c2", "indicator--cd9178d7-d5df-4f9c-9b3d-39f9d4235919", "indicator--c130fe0c-1672-4f8c-8fa6-1df429f24b9c", "indicator--15ec2bd1-499c-433f-974c-bdd1f8d911ce", "indicator--7bd330dd-11e1-461f-919b-ccc1430a31b9", "indicator--3b753065-1cb3-4101-8895-15244b946cba", "indicator--cf8cc1af-0e4f-4629-8994-9eca6eb9184e", "indicator--204d2429-a0d9-408c-b0a1-49a6f28d8942", "indicator--94a6349a-81e1-4b9f-a77c-97032f4f84f6", "indicator--b67cfd33-0ab6-4dde-92e9-8ab1f4612aa0", "indicator--6ad2db36-25f7-4724-80f1-f1f9352bf365", "indicator--3872a690-d42d-4062-9532-652293f151f3", "indicator--b75634b1-eeff-465e-ae77-a75d268e289d", "indicator--dfccea4d-571f-4518-9e75-d301c940e12a", "indicator--d8bc4c17-158a-4352-82c3-516a6733d7f8", "indicator--c3359f83-f6a0-4354-acbc-baee5c024a6c", "indicator--af145065-cc67-4e72-8e91-fe14bf585c1d", "indicator--81e2a006-0861-408e-802a-a0d4cc9c8d9d", "indicator--5d0cd0e2-63aa-435f-8cc7-cb66e123a577", "indicator--a7629c6e-4d4f-4435-9bd0-1103c0e0589f", "indicator--513d30db-9856-4751-b3a5-309029f0e40b", "indicator--e70d42bc-8581-4699-8cc3-7670825f703d", "indicator--7dc62d22-cc17-4ae7-bca8-8a1e7bb5601c", "indicator--86135773-7728-4d9f-bf74-5b423f9a07a3", "indicator--bb6ed15f-5de7-4c7f-a879-acec2a753b9e", "indicator--387dba66-13c2-4ba3-b03a-2b9e59dfff2e", "indicator--3a5204b8-0e5e-47b0-aa2c-505d5cb72444", "indicator--93cda032-d093-40b7-b68e-6ee5faf0083a", "indicator--b3b63e10-1fe0-4666-a6d4-9a6c56bc67ac", "indicator--16e6c0e1-ff5b-4e81-adfb-27f0181a9de4", "indicator--2515beb4-cb71-461b-b199-f1efbefd57c4", "indicator--6a833a7d-592b-4d09-bf5a-0d3a06c931b0", "indicator--ae2c2ad0-64a1-4fa5-ae9d-2f7529011d83", "indicator--b01d0bba-a7f4-4611-b53c-48a5c09f40bb", "indicator--10838f84-6845-40af-8a49-d8fe80f5a82b", "indicator--1da69b98-f3f4-480a-8cfc-f5253e343366", "indicator--cacf82b0-9ee0-49b3-9559-beb424f6ea40", "indicator--cce4239e-9351-44c7-ae34-050d01a484dc", "indicator--3d2f9e8e-d809-4be6-a1e7-a05383c753df", "indicator--655f7f7d-f7af-4430-bc81-067643e57ce3", "indicator--ca8cdb2d-5a2f-4852-a176-32a78550811b", "indicator--ae4d7010-1252-4dd2-9f9c-c83b2507e0b1", "indicator--4f83d895-3422-4df8-ad79-fed14c92a91a", "indicator--483d84b2-f6ea-4aec-9e92-be6477ac1ce0", "indicator--4a8ab530-a602-4f00-a738-88eb40902133", "indicator--31ec3aa7-e8ae-45b6-9642-66b30e05c9c4", "indicator--6c6e3b6a-e46e-4397-9c96-ef9beed1e2c8", "indicator--ce6f07d7-d9b0-42ae-9a23-a3cf15e9b208", "indicator--3581789b-fef6-4196-8d7a-2a49ee3caa33", "indicator--784267b6-6f58-45a4-9a5c-55c24506c7fd", "indicator--06126c52-bc04-4495-9a8f-94488130468b", "indicator--6fab956a-9a2a-4c10-8ac4-7ba915dbae51", "indicator--98b2fcf5-bff3-4d77-9c82-1ae3760cb6a1", "indicator--d290eced-5b14-4da6-81f8-1755f2dd1176", "indicator--b97c57cc-f469-4305-9ffa-e7b0e2bb3c23", "indicator--fae67d56-6bf6-449b-8dbe-d12f51534544", "indicator--b24ec068-f24d-4842-aae8-1854df11e932", "indicator--5696bc17-2075-4b73-beaa-438acb55a793", "indicator--a67dc0e1-3b19-4bd2-a732-bc32b7bc8031", "indicator--4883d347-8c9a-46bd-80df-bb27568cab21", "indicator--bce5345a-bff0-49ee-ae10-a5850208d1d6", "indicator--f251e2d4-ddcb-4902-bd70-7ec690a3dacc", "indicator--41d21194-899a-4ab6-bb9b-99e1fdbb1f35", "indicator--faba924e-2bd1-47da-95c6-9075e8f53bea", "indicator--fd1ae015-262c-4c64-838c-af2841b31d13", "indicator--0d32e68d-5ffd-4f8d-82f0-08252cd8fb6c", "indicator--1935faed-d9d2-414d-a1e9-55d43ad77cf4", "indicator--02f09ddc-cc97-45ed-8a79-4b183a3acd96", "indicator--4b83cf95-231c-4543-b79b-64ed39d0d07d", "indicator--21739bd5-2dff-4ae1-a069-4c76d8b85f23", "indicator--0778c977-d355-44f4-827c-bc9ca9f28ce0", "indicator--a98da5b5-bd48-423b-a13f-336d77617c05", "indicator--a966a40a-c57f-4c1b-bcdc-da97e12cd06c", "indicator--b401cb50-c8fc-4440-96e4-e7e43061ba02", "indicator--063b48c8-feb8-4d29-999d-d5de62efe4e6", "indicator--fa8e74f8-9659-475b-9462-6e72269867e1", "indicator--ca79406e-cc04-46e0-b5cc-8b480dcc1e68", "indicator--833e8e4c-d683-401a-8e74-af0f932c45c2", "indicator--a8e368bb-b718-4e72-91a2-e27585f136b8", "indicator--daceb47e-e468-4efd-9c13-7cc243510a56", "indicator--10193583-a37c-46ee-b0ab-2048f22562cb", "indicator--cc174199-df7d-448c-83eb-d5b5dccdd55f", "indicator--11245326-0418-4cb3-b792-8554ac707970", "indicator--19318d78-931a-429b-8160-9e2cd98206cb", "indicator--1484c8b5-ab2f-48f1-b5b6-8e1a3aa73dd2", "indicator--b0cbde97-dfb2-4308-bbc0-2a55a3164c48", "indicator--253a15a2-d943-469b-9933-568fc365ebd8", "indicator--03dabbc7-1268-4c8f-b992-8737db490087", "indicator--adfa6285-c1c7-473f-95da-d8c8289c7238", "indicator--2b21b340-89f3-4670-8436-4a20fa64ea01", "indicator--8f9c77c9-95cb-4c49-b0d6-bdc56e7f483b", "indicator--a0b62dfd-7d27-424c-a9e3-2adb1bd23f1c", "indicator--9916eae3-9f38-41d1-abbe-39923be2ffa9", "indicator--54f7c434-e79d-45c3-a90a-f21548332285", "indicator--a0b0a895-dbc8-45cc-be84-e193e917b8d2", "indicator--5a4d8bf7-a774-45ab-80fd-3c66d04cb313", "indicator--963d8f5c-9537-4b69-8206-089dc525f63f", "indicator--83225378-e4ca-4a2c-85a8-3ce6107cf544", "indicator--3e2cf61a-a2fa-432b-b6d4-1dec4c6c6501", "indicator--2869d0ea-75f9-40ee-bdb2-444becaccf95", "indicator--e0e33703-a33b-47f9-bc09-26ba4a042564", "indicator--4bf4bc8f-9cd9-4ca9-993a-c64b45691f6d", "indicator--8281f172-c23a-4051-9788-71b251063527", "indicator--2d5be269-df55-4459-865e-d4155058748a", "indicator--adace7f8-2adb-4189-ba40-803714a4ccf1", "indicator--1dec5136-adc2-49d9-bbb8-9b6ffc930dd1", "indicator--c82527a0-ac4d-4533-9e92-4aa931dbe62e", "indicator--e0abf440-4691-4f8b-b173-19e0c381c2fe", "indicator--8f6a8ea7-c0e3-48f6-879e-ad990d922cc3", "indicator--177be103-39f7-4d4c-9e18-88e2b46a43c6", "indicator--c32d7863-5b73-4499-911e-3c80a98c20cb", "indicator--d04f1a7f-617d-4c96-b75e-76bfefacfc60", "indicator--1cf51f86-871e-46ab-bbeb-6e2607711440", "indicator--1a8e047e-bc15-4450-816b-f8cd8071442e", "indicator--c2e906a1-98f5-4bc0-9aa3-6644f5fa2d1f", "indicator--e8297780-ec65-4b35-b2b2-f3b337d244f9", "indicator--15d0768f-b6ba-46a5-8ae0-8587a905ee10", "indicator--040e100e-801a-457f-9d09-7f444fde55ca", "indicator--9218937f-2359-4b4c-b41a-cbab9eab89b6", "indicator--e1c3269f-2089-4f29-bc18-20d0a2e2d7fc", "indicator--64d63a93-c39e-4239-a45f-39ddcfebcf98", "indicator--d9ecc703-200f-46d8-b89a-33c9f68aadd0", "indicator--c703155b-0dfc-4c20-8afb-ae3548a36fa6", "indicator--31da962b-7984-4ebd-9eee-bf2e243c740d", "indicator--bbcbf710-6c94-45bc-9237-223b73364c2d", "indicator--0e709414-9cde-4d57-8947-a66de718a7a4", "indicator--4a2a0b66-8683-4fda-8873-1ac560d1813f", "indicator--b6ac1485-7831-46c8-955e-06ce30a73d48", "indicator--a719ab6d-3a6c-4950-a3e6-66b9197a3870", "indicator--a7c41fad-ced2-4ca4-96f7-25efd038bac3", "indicator--9bff4a5b-0377-4540-8d46-995b304e9b03", "indicator--b4b1ba7f-5d7a-4aaf-bcb2-7c23dc2f68af", "indicator--f54d133f-9de3-4087-968e-f405bf321376", "indicator--f80a4124-90d3-4079-ac84-7bd7d68b61d9", "indicator--b5972856-7dbe-4052-a239-246d91e85e7c", "indicator--80fd68bb-6455-418e-8128-75c1a5e3f791", "indicator--6d1e9049-4783-44c3-99a4-633c229032fc", "indicator--6f0c7577-eb71-4d45-bd32-4512b8e41c82", "indicator--be680a0f-76a0-482e-8b12-a82ec3018a0d", "indicator--2fb1338b-8850-4f6d-864c-edc6a0e6f480", "indicator--27375ef0-a4f6-4dff-9f2d-e32849c07450", "indicator--5bfb00de-5370-41b6-8c12-a75d8885869c", "indicator--e3be2b4c-4cbd-4fab-a630-5e806e0950eb", "indicator--ea2523cf-199a-42c1-af7f-aedf7892c54d", "indicator--8a083bf6-fd75-453d-bbcd-9f311d79d18d", "indicator--5fc82b39-2330-4eb5-b9f9-6afae1dcdc34", "indicator--2df57aa9-4095-4cef-86e0-968fc7532881", "indicator--9de88491-85a5-4355-b6de-54d2c02fb2a1", "indicator--9f2eceba-e429-4735-88ff-06eae47be4fb", "indicator--a924c442-9236-4856-976f-41801890e7e7", "indicator--038aafc9-04dc-4c8e-9923-1eb8fffd35d9", "indicator--a43405ad-3e0a-47ee-bcf9-094faeed5cfd", "indicator--343f185f-db77-4cf0-9425-6a25f861cccf", "indicator--e7378069-1a75-4804-a935-899c77509690", "indicator--4ddd2fdf-4043-4e02-baa5-5ab145539e9c", "indicator--ec32ec84-e850-40d0-b74e-d4604c54f225", "indicator--11abc5e1-babb-47ce-a6b8-332669a60e0f", "indicator--11ce45f1-7489-4bd3-9973-1026e702a47c", "indicator--900feb18-aa77-4ddf-9fa6-106f1d32efaa", "indicator--3cadb873-5332-4ff9-a46b-f07a3b62bf59", "indicator--1a835f05-6707-4d80-b1ba-c599686b6fbc", "indicator--6635d427-3c8f-4e22-a6c7-0cab41b1dd3a", "indicator--d854a641-5ad4-4e4c-ad12-c4a7f7ac79df", "indicator--c8886f13-b701-4606-8e23-57f4a07c2da6", "indicator--ae4470af-102f-4a49-95c2-dd73a25398c8", "indicator--e01c20d0-9145-42e8-a1dc-648a7db756d3", "indicator--7c0a4692-073f-4956-b68d-241e676c4c52", "indicator--57cdf5d2-549e-43ec-b991-e4391dea8c2c", "indicator--cbc8a054-f60c-4ae1-9cfa-14c530881905", "indicator--8446aa29-7508-4c04-b941-203801214a5c", "indicator--85670e1f-ab44-441b-b08f-b9fd5aae49eb", "indicator--96e76fc9-52ef-435d-a029-598f6746b613", "indicator--eea7497c-6015-4421-a787-2e1cd951fe55", "indicator--4bc03396-c152-417d-ac5f-c43a715d67d2", "indicator--7123a5f4-2bd6-4923-aaea-549d94656358", "indicator--43c87245-b93f-4341-9f4d-f8c47a1cebc9", "indicator--2acc61a1-c45e-4022-b590-5873b3421eac", "indicator--a8593cea-52ef-481c-a159-97cfd14bdfed", "indicator--8131fe73-54db-4e16-81e0-751893b7dfbb", "indicator--e4fd3a32-a023-4e7f-b2ac-76fd6b6ed979", "indicator--b22ece8d-1cb3-4c9b-946b-fdd593688004", "indicator--d01f2f73-7ee5-4252-90a1-6bc45f74439d", "indicator--e6529d17-e7ac-45f3-bd66-b5faf9cc85e9", "indicator--57226095-583f-4e50-bda5-be301c0f9a20", "indicator--81efe0bd-0a5e-487c-9e15-56a63e27c581", "indicator--4a02570c-834d-468c-b1e9-c37cb6d97ed8", "indicator--5b6c3183-d0c7-4f89-8ce1-bc9430f960a1", "indicator--1ddb5009-ab47-499f-af85-4045cdecabff", "indicator--8176b7ec-86a1-47c4-86c3-ef8830233bb3", "indicator--b660d390-a833-4ebc-a4b8-cd0b5eddcbfa", "indicator--870901b3-7b6c-4fd7-8893-38d9a9debae8", "indicator--bd7bf87e-58b6-421f-bd58-ed7957b7de0f", "indicator--d0acad76-dee2-448c-9296-450001c91b43", "indicator--ce327085-910d-49de-8f1b-113d3d9e7ba9", "indicator--6e65cfd9-1f54-4fc1-8d3c-b202a28df8ac", "indicator--1b0f10a7-5a71-4bf7-99c1-9cae1c4da4b7", "indicator--dccd52a8-aabb-4abe-a85a-2bd741a7fa2c", "indicator--d569f179-90d6-4353-ac45-3772779b8e0f", "indicator--05f39111-05f6-4369-84e4-0456d28e479a", "indicator--01df232d-632b-4adb-882f-b778472bc3de", "indicator--ff70c565-e952-406f-9c75-e8498193287c", "indicator--b47a354e-f79a-4ca8-bff3-17295420eced", "indicator--ddd506a7-3124-496a-9f1a-9dfd2e1eb36a", "indicator--0f2a56ba-1ec8-4501-815e-185cd85d160b", "indicator--a1f808c2-5b7a-42fe-9c1d-8feb7e937f03", "indicator--c587d6fc-b3e1-4e41-8d54-182fa4a6f9fb", "indicator--da3006dc-a46a-49c9-a0eb-56f2148e8d5e", "indicator--669d3fac-48f6-4074-85ff-8d7e248ec177", "indicator--cf4af703-2cb6-46dc-926c-038828e2eaa6", "indicator--144baa85-4db4-4c96-8d6d-55fb72bcb850", "indicator--428af4c6-3d9e-44ff-b985-be40990366fd", "indicator--4c6d804e-5892-47f3-bb36-0302286c1967", "indicator--c1856848-41ad-4b26-b2f6-8bb3a73c5271", "indicator--99390ffb-4728-4a0a-b22f-5df6d720ec92", "indicator--99686459-98d6-4bd7-8912-5cd396cfca73", "indicator--d4f4a94e-5a5f-496f-aa32-edbc56e279a3", "indicator--66588357-5187-4335-a172-cebf74614d9d", "indicator--7208a808-0896-40ff-92fe-7b5e7fd8b894", "indicator--ed9e3b5c-9ac5-4c4e-bfa9-f009ffc8da15", "indicator--bbac4e5d-b7f7-451c-9341-b8fb8c0a3cd8", "indicator--980c1c86-7032-4c5a-ad5c-69b4bf7b1b8d", "indicator--99210fcd-b1c7-4f4f-aadb-eb31e4b332de", "indicator--05f297df-c935-4fb7-911b-7238b4047ba9", "indicator--70ebc76f-9f60-4b33-aad1-f158c673b049", "indicator--596676dd-063e-434e-9102-4f340f6ac46d", "indicator--872478af-4315-4cac-8ca6-d92cff356256", "indicator--9373183d-3af0-4ef0-8004-2ef09f53d0fb", "indicator--bf634e71-11d2-49e6-9be4-2064da90940a", "indicator--f37c2f2d-03ea-4207-ad03-189e7c4b7950", "indicator--2591b6f2-b27c-46b8-b5ef-3f81bfdde07f", "indicator--cf3d7cc5-67f5-4d08-8752-96e95fb0904d", "indicator--a506dbf2-96fe-4354-9048-3ce9c1c784cb", "indicator--49327bd4-8a70-41ea-9e58-226a2ee4c073", "indicator--7b6ccd04-f5bd-438c-b060-31548a5a5b62", "indicator--f5e6e57e-230a-435e-af7c-4f7a76d6b865", "indicator--18cfe3d1-db9e-431d-a18e-8cc8fe65db2a", "indicator--69655fc1-9ae0-4462-8aa4-8f7eaa8a33f8", "indicator--fae6468c-f7ea-4ac6-a35c-e9712007387f", "indicator--b18f0ef5-f11e-4c0a-b4e6-c29227b6dd4d", "indicator--f2431c9a-85b5-4fbf-a2ac-c9332cd283f2", "indicator--69098de2-278c-4871-8c08-77387f849dcf", "indicator--e331f660-e3c5-4a4a-b3ee-e740c0577600", "indicator--263eb75f-4dda-4ef9-bbff-3a31a5d6b344", "indicator--edf1664f-bb51-42c5-bf75-e26997676081", "indicator--76bd2f96-a4fb-43b8-baae-9025b0f374b3", "indicator--c4a8cf84-0499-42e8-b45a-fef4b8044c61", "indicator--d1d98f33-05af-45ba-b9aa-f1d73a189e04", "indicator--3215e635-0cf1-4e1a-9511-ef9c591ac959", "indicator--e9419437-f890-4b39-b1b4-776db7c5afb5", "indicator--21a41ba9-05d8-4ee3-94a1-4540c068c0be", "indicator--01c24c39-70d6-4cd9-a276-2bc089907956", "indicator--7d54fa66-36bf-44a7-a2bc-9e17a8ea8f1e", "indicator--299334de-4dbb-47bc-bdc0-91e320f9d94c", "indicator--a4c37f0d-43b6-4afc-b996-e96ffe43b781", "indicator--fb46043e-7d89-4354-a716-cb04b99e6f17", "indicator--25835de9-e3f5-415e-8b68-ffe0f94bffe0", "indicator--0b706f69-513f-4789-bf90-86a333736811", "indicator--3c2a9f9f-f21a-4d79-9d10-6d2745b351ca", "indicator--a6d22f60-96a0-45b4-91b0-5d148f114e81", "indicator--62e3d0f9-a3a4-45a2-89be-6031c824ff9b", "indicator--567b39ad-1863-4248-862d-d2824ed66150", "indicator--5969e5dc-e0c8-414c-a49a-1808dddd5617", "indicator--f5714c0b-d794-4aaf-949b-cbdedc8f3abc", "indicator--1fff170b-df24-400e-8d8f-2db615eb4402", "indicator--8ea77b3d-cd7c-4baf-a5be-163f485575e5", "indicator--1169429b-569c-4535-911f-e5fa1ad5abdf", "indicator--65f2f49f-a50f-4e15-afdf-4a27a251b024", "indicator--6a325a54-108c-47ad-bf92-9055b4fc06be", "indicator--aa35575d-09db-472e-b9a9-8092a71174af", "relationship--0397cfcd-3f29-44ce-8da5-1ea0c98f1a32", "relationship--8e294c42-8aa0-48a2-92a3-fe8cc5d300fd", "relationship--1cf0c863-6adf-49bb-8b18-fb05a24f2813", "indicator--28de867f-5b61-4a68-9bdd-8d110c80aae6", "indicator--f5d81562-ea3d-4f79-8721-13855f005d85", "indicator--85da2c7f-8b65-4df3-80a1-dbfd2cc74add", "indicator--07aa7eb2-3cb7-4d08-a2f4-c36b64ef62c3", "indicator--b25ab6b3-e554-4187-9d86-f7e22d554a5e", "indicator--042c3ccf-eed7-40d1-b462-87a79fe5155d", "indicator--0f7344ab-e481-40a0-9ce4-ae1d6ac7f2fa", "indicator--abbd607b-cff5-4957-ad02-09aa5316eeed", "indicator--568290cf-1fb0-4d73-b388-c07e53e10cd1", "indicator--c0543166-38ee-40ba-8fe8-97c842fd2424", "indicator--d62a1b37-7cc8-418d-ad68-da994a0461be", "indicator--1ea753b8-4d4d-44d6-8cf1-618b9e24babe", "indicator--df8f75b7-564c-4b7f-bfd4-8a49eddc76a5", "indicator--d262410d-179c-4b8a-98bf-5b90766896fa", "indicator--4c92ffce-0c91-40a2-989e-e10804a6ef98", "indicator--4a56fca5-7ebb-4370-be4f-89d625b79b5c", "indicator--f5a016ba-83f8-4585-bcc7-1fe6941fa38a", "indicator--fc4feb1d-9e1d-4641-9c77-eb41defbae12", "indicator--1a1fcc61-e493-46b7-a308-7aa61d15029b", "indicator--c53d0f69-0b70-4dc6-9812-92faa11348cd", "indicator--da91a3c4-2c5a-4e50-bbec-d3160c2333fe", "indicator--030f1143-cfe5-46ce-97ae-af282a1dd4b9", "indicator--2956c4c8-1dc2-44b5-a289-53658b1d4a76", "indicator--b50025b3-0392-4b0c-8d71-57b3316fc718", "indicator--086389bf-83ce-4d06-89ca-7c098a1fb4b8", "indicator--13358c9c-54af-4ba1-8f6d-0099af353607", "indicator--aedf697b-e048-4376-9696-ab9c7e9c87d9", "indicator--15bc5fbb-6555-4acb-a2c2-0eb8eb55195f", "indicator--7e968078-b839-4297-9e0a-008627cc8eed", "indicator--235b15f3-d145-438c-b884-5b73d1fa7d74", "indicator--e2462003-d5c5-4763-a331-80e67cea69e6", "indicator--12118268-e286-4217-b8f8-c31cd5501601", "indicator--b158e65e-c3de-47a8-b3cb-2df09d0ebfcc", "indicator--360e21a2-dbb9-4c57-bf2a-a2fd64cc525f", "indicator--67f63287-0674-4bd5-8127-b45a87f17c4c", "indicator--7cae0e4d-6789-47f1-ae9b-678cc5450870", "indicator--78ee4442-f52f-4c30-b99c-b54bf299f46d", "indicator--81c81207-f714-4835-90fb-a24c12351976", "indicator--30e01069-c268-41cd-bcaf-487620f7d67e", "indicator--3fb75a55-7803-48b0-8864-c606b6ad92a5", "indicator--f5c2a8cf-a81f-436a-a81a-43c8a812646c", "indicator--2a78bf86-55e1-42f5-adb7-95cdfba38688", "indicator--934786bf-b645-4e63-85ee-9cac2b7bbf1c", "indicator--948f8636-cfec-4537-aa29-8c6c493079bc", "indicator--4f0c115c-76cf-4aec-8adc-864f29b338b1", "indicator--04769355-3c18-4f62-a9d2-801098a6424e", "indicator--b0917712-e829-4b1c-a992-118be9b94d54", "indicator--4a2a8f90-6f2f-4692-bf6e-bca0b092ce1a", "indicator--2cc2f798-6117-4726-a8cd-99a1efe01422", "indicator--f7ed50e5-bfab-49be-bafc-6e7c03f025a1", "indicator--4d2b6e35-1952-45e3-bcdc-113d2d11e680", "indicator--bcb14b9e-a8cd-4aca-8589-87c804d49bd2", "indicator--77e4b12a-e31a-4719-9a9d-dd0160eff6de", "indicator--340ec146-bb0c-4bbf-be53-d62f10d7ef41", "indicator--b2d3ad40-fe1e-4367-8da3-147ffb6a4eb0", "indicator--62e44006-4739-4e24-ae2c-268f2f764274", "indicator--b0e26f83-50ec-416c-a3b3-7d3aebf1e478", "indicator--3c9b0c98-079c-45a8-a088-5e1d5c913de7", "indicator--f90b2e86-9ee0-4c2a-9c85-8c0f9b18aa9c", "indicator--4f66c90e-7eff-4795-b8f4-e1877345f8ea", "indicator--34c203c9-fbde-4aa5-b004-fa7804a2c59a", "indicator--8c5c6bc4-4a1d-41e0-a842-4689d4ac4c50", "indicator--3a169101-b279-417b-8ce2-c2cdfe03a14c", "indicator--273ede32-0e5b-431a-a870-955325bfb5f6", "indicator--881073b0-609c-4e41-b8f4-b9681c004476", "indicator--dcfd13dd-42c1-45ed-8d99-b47c93346a49", "indicator--c8568f79-e71a-4631-9c03-4633ad8b7a92", "indicator--225f161a-1018-4891-af62-09013a0ca893", "indicator--0614a9b3-34d6-43fc-b1c1-71f76efd6a3a", "indicator--06cefd60-68a5-4b04-97c3-ccdc64fded6f", "indicator--9e1b158f-c70f-40df-9409-8c5fb6392771", "indicator--75dada3c-6e38-4c0a-8721-c6aabf2f52bf", "indicator--03881719-1c23-404e-8dde-d299380cd399", "indicator--4fca2a1a-5029-40e5-8fad-b97b20196759", "indicator--a9c4d92f-6d99-4c2d-89ad-efb57d6e35da", "indicator--806fd650-8ba0-4f48-8bf7-7c111cb4e35b", "indicator--9ba5299a-8eda-485b-a101-81e2481bdc80", "indicator--14894ed4-1696-404d-b989-25e5a899055b", "indicator--1c6976b0-dd10-43ae-8439-e812bdebcd61", "indicator--59e4e503-8bf5-4d07-9e44-00f17e5bb944", "indicator--f5e63985-ce8c-4dbf-afcc-917aa6bc0eda", "indicator--e40f8998-b70d-4733-a24c-84f814506719", "indicator--9b5d9de1-cf53-450d-9cdf-757c53dba9b3", "indicator--daecebd1-2555-4c6e-b028-e3c6dd5ec61b", "indicator--4e69fc31-f0cf-45d3-bd4f-0f91ec44e21f", "indicator--862ddcf9-eec6-4fc3-b83f-adfc41e28780", "indicator--0beec788-cdd9-4d3d-810e-7200bab800dd", "indicator--ce4e73d1-1962-485c-b8d7-89cb67850720", "indicator--bea5feb1-155c-4e17-bce3-af78d1067f50", "indicator--6a667aad-6257-43a8-aa5f-fab57cfb13af", "indicator--71693581-dafd-44c9-a1ea-4dc8d0a31a83", "indicator--a110e0ad-f729-4745-89f9-3244aa0e8f58", "indicator--fdc129a4-e13e-46db-a55a-14f39991ba5f", "indicator--01bbc1ea-75b4-4734-88d5-1b9d60920788", "indicator--ea24c775-d2f7-41e2-b052-a113985dc5ed", "indicator--03e740df-ac2f-4a8e-9e9a-94d1e9eb92a8", "indicator--38837140-78c8-4194-b4b5-6800e02b4dce", "indicator--5a8e5f0d-faf7-4fdc-8972-6ce301bcc2b1", "indicator--ad267823-8825-4544-a8c7-5a9936447981", "indicator--2d9a3000-6feb-4df9-a329-5ab144289732", "indicator--f5fc638b-9e1b-481e-8aee-492511eeb752", "indicator--df7ae8e7-d774-4ab8-a5cf-75fa78c6138f", "indicator--f6b23e09-f443-45ce-90d8-477cf124d1c5", "indicator--de621424-2c35-4326-a164-16794e8a9b11", "indicator--fbbdabd3-2af6-493b-89f5-a39e99479aa0", "indicator--317abf95-a486-4f8b-b522-82d7751d51c5", "indicator--f79f0f41-e1d0-49cc-8900-b430fee2d02e", "indicator--8c10e8b2-60e2-4e64-9aa9-47d6752cfbfb", "indicator--9bdd08cc-6fbd-480c-afc9-88d84ae9aee9", "indicator--575d12b9-7c87-4671-8bea-6650dde5bfbc", "indicator--f1af1908-5f57-4a04-8521-0e134ec5b047", "indicator--b950ae8e-ee5b-40f4-971b-e429b372f046", "indicator--aa26bd63-78db-4e30-885d-b3b4d8edc347", "indicator--5dcfc395-ffef-4da4-b9a5-bca7bd2139f1", "indicator--f513524a-97c6-46ad-b11b-87b60bd0e4ca", "indicator--d0e3665d-48ad-4926-9a68-a98c30b0f59c", "indicator--7dbb50d7-3179-4587-b2dd-e842c08552a8", "indicator--369863c1-694a-4ea6-8717-3438569c9c50", "indicator--3c6df1b2-a9ad-4090-8ab6-b35f879867c1", "indicator--096b05df-e02a-48c2-966a-1def913998f7", "indicator--ac5ff358-fa75-4f13-b747-9557428d1307", "indicator--37d8d6d4-a8ab-4267-93f7-9e4e82e4ef9e", "indicator--a2727f06-7608-4a73-9b49-ea737b0ac9f5", "indicator--e238da06-9e87-4858-b8ae-d5820a8d268e", "indicator--76ba1e77-95c9-4a1d-b858-cce8747c4644", "indicator--8af06794-da5f-428b-82fc-37639fb9fdcc", "indicator--62b73f3f-b035-4462-914c-afe6a5d55665", "indicator--cea3d043-cce7-4b1b-8f4a-01ad37721c4c", "indicator--6274e8fa-0cfa-4016-bb45-8afd6bd17766", "indicator--0d1a31b4-cdc4-4d3f-a040-1803c916b901", "indicator--fc5d4b44-a874-4c87-b1c5-ef4c733ab3e8", "indicator--34dd5c2b-5b32-42fe-ac44-8ddd6f2e1d46", "indicator--55c5f8c4-aaaa-4c63-9679-df7ad999b2fc", "indicator--a2861411-4284-4139-b098-440846a836d7", "indicator--4b0bc68c-e2aa-4ec5-8cbd-50166ae5d3b1", "indicator--21b3df19-74af-4b73-8318-5b3b3fba27c5", "indicator--fe14b0f6-61d6-4310-aa98-7f1ababeffec", "indicator--9a737d1e-0fec-4391-9f33-1eb9e85b8a17", "indicator--df440f47-13b8-41e8-996a-400958d47e1f", "indicator--07329f7a-4a2d-4ded-ab86-54258fd9ef2d", "indicator--8b6c1725-9470-454b-bf2e-94b74ba5cd91", "indicator--fb34faa4-9c07-4c10-9215-2257df806938", "indicator--c92ad425-0614-40be-ab5c-37de9ac4d006", "indicator--752f2caf-044a-4c82-92b5-7540380684a0", "indicator--445b5d2e-c382-4275-aace-9a59d3af76d7", "indicator--8126576a-8ce2-4344-86ca-80e0b0aaa072", "indicator--da7e7370-9fd7-4e63-b4e2-55ba36fa1aca", "indicator--e733f72b-3692-4c85-85d3-276d1bcabb6b", "indicator--9b4d0aa5-9165-4833-94bc-e3056b03d14d", "indicator--a64f76ce-8ce7-4934-8f98-a1d709356d4d", "indicator--8c0ab45a-66db-402e-a73a-b8248d67e96a", "indicator--12db6ce1-6044-4fb2-8477-aa17c1016d70", "indicator--0c848846-48c3-4b76-b6f8-698cf2084c72", "indicator--43f67f8a-c7e6-4a9c-b527-4c22d49a89fc", "indicator--ca47b73d-67b1-433a-9d5a-b019161f7fb5", "indicator--090561ba-43c3-4fed-ab43-f1858923c349", "indicator--c3c3c294-90ce-43da-86ee-dc6330517f72", "indicator--75500679-0f5f-4a69-9f2a-130f9c87892e", "indicator--16077da3-d2d1-445b-bee7-98d6798d8a80", "indicator--c677c359-934c-4974-9ac4-6301629e0b4c", "indicator--aea49139-a331-4fe5-9ed1-d7e952bb1107", "indicator--97bbf861-35f9-4782-a0d6-aef32a204b42", "indicator--0ddb2e2b-29e9-4777-9367-3ba783bdbf5e", "indicator--b3879caa-a496-4507-9c17-7376591ed1af", "indicator--6fc6fedf-950a-4960-81ca-d46391cc9f82", "indicator--fd3fb0fb-5fa5-4d3d-b35b-6aa826263036", "indicator--1c2a8a1e-9b2e-49b1-b0aa-590906c9a848", "indicator--ff604153-22c1-4dd8-bb32-257a21ce5a92", "indicator--e1df6285-f0c8-439d-a5f0-a4c978b19689", "indicator--6b9c0d69-13fa-4c89-8674-e90d3cb88285", "indicator--b0f1ec39-cef2-41ed-8596-79085c5a236f", "indicator--bc777b70-51e8-47a4-9051-c20391abf92b", "indicator--8e5774c1-2833-4b61-93cc-07cc4baa8126", "indicator--b936dd64-1271-4cd7-b116-b627e2d9e53b", "indicator--ff1cbff5-0fbf-4770-a339-4d3f072f7057", "indicator--19fd0108-9a0c-493f-bda2-1cce93ae8d65", "indicator--87672be5-633f-416f-91ce-cab506aff2d5", "indicator--09ca241f-b9d7-4f9a-9f21-c47164f86c12", "indicator--527b6bc2-c032-4952-8fab-963be46b388b", "indicator--4986afc7-b984-42b1-93f8-9919c3ece92b", "indicator--bed63d9e-bd4f-4562-a46a-5746e5b6b98c", "indicator--ececf92c-a49e-4ffe-841f-0940457aa527", "indicator--bb67a235-81b4-4103-be62-99909086ce57", "indicator--7243be34-d807-47c2-8248-5992da9dd6d2", "indicator--defb955a-0ae7-4518-aa5a-ebc7e89671c2", "indicator--f63504ea-3511-420e-a099-9b6d9626519b", "indicator--ab5a3e3d-b3b8-4f35-8621-c035d09f810d", "indicator--647aca28-f642-4be2-9408-53dc6d0d3037", "indicator--0c51c523-ce7c-4707-963c-86eb207b27de", "indicator--f8ccd486-2423-42fb-9d53-6ad7f19335c2", "indicator--9ce96697-e8c2-4236-ab34-a0fa6f8c8756", "indicator--e30575fb-f7b0-4b01-b55c-65cdb9e506b2", "indicator--ddbc63c7-1e8a-4cde-9f41-36737c3a5097", "indicator--842868f7-c69a-4dde-b1ec-0aac5e233cad", "indicator--2ebc3d40-87d3-4d44-a23f-0a85764a4e2f", "indicator--e96de2a8-f1d7-44f3-9250-522665a8ab15", "indicator--7f417485-7e81-4aef-bc5d-95c193430585", "indicator--8c4f2464-137a-41a9-b624-6fe34b4af225", "indicator--cc5bc250-0cfe-4afb-84ba-d72540995ee0", "indicator--004f917a-556a-4f18-ae2a-fe2423ee5c6c", "indicator--b31b442a-c316-46bc-86a1-27cc24e681f4", "indicator--4eb104cc-5813-4b64-a36c-64e89b8c1c5e", "indicator--74593627-6ba8-4188-beef-2ab0bd60fba6", "indicator--29fa7bfc-ea7d-428e-8e79-eb812a8abb42", "indicator--59622ffe-84d9-4944-a043-ae0d35fc14c6", "indicator--3c1babb7-5c2f-4d25-9b82-81e947f38077", "indicator--68f91062-a0a3-4f08-a703-fd821fdf8355", "indicator--43eaa790-cb7d-4c74-9614-5f8d9e0f1c2e", "indicator--0ee03560-f43c-43dd-bf57-5e8c58c75b75", "indicator--f38331ee-bab4-4065-a537-de00dea9f6e6", "indicator--164eacdf-ed36-45b5-acb6-6a24e601a68c", "indicator--50424605-31a8-4f74-911b-21fe570e103b", "indicator--8f2b5011-b711-4fde-bb19-871a88d38f47", "indicator--04e5130d-8de6-4e8a-937b-9e572a851a80", "indicator--5ce12660-0641-4476-975f-a12512fc8113", "indicator--5ecd73e8-e4ec-4782-a6ef-bdffa4634ba2", "indicator--690b1d92-623c-4f6e-a7df-3333e0562527", "indicator--60cca7e8-79f7-4b45-945f-6164aba2b9d1", "indicator--418e2a73-a780-41c1-af8d-b7cebecb5076", "indicator--93dd5ae1-f0d7-4c25-bbc6-229bc68d7deb", "indicator--799902b2-0ba5-4ff5-b0fc-aab7621b459d", "indicator--e9bdcbe0-20e8-40e0-b825-57968c90d6d5", "indicator--cd80d889-8575-4c9f-8940-70a101997642", "indicator--6a87ef07-646a-44a8-80d0-3ad0569f52d4", "indicator--15d9c501-9bd8-4751-96d5-8f0417bb381f", "indicator--d0d108b7-dc58-4b0c-99ff-60ece2b60968", "indicator--854b20a1-6ac0-4ee4-8194-91704a4be5e7", "indicator--8871829e-8d33-4adb-b936-385ccec1dfd0", "indicator--ff3b2bfe-3b50-40ee-a426-47e210fcee91", "indicator--d1765755-abac-41be-b572-0fc22ecc9428", "indicator--dcb136f4-d848-4fda-be18-a2e6bdef6378", "indicator--14cab151-c359-4937-82db-7882b0e4a485", "indicator--0ff87bfb-14fe-4822-86e9-6f6b95da4c6a", "indicator--01610b1c-17b0-4967-adce-7379832eee92", "indicator--be3b0ae9-f8e4-457e-8282-5b9f14a832a2", "indicator--af672a07-defe-4b55-b206-2991b8ed9637", "indicator--61e25a20-fe25-4a6c-a55e-59ec3a598548", "indicator--c0329854-47aa-4c41-8baa-435ec0516da2", "indicator--081f646a-9982-433d-bbd6-2143d304616f", "indicator--8d4e23e0-ec17-4a83-ae38-cc253ce86fd9", "indicator--f3f0bf7b-f5d9-4f20-8572-905d540bf285", "indicator--0601fb81-aaf0-4f20-bc71-1772919e1edf", "indicator--1f216a57-0a68-4d3b-979d-92cbe0ba366b", "indicator--e94737e3-5038-4444-9c58-388cbe8fd2a7", "indicator--ca92e161-7531-485f-823f-6cf090654652", "indicator--3c3e7811-ef2e-4c61-936c-09d4cc036dcc", "indicator--c5dc7046-effe-46b2-96d5-3a156e962cd3", "indicator--719097ab-1520-4d68-b282-6a41f9ddfa9b", "indicator--d7578134-f4ce-4323-be54-325b8c8e3e37", "indicator--912d80ae-4bec-407f-902d-8d720c4a3a51", "indicator--266dd460-c21f-4f0f-b2dc-4fb87918d936", "indicator--ca9df4dc-5165-4383-9f4c-20310ed143be", "indicator--bfeedd8c-e94b-4e9a-8d4f-177dcb1b34d6", "indicator--78a54817-2a03-409a-a7da-8741d8ae1529", "indicator--ac260424-a833-4171-831e-2211bdd7c439", "indicator--5c21b266-98cf-47b4-bc8f-e5adb478b168", "relationship--8d6dd637-7273-49a4-8710-b274ce6a285f", "relationship--f764730d-71ea-4274-8172-2496acc76fdb", "indicator--e75c1265-c186-4ccf-86e3-f48032e70870", "indicator--5aabb0b7-7052-408b-8830-5aa8cc0754ca", "indicator--37c90cc5-ca4b-46e7-87e7-6373d83cbc02", "indicator--cc89d145-7d04-459f-a5b7-150659a56630", "indicator--4464c494-3147-433c-8ca7-171fe9ebd113", "indicator--ae6e0d3b-10cf-4c62-8643-96bd01092fed", "indicator--0c3e0d8a-f90b-4743-b44e-8f3e03adffab", "indicator--5d864d26-1b95-4ac2-a90a-29cf38f3ee01", "indicator--dc2d5069-47fa-47c0-b1ba-43f234498de1", "indicator--b0360aa4-5142-4124-b2ae-3951f4bdda82", "indicator--da12f444-8fdc-4099-a60e-8c94b8e6a5ef", "indicator--a4707996-2c40-41b9-a076-b46909e33b81", "indicator--51e45e91-ddbe-4a97-8d39-a7ae94be1acc", "indicator--da6d1544-419f-4bf6-8131-a25668a78d1b", "indicator--132393da-b533-49ad-9b22-d02b23784658", "indicator--255b71df-f123-4dbe-9388-8c406910e421", "indicator--3ad185cd-a579-4776-a6aa-f6db9575652d", "indicator--30246e21-5481-4846-a5af-3588d5f9d7fe", "indicator--604f057e-764a-4e95-92c4-cf28263bd515", "indicator--42f2e62d-db11-4ef1-a670-77d58b54004f", "indicator--f795ce55-f141-4593-9305-cf53f8b1de5b", "indicator--b7a0d3be-ef18-4efe-b3a2-b526a6c88fdd", "indicator--1c6418b4-cc8d-4b83-9cb6-c7cc3b6a20b0", "indicator--1500a3dc-3231-4407-b66e-164f79f31e6e", "indicator--7b2b6113-a6c7-4ab3-8649-97b05d661f10", "indicator--2414f222-4875-44e4-ad38-43ca4d50bb49", "indicator--52a97fd9-6043-4c69-9a3b-5ce85806173d", "indicator--50fbc36b-fe1a-4a07-9ead-13016e21c15f", "indicator--9ff6730e-8496-445c-89d6-f842ebb31795", "indicator--0e149fb1-f68a-427f-819e-dcec7f7c36cf", "indicator--cf29a359-5512-4762-8ffd-57731bd2b340", "indicator--7e5dc8cd-0590-4720-9b79-b5de685fcfa6", "indicator--f5f064a9-4617-450e-893a-b0ced980a469", "indicator--b4ca6883-5d56-481c-a203-973e1ca7ba45", "indicator--567bf957-bd4c-4bab-adb0-eb3a2f8225b7", "indicator--331432af-645b-40ce-b352-0b25b4e8cd1a", "indicator--7ea01d35-f215-470e-90fa-98199b10d297", "indicator--766cdad5-7e2d-47fc-9ff0-c1ebbd951d14", "indicator--45e9cf5a-595e-4886-aa22-1a0e2fb49d2e", "indicator--0bdbb574-3794-4e49-a8bb-cd5366fe3380", "indicator--36ef1276-86df-4393-ab63-973dc0308736", "indicator--bb7f0d04-45b6-4e18-8aad-560ff49c2acd", "indicator--8fc18717-41be-4304-9bd1-d82688cb021f", "indicator--1e2986d3-d10e-4856-b581-9bb8d89b8917", "indicator--8e1c3e11-59a5-43d3-85cc-ea46d0a65ccc", "indicator--87d31a6d-d7fc-479b-8e0f-81a7dd325e8e", "indicator--810b39d4-4161-4dd0-ad2d-a23dd5441476", "indicator--8ccb34cd-cb47-4277-b901-0a8562dbdf4a", "indicator--69d2d6f4-1eb1-4831-baad-35c519abacd3", "indicator--77dcda82-baf3-4506-a6c2-6620ac38ade5", "indicator--6cdae654-92d8-4548-bef9-643294a27656", "indicator--ee66b091-c850-45ac-a8b9-fe56628f5093", "indicator--dc28b184-d254-43ff-b9d6-a914dfe27981", "indicator--b10fddbb-b661-4c24-86e7-765e6a785a85", "indicator--8b046a80-1c6a-4358-b016-f7ebb35e87a6", "indicator--9b46aeb9-2eed-41ce-befc-fdc22a70f86f", "indicator--d58d4999-37f9-4d0e-8d35-6976a9d47516", "indicator--2e8f4f59-3758-4be2-8f91-b326c80989b9", "indicator--de28de98-7530-4abe-9bae-ee6ea55c4bc1", "indicator--79212578-06bb-47d2-afd6-aae6559e7d4a", "indicator--b6b787bd-2aa1-4458-b971-a3b32e4e8be2", "indicator--cd002989-b1a6-43b0-82d9-427ff912dfec", "indicator--7057ee49-66fc-4f80-964d-d994862b85f7", "indicator--ccd51004-deaa-41af-9bd1-f0cdf19527e3", "indicator--f39f2c0d-8984-46a5-bd1a-eba3f3827067", "indicator--2111e20f-66f2-497b-a806-7e71c2793975", "indicator--4a7cd820-6ace-4ea8-8f54-6d059e71e144", "indicator--f010cf36-141e-4537-a12c-392cb5b92e0c", "indicator--991a5939-7203-4bcf-aac6-d5a68076a955", "indicator--3a4ddf03-5e73-41a2-a2f1-0115c6dabfb7", "indicator--c71d2349-5a28-4f10-b077-0040cc83419f", "indicator--fb9d9e64-2a75-4487-9659-a19636acc3b2", "indicator--b9074574-4c7d-4926-8ead-09c25b71c228", "indicator--bdc6809c-9004-4954-9184-ca39cdcc0f9c", "indicator--79070f2e-df6d-4626-8fc0-1a4d1807e584", "indicator--529b752d-4845-40dd-b8c6-a483d06f77c6", "indicator--98a93e1f-b21d-4a9f-bb1a-8748745896a3", "indicator--f725ca8a-bb8d-40ad-8327-98bbdf38c0a5", "indicator--61ab151b-9aa7-4c12-9c6a-a9bf88fbfc68", "indicator--1bab4b8f-f92e-47d3-99dc-9f9013ff78ea", "indicator--5a1d52fe-de85-4751-b21c-bb51e04b2799", "indicator--83306bad-53b2-4484-beee-f1ffd08ec96e", "indicator--30316e68-3910-4e4e-8289-13382c7e0c23", "indicator--5c6d7882-5140-40be-acde-f76e60dbdf4c", "indicator--c377ec24-728e-445f-a4a7-059fa83d48a5", "indicator--9716a55d-259f-4fc7-adf1-0491df870fab", "indicator--a864537a-51c8-4949-9b5a-53f80ddae27c", "indicator--551c262d-e89a-4ae2-b1e9-6bbe36357f3f", "indicator--e8e03e20-a744-4649-a81e-afc284f2d8c9", "indicator--f4f7f886-f4e9-41d3-94d2-057494e88fb2", "indicator--a44e5ee6-6f10-4ca2-b76e-8829e5031483", "indicator--8bae6e14-1856-4dbf-a58f-da832881458d", "indicator--eefca7f7-3842-445a-a306-a67765fa7944", "indicator--47e4eddd-5900-4921-8894-dce0ac94d719", "indicator--3e200fb4-4acb-4b6c-8e2a-9bf643d7334a", "indicator--06362c8c-bc13-457e-9a57-41f872b761c9", "indicator--71d326d0-9700-4a65-87e9-660fd436be04", "indicator--5db60828-eff9-4daf-8072-8a3d8968a160", "indicator--0775993d-a20d-4575-912e-fdf742285d71", "indicator--95b778bc-bc55-4b7e-b91d-f5255fde5f25", "indicator--8f4eed78-bc7d-4047-a099-236446da4fe1", "indicator--8a8227f4-fd77-4175-9be5-f3231f7a1817", "indicator--efe5778f-d637-437e-b4a6-666eeed1752f", "indicator--05c24bf4-a066-450f-b292-9299e396d1c4", "indicator--eb85a5ac-1dfc-41ff-981f-f1f9abf714af", "indicator--46ffe74c-6d86-45ce-b4e9-2846fdd1c5d9", "indicator--bf3b9222-6a0a-4e9c-84d0-031c2c61f354", "indicator--2e15367b-c4e7-4ddb-b4e2-270389d36445", "indicator--03578c5f-4a3c-4d4a-ba7a-b78a9a14f61e", "indicator--f4e397ab-0b9e-4520-b43f-2b6a3e2a9fb8", "indicator--f1eafa15-552b-44f1-996f-8de9cb9fb275", "indicator--9e85be6b-235d-419b-8959-478eeaf90d29", "indicator--067a3de5-57f7-4cc8-8d5b-182b6803994a", "indicator--bdd3c4b7-c56c-456c-9b5e-cc4f3165fb1b", "indicator--6dae0a1f-cd05-4eb9-b5e1-04a1f04001c6", "indicator--1d9a186c-cd90-4928-aed5-5e3a73a004f8", "indicator--3eb985fe-9adc-477d-9403-9282d0591056", "indicator--dd9a4005-237c-4cc7-87d2-044e7171a9fc", "indicator--951aaef5-6df6-45ca-953d-11af7adea1d1", "indicator--20bd5e8a-b1ca-43bf-b7bb-6ab02269f393", "indicator--f1397ccf-4447-4c31-a350-111d770ff745", "indicator--3d1f7ba7-eda4-4010-9c47-ec6d7e897601", "indicator--8d95419d-6ad2-45ef-ae92-263af26d8472", "indicator--3c660d4e-efe2-4d3a-85d4-777c8ab7cfe8", "indicator--f41557a9-b027-42cf-9113-80a9e9720157", "indicator--4bc132f0-fe5c-4a40-8b4c-93b69b14dfa2", "indicator--694fa23e-44ad-41d8-b39a-d3cce399d922", "indicator--c5202fa6-0bb2-4195-824b-1c691e05d5b6", "indicator--24cbe473-f3aa-4002-93de-1bff42b746b5", "indicator--ede4aea5-0793-47d2-9aee-bac8503db6f2", "indicator--249d2d33-69ea-48a3-a543-bff6e7e0202b", "indicator--70ced8c8-33f8-4c55-b40a-30f801391fe6", "indicator--16c9051b-b3ce-44cc-8c4c-2e6f4bca7d3d", "indicator--577a9629-5770-485d-b492-99ede8ae80d0", "indicator--e30c4ec6-f813-45bc-9d9a-4d28e1fc3b35", "indicator--ab166bb0-860f-4e6f-9bb9-e6791e339b7c", "indicator--b1dcfb4d-ffa4-4b3c-85b4-2a0e5528a68e", "indicator--264e3021-5b3d-44b0-b88e-0af8f031b606", "indicator--905eb929-af9f-40ec-97a5-028c04ee6872", "indicator--4db0b543-1663-4a73-bf7f-b5f0b8df862d", "indicator--a7c86565-730a-4aa7-a124-788577e359ba", "indicator--c613116d-fad8-421e-b3bd-2d3a3e82af50", "indicator--b95b6ab2-e41b-45ce-b665-e503b79bb1fa", "indicator--3ea86016-d84e-4b20-94e6-bf23989a2818", "indicator--26789491-7c79-48f9-958f-857c8a78a1dd", "indicator--810f328f-955a-4458-bc90-7ca423325d4a", "indicator--f67ccf0f-7392-4f92-a8a8-419e05dd8db5", "indicator--00088607-4b2e-4f85-a071-88f27254ed18", "indicator--984219bf-fc83-42f1-9e45-e753f2ebf2a9", "indicator--25c29183-7ecc-4b13-b67a-d0b352c9bd9c", "indicator--13f8d8d2-85be-46c7-91d5-10056a90e1f1", "indicator--ce9ae65e-30ca-4c9e-8f6d-15ebbc2a8cc1", "indicator--22bd8575-4181-4d50-88f8-a34c432a375b", "indicator--b0f1f082-04dc-4fce-b702-e18f99babd1d", "indicator--b45b17a9-0bab-4143-b069-0e4f3a75089f", "indicator--067ad84e-91a8-49ea-9b8f-a77403d78e36", "indicator--3d3c00f6-8587-40fb-8298-b3401e221067", "indicator--f9dfecac-f367-4afe-babd-53208a5818d7", "indicator--4a5ff7f5-3f21-43d6-b25d-b18805940070", "indicator--88197520-4649-489e-a826-87eb821093de", "indicator--f36978fb-c8e3-48e9-a31d-6dbcc4371c95", "indicator--1f76a53a-ed88-43dc-999e-1c133d0d9a7d", "indicator--5f1c4129-d3a8-46e9-955b-3e00511aa269", "indicator--148ad55d-50ee-46f7-aef4-f211d6767cf4", "indicator--eb569f6c-3dd0-4d8d-8f58-e7de0adb7116", "indicator--e3030455-39d7-4285-a266-d6ecf0b7099b", "indicator--85819446-e650-4ecb-a8d4-c9a92ad06ede", "indicator--30ad36b7-e947-45bc-86a1-577824e422a6", "indicator--ff2fb260-8828-4ca2-aa51-bee33656910d", "indicator--9bc92dc9-356b-437d-ab75-d6e4d1dfd231", "indicator--4f9faa72-70b4-4e9b-b478-66264afede38", "indicator--6c953d20-9e99-4ed2-9923-14e0b604d195", "indicator--f0025c5b-fece-4fb3-a829-af08a3101223", "indicator--11bcf050-b98c-4b8f-ba9a-137ab37c5311", "indicator--9fd2a047-55b1-4c6b-a0aa-c905f2ef5a49", "indicator--08aca47a-7dd3-49fb-b115-79dcd62671ac", "indicator--6b8682e6-c047-4731-9d67-018cbee604a6", "indicator--189024ba-1f1c-49b2-92ff-d64d060ba848", "indicator--6455365c-f5fc-45ab-92d9-b1034fd20956", "indicator--641a74e7-bece-4f71-8578-a43e5cb0022f", "indicator--b973bf9e-7429-4a1b-9905-a890c00da0ba", "indicator--3385a940-0f9d-4340-a9fd-c9af4aa6ef87", "indicator--d0f1bf13-5835-4091-b10a-5a12939033b3", "indicator--7eb5b1c3-0657-404e-86fb-046e64d4ece6", "indicator--d2f54c0a-2a4d-4a24-bdcb-3704ab429173", "indicator--a38d2c0a-8b1a-4c50-9c7b-04518f6d0f89", "indicator--de2f55ef-1a70-4605-96eb-1c7c70fab7a4", "indicator--d1974396-f2df-49ec-b439-80e061edac4f", "indicator--235104d4-a670-46b3-83bf-14e096de14e4", "indicator--b734f2de-4082-470a-a189-681edc555e1f", "indicator--e1a64c13-b134-437f-9ed4-a1a7813f5d8f", "indicator--b071bf55-22b9-451a-a23e-2dea1f5a7925", "indicator--9aba93e0-060b-47ef-a7ef-0988f748b659", "indicator--0de47ca6-24e5-41e7-bf2f-2d7a5f9d17bd", "indicator--ad872aa7-96b2-43bc-b690-c38029387f63", "indicator--757e225a-824c-4d63-83b1-9f274a93facb", "indicator--a0f67a19-dd8a-4ad0-b5b6-b87207a00154", "indicator--1a7785d0-a11b-4dc0-b9b5-e09e01b49f47", "indicator--e45e906e-2bf2-42cb-b9ac-5bf2315288fa", "indicator--49811a1c-906c-4212-8250-87bfdc2d22ec", "indicator--6acfece4-7d4f-4bfe-a727-51cb347b744d", "indicator--c2de5ac7-25fe-482f-9898-26dfb70b1fef", "indicator--21c2a424-0f7b-4152-b92d-aa4db2253c86", "indicator--fdc3fc5f-a40c-4cac-9354-406688c5109d", "indicator--0568a913-a0c6-45cd-a941-7a1faa881a95", "indicator--268ceb4d-9952-45ed-93e4-6596a3f13a15", "indicator--1e221c6b-ca5d-42ca-8ac1-dad45f45d8bd", "indicator--7327719b-58f6-4632-8650-1ea48ef148d7", "indicator--45f37af9-9fbb-464c-9155-3170d043a408", "indicator--ba75c635-cc67-4555-9dc1-331c7ae7349f", "indicator--9d5de59c-9ab7-4625-b5cc-114351aed84d", "indicator--baf768b9-cd36-4968-88b3-4156f8f83f50", "indicator--4986f753-021f-4d6e-a1f8-263bdd4b8d83", "indicator--08fff7cd-271f-4ab2-8543-ca2f4646e032", "indicator--dd454ac3-3fd7-4069-9cca-27a40f5be94a", "indicator--9bea6eeb-3931-4e77-b930-e43876ae09fd", "indicator--79918760-4855-4452-bbfb-aee4f1700bd3", "indicator--63cae8a3-3804-44ca-81d9-b3174454b73e", "indicator--b86b0e5d-8918-438e-aac5-a4e9adae5809", "indicator--b02bbc24-3bec-483d-80ee-5a9723dd44ef", "indicator--2c2e588f-cb56-4bdb-bc61-32dde09ab468", "indicator--a5de1344-e1ad-4fdc-81cb-62fac0c415c5", "indicator--8f9b7d7c-b921-4a95-9381-4ff68d38655a", "indicator--8b89b07c-3764-4a26-8bef-1c108e5b247c", "indicator--dff9a87b-55b3-4065-b494-bb5d5828b46e", "indicator--f86cf6ae-ea7d-4df0-91d9-1b155f105440", "indicator--4cdbf499-0f45-4f70-b83a-f27806f36098", "indicator--d9e30fe7-4ce2-4f4e-932f-fd2f5dc0c53e", "indicator--8189f92b-ff63-4aed-a5bd-c1ec8114b5b3", "indicator--9a491209-b3ff-42d2-b180-b90615034c9a", "indicator--2d3a6b1b-d0f7-426f-84f6-5aea8cd15604", "indicator--e9955254-f1e2-47e5-9b98-41a0e5ec8fb7", "indicator--47663285-50f5-4828-bbab-790c15dd0f32", "indicator--4fab6f01-a0f4-45bb-a236-43c6014b49a5", "indicator--d47b830d-991f-4c76-997b-8d3b7e4c6c5b", "indicator--24e9d3ac-22e0-4c41-a96a-3bab2498d75a", "indicator--d3462084-5723-42b1-9c69-b543df5f7e76", "indicator--bd4306fe-696c-4443-a2d3-0b6439d49588", "indicator--764bf784-4b94-4104-874d-cb49305f455a", "indicator--b257fc92-43ba-4192-9f64-8d0b5dddf634", "indicator--e1582fc6-2f29-414f-8a53-e3a82971f46d", "indicator--7f909935-a032-487d-80ee-ce5210bfe638", "indicator--8bab133f-174c-4792-b444-4557ffba251a", "indicator--b7a13ba1-e942-456b-9157-6f06d5ffb6d9", "indicator--a44ab8e7-033b-465d-b192-d2210a0465cc", "indicator--2139dc2d-f99d-4d12-8877-7e8a0c9057d7", "indicator--fd584880-d5c1-41e1-b7b1-deaf5d29d635", "indicator--e8352a46-5540-4c2d-8c76-15eb30688e37", "indicator--32cdd984-e0c3-483a-ae09-b6857e3251e6", "indicator--b05b1a40-218c-4bb3-b1f1-8d9507892ebc", "indicator--f6769df9-416f-425b-93d6-ea28d22182f9", "indicator--b9e0c5e0-d1fb-4a1b-a06e-4da6d3193b09", "indicator--fa5a1815-7a90-4721-847c-71c33ee28769", "indicator--5658db0d-4141-4e7b-af83-342edd593b28", "indicator--a5d9280f-595b-447f-b1d3-31bd355fd662", "indicator--d792718d-5270-4586-88ba-3fb1451a3551", "indicator--73f12fcb-82bb-42c1-87f9-26391496953d", "indicator--214cacc9-44de-456b-b961-d53dd08a1f2a", "indicator--6b6c62cc-c034-443e-9fcf-ceb057f964a5", "indicator--7b02bc96-5053-41fc-ae15-f13770c7fe62", "indicator--b02cf4c4-3b04-4ef5-ba1d-5f6f5bba8b95", "indicator--f1e6c519-0e6b-4374-8b38-6b9d98e9db42", "indicator--7fb4daf9-0e20-4e27-b8b7-ca548524d1a5", "indicator--7e5a6423-562a-45b5-9090-0dba6761a583", "indicator--61d0c7ea-6293-4f25-859f-b6a68fe282bf", "indicator--49311c1f-7e26-40e6-80d6-d33a78e91a3c", "indicator--71cd05aa-0221-4ab8-b06d-d60b2095075e", "indicator--8486d051-8694-4b55-984a-4b26eae6177e", "indicator--c5cfeb52-1d60-49b7-aaf2-68fa47c17732", "indicator--11dc7967-3a78-4181-a563-90b7fe4ed7d4", "indicator--62a380fa-921c-4b3f-bdcf-0f97389b04be", "indicator--c5a1c99f-94ed-4ba2-b6b9-839fc5957c59", "indicator--b9d4f09e-1d05-4563-9858-63be66b9b01c", "indicator--361acda7-cac6-44b1-9618-c294daa74531", "indicator--43eef848-186b-43fe-af9c-a4361a46fe86", "indicator--6999e3cb-366c-4830-82da-b623a9d9a9a5", "indicator--d308a075-2c47-4e6a-b2de-74f86b0906d1", "indicator--a83c43af-3490-4302-bf37-01c160ecac81", "indicator--fdf1c44f-ad70-4c5c-b029-851a7f50e31c", "indicator--92728134-5872-4815-acd0-998a09822c91", "indicator--3597b660-4734-484e-a9e5-624943b8dae5", "indicator--18969382-9953-4639-8bbf-db1243d4b089", "indicator--c88ebd11-eed8-4eac-9e8c-cdb23868a8e6", "indicator--99910bd1-cb16-4227-a85b-95bf097b8bb8", "indicator--aa7da0a5-2af7-4942-9c05-55c4a5df5605", "indicator--15c5943d-5774-44f1-bcc8-277ec9f7ba85", "indicator--13deec5d-e7b9-4169-95b6-d48a7db208a7", "indicator--7df580e7-808d-497e-8dba-d6575cce6136", "indicator--3a7ea57e-3e3b-45a5-a74b-80c514ab41dc", "indicator--c97ecb5e-c834-49b9-9053-85a3b53e4ecd", "indicator--493bfa21-8899-47ec-a806-9a4f1f2ce11d", "indicator--d4dc35bd-9f62-429a-b246-8780c752a27e", "indicator--727835be-4a17-402f-99e2-62894704f6ea", "indicator--add142a3-142e-4c79-ad2a-6153a5f21f10", "indicator--51343e84-55f6-4aa2-9efb-35732bbd6cc7", "indicator--27c4fc69-4eb3-411e-aeb7-e58113f97cf7", "indicator--e4d9b381-3590-492d-8b55-5adf652defe6", "indicator--141bd21f-e160-40c7-b05d-b861747c9275", "indicator--cb4ded32-93e8-487b-a576-9f8799ed6af2", "indicator--4c86d88f-0433-4122-aa1d-c40e66b7e359", "indicator--a1c4a011-176e-4687-ae68-67315b3f4755", "indicator--6748a32b-c2c4-479a-8dda-bab9e74532af", "indicator--94dbaea8-e903-4cc8-b8b9-99968605be7b", "indicator--f3005d68-3034-4fbf-a44b-3318798e5262", "indicator--aad5d261-4ce5-482c-8626-e9d0ccc54276", "indicator--31373f92-894a-4371-b9a1-987d2c90742e", "indicator--e73527df-44b1-4e7f-9ac5-12f8abcbfc1e", "indicator--b4d80892-0f18-45ed-911e-beb08e939125", "indicator--a8dd9bfe-e8f1-44ab-bc8d-906e01b5fc1c", "indicator--c1a6b561-4a67-4315-a1df-4bc054af3d8b", "indicator--68fd72b5-d10c-44d0-88eb-4b87820c2930", "indicator--6442a7b7-3cff-422e-b44e-214a080b50dd", "indicator--ffbb4f2c-1f2d-47de-b793-14ba9a058e97", "indicator--94fe9bde-8e0e-49f0-8573-82dcea9a37ac", "indicator--8e98ff09-144b-487f-8e03-03ffb1722e59", "indicator--b2c75b1c-b701-49a2-a0ce-866ce1c52e9f", "indicator--14704877-1c87-45d6-8fdf-5259bd958cd6", "indicator--b5ccbefd-3272-44ce-baf5-ab6ccbe51596", "indicator--42e564dc-0a30-460b-af1f-d80e65aa42b3", "indicator--e286e9dd-39ce-4048-b894-180efc3d504e", "indicator--b71f8494-8d1d-467f-9d76-e67d8259b55d", "indicator--2c07bc2f-b36a-4c07-bc50-149c9dd19e07", "indicator--9bcfe315-516f-4a3c-a62d-a69ac122eeeb", "indicator--943055e9-2ede-4fc6-8c5b-56a92686a609", "indicator--5c7a62a5-1aec-4295-a3ad-649e83a06042", "indicator--f59c3708-cb49-4eb0-8cb0-3db8e597ef47", "indicator--83026bdc-67c5-44b2-90b5-576aeefa6982", "indicator--9b5ef556-f2a0-47ad-bdd2-ee15f95c9286", "indicator--1ef38b23-cdf3-424a-a463-2b7f87ef9755", "indicator--67489d63-aa0c-414a-b1d1-bdd22d842d5a", "indicator--c035841f-c765-4a71-b341-b4c252e35d94", "indicator--dcb5a0fc-e89e-4e4f-a3e9-517ca5a14e7d", "indicator--2682cb77-fee9-417b-8610-b20aa2ad361d", "indicator--e66b1407-9e5a-402c-abf0-7b5e62fe854c", "indicator--14c6f893-eefb-4a95-9ff6-a0329b285a97", "indicator--8caba000-df02-4883-9a23-8df0fa6d3386", "indicator--058bbaea-a26a-4e94-98ee-1cd61e05bc76", "indicator--ca5a8ac8-0da0-4342-9a81-1c9b639944bf", "indicator--056be071-495a-4672-becc-77bcf1ec4010", "indicator--373e5927-18d3-4ef9-91d7-58d5814cd866", "indicator--7537d464-056f-413a-ab58-bec604f169a4", "indicator--9bcebe7b-02fb-4ac7-a01e-4c33236d7b45", "indicator--e1749c16-607c-471c-9ba1-4bb7dfb315c8", "indicator--b344a646-d1f7-49d7-9655-cc9095721857", "indicator--cee0455d-bf2a-4ee0-b9b1-67c9c9f7b82e", "indicator--ed3cd9da-d44e-4346-b803-74b1855a2ed8", "indicator--ef5a13b0-40a3-45bb-a9e3-caa82443db14", "indicator--ef9b59f0-bd43-46c0-bcc0-e47058be39c7", "indicator--81f1529f-2bcf-4acb-824d-cb4cd0fb364f", "indicator--b0372f08-f635-492a-ab9e-c00b2f1e52ba", "indicator--384f7136-2590-43d8-9503-627f761eaf34", "indicator--9a67d1a1-a1f4-43e8-9c72-85fe574d5da9", "indicator--fa3189a3-9114-4c93-9c66-5c7457b365b3", "indicator--6d4c2bcd-f899-4cd9-8a80-fd175a31162f", "indicator--fc55bea0-e5b7-4841-9029-f6e2d031b687", "indicator--7b478cba-c725-4098-8e2b-3d24e0853635", "indicator--05fe2511-5c01-4438-9a5d-5b69471ac0aa", "indicator--57d17376-ab15-46a1-8f92-209163e4f0dd", "indicator--897e5ea7-46ba-4155-a549-710782169c34", "indicator--7b68734e-bf8c-46d4-9f02-7f144ce7db3b", "indicator--3a3d220a-1559-4260-8193-2079933ef937", "indicator--844c53ac-bdcd-4de6-945f-613ad9d47686", "indicator--fba6b1ce-1af8-4054-9651-2632650e9f72", "indicator--1c31d259-a441-4170-90ee-fd8906775420", "relationship--4d7a8b9d-9777-4b7b-af8f-d81cb25bbdf3", "relationship--8a9ebedd-00c5-4b66-b91f-a287a075788b", "relationship--cf193ba6-3ff9-46aa-bc9d-cae1e5a1a4a2", "indicator--a3fc7b55-9e7a-4470-96c6-847fb8c30a37", "indicator--c8d781d3-60d7-4f0b-896a-3ec5c26466bc", "relationship--fe3c8857-b3e5-49ec-abfa-769e38dfc997", "relationship--b097b4b7-45f7-4a3d-9177-d49e2d85b0a3", "relationship--b677ecc4-f2a5-49b0-936d-9ca81b306508", "indicator--9e4ed279-7c50-4ed9-b7a9-e0e52ae3b1bb", "indicator--f9b255d1-ed88-4a0c-b3a3-9597abcd5d4f", "indicator--42b8b7e0-d712-4e7d-ac04-c5529aef3db5", "indicator--da6e6174-ebf4-48ec-91dc-b18188480223", "indicator--213c819c-4e80-4571-b080-7bd3dc68b943", "indicator--d74185e5-f957-435b-8339-007f7b580c70", "indicator--217d3af1-2298-4a11-beb7-f74b5cbe7ce6", "indicator--fbd8e551-19a4-4ac4-a645-f267a939ba36", "indicator--8136f624-1df2-40d2-88ae-0c2adba2d1b9", "indicator--62c93f9c-8ae5-4cac-8dc3-560df8b7b151", "indicator--19eb255f-402d-47c8-945e-47d515404b6a", "indicator--3121b419-49dd-4e7b-85ba-790abc674115", "indicator--685b22a3-77a0-4fe2-955f-c92c6d27b7a7", "indicator--33213837-1dd1-4b55-82dc-32decdcb3f8e", "indicator--986f5056-554f-448c-8267-d76389f20df8", "indicator--4e866542-4189-4f70-bef8-fd65525db8a6", "indicator--c9429c89-dba1-45a5-b269-ed831a4bd2bb", "indicator--9e67cdbd-e146-4b82-94ee-5923cbc20b46", "indicator--d7bb51a9-e0c5-4e38-a5a7-8f058717def6", "indicator--404eee66-276a-4742-a18c-24b93eaf64bf", "indicator--0a7ad224-300b-4d3e-bb0c-c7936b6c391d", "indicator--27ca554e-08f0-4df4-867c-390e177103ee", "indicator--63b9e8a8-9af3-42d9-8b5d-5f3761f500cd", "indicator--e28d3dc8-fe40-42e4-8f0b-c1794aa98041", "indicator--40852aa6-ca3f-4bb7-ad8d-569e4e4c14ce", "indicator--6fbac682-c8fa-4e08-9938-d47d669adac1", "indicator--6f1f5d9e-4a34-434d-b3b9-776aaf220f97", "indicator--3e8192ba-0f21-4e18-9f32-a3304923ba54", "indicator--2796ae65-b60d-4395-b598-c26be3100f86", "indicator--340eecf7-2780-46e9-9b84-a839bb7b0cf4", "indicator--0d6fe6bc-a2f5-46fd-b5a1-8d552030b935", "indicator--901ea259-2589-4371-badb-523b1d69217f", "indicator--659cb557-bb77-4e15-bdf4-444240d0e5dc", "indicator--2f0ef028-2be5-4715-b700-332126e1e052", "indicator--bc84a4c1-3a86-4887-a68f-99ac367e49a3", "indicator--5fab1cdc-972b-45f6-b9e8-504dd57a6087", "indicator--95fedadd-135b-4dcd-8057-e5897676f1d0", "indicator--95e02245-1356-4c14-8831-10d8352a4a39", "indicator--30f2c7dd-f2b5-4e67-a94d-80545c7fe733", "indicator--f9c50405-a779-4a8a-bc2b-827ba946f5f6", "indicator--8e58835d-9c50-4ac7-960f-e70a9d49e8ee", "indicator--0316abe4-f26e-4cd2-a800-1fc9b39103a3", "indicator--6b7453cb-e0b4-4e3a-b6ed-795fffd8b69f", "indicator--14def2b1-515f-4fb3-a207-97c9bc1e1828", "indicator--cd288042-f84c-4b8b-9bb9-ee3f7b2d72ab", "indicator--e8a40516-c459-4d89-8c61-7618e71fba66", "indicator--161f215c-100d-4ec5-870d-cef936bb5010", "indicator--b63f92ec-4d0c-49a1-92b7-15dc37e5d261", "indicator--c389a475-51e5-4877-8fe2-20a10fe89fe8", "indicator--004b85b9-927d-4bc1-b748-c2c4db86fd56", "indicator--63a76218-66c5-49e0-8084-876f8a4fd90f", "indicator--4033ae34-ebde-4f18-8eea-027c5c0f724e", "indicator--c8fcf890-4789-4041-937c-f02eb039af8a", "indicator--7755a097-7cd2-4206-b079-3562d5425dce", "indicator--305b1778-ea25-4091-8596-a44de886fedd", "indicator--71b9ffbd-9795-4d2f-a433-d671ddc769dc", "indicator--dfe7a219-08c0-422b-bbd0-39255739b0bc", "indicator--00277c55-ba54-4337-a52e-d23520157bed", "indicator--7224e3be-53e3-47c2-b5b3-7a7333d98cab", "indicator--bb46120a-abda-47f1-85eb-9367c0b8eb99", "indicator--5196fd8c-bd44-4daa-aed5-5bf870442291", "indicator--799ee394-cf42-4c80-8596-96345cb9f98f", "indicator--68783eea-5c17-4350-98ed-079d6ca76bae", "indicator--9bb0250f-14d5-4dea-b6dd-3e838cabe114", "indicator--10d5b0f9-f637-436d-8f33-cba8f330137c", "indicator--cb77c332-bf45-4d81-bd6a-09e657704f17", "indicator--1db3009c-1e21-4bdc-affd-d91c0968a73a", "indicator--6b171318-2ff5-45ba-af4e-da831ce436c8", "indicator--5d073c56-8e5f-4e6c-9c8d-8f5883626687", "indicator--2f8a1af5-5ff6-4940-90a1-b535115d7301", "indicator--337d494c-ef99-4ab5-96c1-df949f9faf1d", "indicator--90d7f9f9-4f75-446d-a800-d82f676381aa", "relationship--73fbaae2-5407-4a96-ae6b-188ef5fdc02a", "relationship--ba8db94e-4f6b-4ac2-b3e6-c775435f3d9c", "indicator--11af7459-9c87-4297-95ed-0cc7925f7aae", "indicator--879f4c30-e849-4d0f-9d12-b813fa594abf", "indicator--5dd366d9-94a5-4544-9f9d-e39eddda8852", "indicator--d7a601d9-51dd-4712-be89-2a9d192f92ae", "indicator--5cc9ebc9-c878-4f3c-8612-3a96d5a58ffd", "indicator--cfac9feb-e26b-41ac-93b2-237f2169e694", "indicator--f5f60ab7-87e4-4b75-8ea6-682cdbb03839", "indicator--e3aeb564-565a-48b8-b698-4d19bd752b14", "indicator--9cf24cb3-e483-4a9e-a73c-4052f4e387de", "indicator--5b7ee6be-6b82-454e-8176-1d61d96ceea5", "indicator--e14894aa-f3e5-4acb-b26f-532cd8074181", "indicator--278865e2-1e5b-4f79-886d-98887e981d17", "indicator--8f2e3004-9045-470e-87d5-284618fc57ca", "indicator--7f645d80-3f2f-4abb-bcb2-b4b718a4529b", "indicator--7f1713ce-3ff4-445e-8862-cf702ab16ac4", "indicator--3023372e-b2bd-4112-ba83-a6c32e7a5d4e", "indicator--f6f6de60-f7ad-494d-aaad-7fab024f9d1a", "indicator--fadf130c-cf75-428d-bce2-b3c3a293372c", "indicator--044a5990-7fbe-4226-912b-9b982458df06", "indicator--c17290d5-d687-40b2-adab-fef180ecc5bc", "indicator--68094292-7213-4a35-9560-27cb77b82e1a", "indicator--0ed5fcf6-3b33-4977-9252-62d74ab035d4", "indicator--4383ea30-dc9c-4dcc-847b-9b36e18d091f", "indicator--34754b21-8655-49a5-87c1-65d81f4d359b", "indicator--b56d5bb7-7910-4fc9-af10-b53bc5dd30ec", "indicator--c7ee3af4-d343-421e-9387-04947165ad82", "indicator--58d5665d-67b1-48f0-8836-23ad50f4505b", "indicator--6a9ed690-4a4a-4557-b590-74c02f372ca0", "indicator--82a9dfb5-8197-4cb6-8376-288f354692ad", "indicator--4d18c749-bbcf-4a9c-8f6d-3f820bbffe4c", "indicator--5908fe2c-3858-4a54-9d7d-513f3103c28e", "indicator--51967c80-a13e-475d-a111-8cba9b364904", "indicator--91c742b0-9310-463a-859c-48871cb46a80", "indicator--71f3a83e-8846-4bcb-a9c7-647c82947a27", "indicator--6f6eb923-bde8-4c50-9263-5a7fbb9ac674", "indicator--332804b5-476a-446f-87c4-b2e1a98c87d5", "indicator--2d99f86f-1ae2-41e6-a6c8-daba26e6a6e9", "indicator--e7d352f3-78af-42fe-95c1-2823e4abdc60", "indicator--6e975f54-ab9f-4874-9f5c-59f5e7966942", "indicator--320ed344-1358-4c1d-a426-a1815ec96457", "indicator--23f8c825-5bef-4297-a2fc-fd8bde8ee4ea", "indicator--a0f78ceb-d9a8-4267-a112-49430ee47bb3", "indicator--2bb89a16-3612-4140-979a-6f2a1037e8ac", "indicator--a19be3d3-bc93-491f-aa23-99f4e28df616", "indicator--65bb1d6d-1897-4e75-96a1-73e149559ec8", "indicator--1deb25a4-451a-4091-8399-157cd2495636", "indicator--d56ee7ba-a274-48d9-8046-c19c983a1466", "indicator--fc57f84b-ab88-4077-a0b1-6e5724c0b686", "indicator--8659f3c1-151b-4d2f-a7f1-7aa0699f4271", "indicator--c40da604-a4dc-41f4-bd2a-104b52179d96", "indicator--cbef2476-97e8-453d-8b39-096cf51f7d31", "indicator--f4fe2151-7783-483f-bc59-44250fca498b", "indicator--e949500a-e5e7-486c-b174-4345e742344e", "indicator--ecef908f-ec51-4c46-8f98-99a7ccf72560", "indicator--7ac14b39-397a-4ba1-8c78-611c6b25cac8", "indicator--ef2f261e-caa6-47a6-b712-893ec0b0545d", "indicator--7942b1f3-5480-4bd4-9e00-b961beba2b08", "indicator--3390e8d4-d06a-4449-a872-1b0629e4cdb9", "indicator--257a242e-dcab-41fb-ab27-2cd9ac477311", "indicator--53ced9d3-7f31-469b-88a2-29339f0f8be1", "indicator--f3fef30b-0432-414e-901f-73afebf519ac", "indicator--2ca7e018-63e1-402b-b179-a013892cad03", "indicator--4c910fd8-7d02-4a7c-bcd0-32501d127544", "indicator--da18d194-f801-4854-9b08-a3447dff9134", "indicator--2d3e01d1-a36e-4016-b7f7-2c4296be7cb5", "indicator--0ecc5ab5-9293-4490-869f-29d920272279", "indicator--5178d057-2bca-42f8-82ac-ee57d95aa7a4", "indicator--341c04d2-d7b2-4c47-8992-9dcfd8410774", "indicator--f1243e47-6657-4b7c-9790-2925c0bf2eb7", "indicator--021f527d-3efa-4e54-a27f-e83e526a372a", "indicator--5d11637a-df1c-4efe-bc54-abded97b93b9", "indicator--9e512acc-4654-4c5f-b96b-e85600addbae", "indicator--9fc7f331-b218-42ab-9147-d96590645076", "indicator--164e1487-1ffd-4ddc-a067-9db6fb436c2f", "indicator--3ac25518-e814-48e9-824d-3f894bd422c9", "indicator--1788fb8e-f7b5-4b7e-b3da-1b315a7c8166", "indicator--de986d8c-87eb-4a94-b4c6-be8778f392c6", "indicator--47593c46-8934-44b4-90a2-f08036aa222d", "indicator--642da2e1-ecd1-408f-b9e3-2ab866b3a9d7", "indicator--4487b659-a89a-4964-9766-7ae3f05b4191", "indicator--fe0eae77-acb7-4c3c-9527-307e360d3254", "indicator--f925619e-5623-44e7-a540-0bf2e6319d79", "indicator--7ce53158-435f-4412-b829-0a5f72a6f03c", "indicator--7f8591bc-058f-433e-b701-fd89e051c8a8", "indicator--da90755b-2e06-4e31-b7a1-20ac4b10416a", "indicator--f5f0cfc6-6c36-424f-8da7-2c835d92e6f7", "indicator--0ffe6477-d34c-4215-bba8-c1cb60682c19", "indicator--0872f9f9-e599-4925-ad81-e0ce948600ee", "indicator--17fc95e3-4054-4b5d-a4e7-628b84dfe65f", "indicator--557f0c2e-3236-4daf-b37d-21307d05c13e", "indicator--2399418d-2dd9-473f-afc0-650d597a8805", "indicator--0b0557d0-bf50-47fb-94c0-b1dc1687c317", "indicator--c08b1dba-850c-4d45-8481-1350a86cf96f", "indicator--846d8708-3623-40b4-b500-cc4683af78cf", "indicator--a73d9113-175f-4ba3-9a46-a9bbd300bb5b", "indicator--210c173a-bb9a-45ab-8d5e-0eb7051c59d4", "indicator--4e405c63-6ad2-42c6-85f5-f022894f9e2c", "indicator--479f4ef7-1a49-49ea-a24e-3952b763433f", "indicator--07192ce7-41eb-4676-b113-ce680159ed25", "indicator--d4e14408-1de7-4774-a16b-b504ec62cb61", "indicator--b4dcc1b9-6e34-407c-89a0-4cbfd6365f8c", "indicator--efc9d4a7-6677-4fdf-acf0-f342db1a1286", "indicator--64dc975b-9b89-4f1b-ba1f-e45ad5a93161", "indicator--425c5ab0-8d4a-4057-889d-86dde4e78bcc", "indicator--dc5bd9d2-3132-42cd-95a9-53973bf903bf", "indicator--714dd6d9-19a7-4c7b-8e5d-21a251a56222", "indicator--ba6aaffa-9ec3-4936-bf98-5a05f1d259fa", "indicator--631f0c2f-5690-434e-87a7-5b413fce1e56", "indicator--aad1679a-6051-4de2-8e2e-64ca919a45c2", "indicator--e66f9734-59d0-45a1-a06d-0b3bb72825c8", "indicator--3e7999ce-9d6e-4ecf-bb4e-5f578f2e5051", "indicator--3abf8d0f-5fda-461f-82e9-7fd7c9ef0482", "indicator--c4e5ab99-9d6f-4ceb-9d21-03a386a8f2bf", "indicator--ccf745a8-e88f-41bf-8cec-afbd564b3287", "indicator--18c9a9e8-429a-49c5-b3f9-4c329facd4e7", "indicator--5d4380fb-8d67-4fbb-86ee-b1699057f009", "indicator--ca8f0f66-fd77-4549-a687-bbe631b5731f", "indicator--8c5951cf-cd4b-411b-aae1-f2ccd0c6f0fc", "indicator--c4aadb4a-cc48-42ba-aa0e-039110430e75", "indicator--6cfed453-dd66-4b5d-8256-be177ed4a91d", "indicator--c594475c-d090-4daa-804f-985dadb7d411", "indicator--795e7915-ec18-406b-b6b8-c53c9ac75e2d", "indicator--8b8edd3b-3d50-487e-9709-9dda9edf64fa", "indicator--e4b9961a-3dd2-4408-a4b7-c6f291e00223", "indicator--88446d52-8ce3-4f06-9950-913b94f9fbc1", "indicator--4ccc2a3b-e0c4-4579-a4da-07bc115d1fc3", "indicator--1f3580ee-e087-428f-8b6f-7d8e7ee0ed78", "indicator--d836b53c-df92-4f75-9cbf-11daf4ec0fb6", "indicator--662bb9ff-4a4d-4176-8c80-69c4759195a5", "indicator--29a1615a-0a47-47fa-9e17-74dc61c0c511", "indicator--71ad5d4d-3a98-4094-baac-e53761438b4a", "indicator--388d6973-ecd6-4404-9770-2f6d402d25b9", "indicator--b58f4741-302d-4fb4-940d-f586010afd6f", "indicator--8560cf4c-214c-4b14-9571-175dacf3fcab", "indicator--16496848-8867-4680-9ccd-376f3a5031d6", "indicator--b5d26d94-2fb7-48d4-b5a4-29e1b3c65297", "indicator--6fdc0acd-5088-401e-a420-80267c0e9e60", "indicator--cfb62c8e-d962-4386-a90c-c4956ec281a3", "indicator--ae174fd5-97c9-4a36-83da-3392f98417a5", "indicator--544e38c6-cc8e-4bb8-88ab-400610557239", "indicator--2c71f6a5-ece6-43ca-85fb-636fad135883", "indicator--14a7f4e8-0b3c-4d18-ade6-393429ab7742", "indicator--18a82d2d-15f8-45f7-9b11-d2ab09d5c480", "indicator--98d6c59f-1929-4ad6-afe3-4884b8984607", "indicator--eb38459e-01a4-42a5-ac2d-ca87e575f5b9", "indicator--f051dc99-ebab-4270-a909-b5e4a64be0bb", "indicator--854b23ae-cbb7-46fc-ab23-063c5ef3beac", "indicator--671c7cc1-65a0-400f-9763-0c9b19beca01", "indicator--fb1ead6b-eeb1-424c-9ff2-7c6229698c06", "indicator--2524b2f5-3289-4758-baa0-fe464ff1da5c", "indicator--0a9305e7-ca4a-4690-81e4-1c5c843bb3df", "indicator--61e2be45-d036-4c28-a1bc-a2f19cf92275", "indicator--d2073701-4aa1-4592-89eb-7d99cd5ab7fb", "indicator--bad5e024-9faa-4bed-8f04-b09e424623dc", "indicator--17273a92-3982-4f31-850a-cc9580bcb2bd", "indicator--3fc7cdfe-35c0-44a2-87b8-84fa920e9aa8", "indicator--ae4fc9d8-536c-4839-aebb-d8855a3b5830", "indicator--58356033-8020-4510-bf84-0158fc2ee765", "indicator--95e0fbe7-8b6f-4e4e-a697-24d7025d2c8f", "indicator--a0fd8e20-021c-46e2-892f-dd6c5d7757b7", "indicator--6812311c-e216-4ea9-b8c8-31c183b49b26", "indicator--32a0ee08-6cd9-4008-8121-1b1b88cf3a47", "indicator--e9ef8c0f-8eeb-4227-9eaa-715634c04836", "indicator--014d4b68-0b9d-4c3a-baaf-61c438e4bff0", "indicator--3d1d109d-8e4c-4ec3-96da-25faa10281bd", "indicator--a1eb5b23-8572-452b-8751-13ce43e8b5d7", "indicator--73bd833d-b5ab-4fe7-9a64-bfe789ad18bb", "indicator--c68109ca-c911-4acd-974b-3759f6a1e81f", "indicator--fd4ab830-c500-443a-997c-0b64b8c24706", "indicator--2e538c09-d4fc-4467-8893-25212756b29c", "indicator--946072f4-4a2c-4b2f-8638-552c795274ab", "indicator--3bf4877e-8725-48da-9afa-2747e9b18588", "indicator--8e692f00-652d-49d8-bba1-c9ce630497aa", "indicator--06e58244-9c7b-4549-ad6d-74ade30cbbbc", "indicator--ce7ec67f-4955-4446-a66a-faeeeba887dd", "indicator--2f9fb320-9160-47d4-a75f-fd8723891271", "indicator--b0674527-5ef1-42fd-ba04-a09c8b1e3e90", "indicator--48918096-ea82-4e31-9f82-599da65883ce", "indicator--acafc149-6f4f-47a3-8226-adf828ca067f", "indicator--01274538-3db4-4969-b308-d74fd7217ac9", "indicator--c89050d8-1daf-4398-8154-b4352baf2cd7", "indicator--c83de71f-45c2-4cd1-9bf8-a1cadb421cde", "indicator--a1eb5a63-254b-4fe1-8946-0d1f50e388ef", "indicator--30fc5d0e-4da9-4958-bb1a-a7941e5a55c6", "indicator--58947871-13d1-40a8-9359-4294368e989a", "indicator--934c4197-fc0b-4273-8194-e4717553093b", "indicator--dd0b7313-c0f0-41d7-b43d-43b3a4093987", "indicator--6924366b-3b12-436e-ab5b-6075ced78fc3", "indicator--01f982cf-f62d-4954-a3d1-d0967bcd37e1", "indicator--1541900a-ea10-4a22-970a-425c231d3b70", "indicator--0c8a4eb1-aaa9-4db6-8fca-98497f5dbcf7", "indicator--3cc13496-91e5-421b-900e-2a4c921d2167", "indicator--c4d7fd1b-ad48-48e7-984b-26881f9410b7", "indicator--dbec1a3e-0b0c-4339-ba8c-a1d4c82ebf04", "indicator--b560feb0-b82b-4e5b-a078-ce60a6993d62", "indicator--a5f1065f-85ae-41a9-bdc8-49fcfd5ffa04", "indicator--568e3c92-3709-4366-872e-48e6595296b1", "indicator--d2827fd5-35d5-43d7-97af-20086d976e1e", "indicator--ab0f2c7d-2f96-4f9c-a700-00644272d439", "indicator--3f224ab4-35cf-43c3-9c20-073445d562e7", "indicator--ba89e41b-6302-4cce-a514-6f31a6e82625", "indicator--8835e891-f9ca-44de-afeb-c455acb5bb3c", "indicator--8364bf45-b96a-484e-9a37-ed4a6624aaf5", "indicator--62608347-00d3-4dfd-a1dc-5e4cd8c5f19f", "indicator--2e1ce7ff-934b-4ea7-a8d4-73e7cfc8e992", "indicator--350d41d1-2e94-41e3-a6c8-907e38037b40", "indicator--9f8bd0fc-5698-44ef-9d4e-64a1538b1a44", "indicator--562fb767-5317-41ed-9246-f1437dca8d19", "indicator--64d73dd9-afde-4547-bde9-70d7e32c0df5", "indicator--f5346799-f76e-4744-867d-37eb553a4376", "indicator--021c1b61-bc83-469f-8e98-2e2e9634563d", "indicator--62621220-5d90-4947-9d6d-614ec8f08c57", "indicator--1301c931-8034-4fb6-b7dc-08a198faacf4", "indicator--3b5533f5-60b5-473f-aa86-d05d0aed3df9", "indicator--f34addee-b88d-4c21-8cf4-a849d15ad310", "indicator--8867144f-d2d2-443b-9a2b-8bc862b0534c", "indicator--4a821a76-2fe4-47c0-afa2-c669b7bea73b", "indicator--3f003c45-12a0-4afb-90e7-c64269108b01", "indicator--e4acb978-3c1b-4334-8c5c-9870cc9de91e", "indicator--1037be1c-5445-4e97-89c2-5bec26a91949", "indicator--be6200ce-94c3-477b-9a08-32d9fa50f3ea", "indicator--e0b0122c-8834-44a5-a948-40b932e63e18", "indicator--b031f103-6cb2-467c-8c3c-6feb16bc156f", "indicator--ab732f86-08a7-4523-995e-996ca6c79227", "indicator--13f9174a-b81c-43ce-9a6f-d4990aeea0cf", "indicator--d2dd9a85-58f3-4959-9f0a-d5bde08d6e56", "indicator--69b532aa-ffe7-4286-8754-bba3496331d3", "indicator--3062ee52-055e-4552-92df-8b3fcf85f474", "indicator--0d2c0c48-b7f8-446a-bbc4-001cbd230c5d", "indicator--1747e7ee-0458-48c1-b366-a3918091ce4b", "indicator--167a9eb4-4de8-4635-9317-4c2580ba055c", "indicator--1da4d64c-a17f-4923-8ae4-6b2b0bf61451", "indicator--cd1e615c-adbd-43d4-aaf4-059603d5df39", "indicator--0f4115c9-9e9a-4564-948c-9ce95e7c7881", "indicator--62b99ed0-34f3-42d0-ab87-6b782773a28d", "indicator--3be497d0-7923-407d-ad22-7d20018930b7", "indicator--735aafdf-4fa8-448c-8ae1-952aa79c47bb", "indicator--c46a793b-02d2-42a0-8a02-932478d5a0ec", "indicator--7f262627-581d-4a89-a3ab-b3cae402e0c3", "indicator--426c8526-e8ac-4989-b695-d775e1fc3535", "indicator--43441dec-d312-48cd-8807-a35aca66f71a", "indicator--ad31d976-c057-4d2e-ab2c-dbebad05ceaa", "indicator--0e03768d-1554-4b12-b9bf-6f8f8c23398f", "indicator--4600dc20-c612-4860-938b-3be6efd3ad1e", "indicator--f8387620-bace-454a-8577-418ad41f3306", "indicator--a69673ba-7ce1-480a-8bff-1d06e8f91535", "indicator--be4ddf66-e18e-4e74-b8bf-c179881c8fab", "indicator--049325b3-a9eb-45b1-9a9b-3ecb2ff71d8c", "indicator--d2610fb5-8a2a-48ce-8d38-d0548e35e212", "indicator--9e6f9d2c-9abf-4546-bd12-caef43c9150f", "indicator--9b895327-64d2-4c60-ae3a-d08f913ebd3b", "indicator--ea29599e-667a-46e7-8f33-4905a5e284b9", "indicator--258a5389-ce99-4dd7-96ed-74ee36a6a2d3", "indicator--a3ccad6c-7e2a-40a0-9085-a7cc6e8119cc", "indicator--bbf9c2e5-5069-4192-a6de-ec3c86fbd368", "indicator--3507b1bc-6b0a-4058-b3a2-cf24f81c4059", "indicator--b60dd95c-56f1-4f82-bd34-88f04c8c7a16", "indicator--7167995f-d79f-469f-ad40-e3f4dbb016ae", "indicator--518f7c81-c567-4530-aa91-adf2468dc477", "indicator--a019b4a5-420d-4be2-9abf-091ab42a6c3e", "indicator--4102db30-b696-4213-8929-9012e25b83c2", "indicator--56be7d52-65df-4033-a287-98585a07e21a", "indicator--f6eee89f-5d4b-424a-9410-263d7c4d3966", "indicator--b23d766d-4378-45c1-8d82-3ca2e6a14626", "indicator--33db3147-520d-49b1-87f0-6eb927b76d4d", "indicator--f6dfcea1-ebc5-42e4-a6f9-818f5b8e268f", "indicator--5c115493-f7b5-4c29-8bde-6858c32dd40d", "indicator--6100d4c3-5864-4d3c-94bb-aef630a5dbd4", "indicator--c78c529f-0c64-4a8e-b57f-c881b2ae6424", "indicator--041a332f-673f-4e2d-9795-56e96789d26d", "indicator--6ef6d083-3c36-446e-b8e3-c64bb5ee39de", "indicator--dcaf3417-cc61-4cbc-a649-ab078f232ff1", "indicator--95c915fc-3408-43dc-b83a-4dbc004c3a8d", "indicator--67edb5a8-9e37-4365-ac0c-fc81e3eddff5", "indicator--df55ef6d-3d09-4fdc-a87a-b23b3d31f17a", "indicator--c28e3d06-e184-4c3c-bc4c-71b56cccf404", "indicator--5b04a18a-b99e-4da8-a89c-40a0ea2fb3cf", "indicator--a58dc10c-a1fd-496f-807b-6b60a44d9a85", "indicator--82face7c-7eec-4983-94d2-85e42cbc47e7", "indicator--83a8438f-1690-4538-aee7-52a81416e4ef", "indicator--2be7e2b7-6b72-4abc-9e81-7ded18dd10ef", "indicator--f1e577ef-5394-4851-9518-ed1595b0b351", "indicator--0ebe4585-0091-458d-aba2-4c4295c8d032", "indicator--65351356-f9aa-4b73-857a-d823078e5f3e", "indicator--50d389b2-5f16-427c-ba70-a2142efc2db6", "indicator--4547c61d-2ad8-4a4e-92be-c7e8eac32d5a", "indicator--e37d6046-6e14-450e-bf6b-49f3c2e335b6", "indicator--f937c88c-f856-401e-ae80-b75d90d82063", "indicator--2e548879-6e8d-4c26-8963-947550df3c7a", "indicator--33eef636-5189-4eb6-bab9-166bd408d0e5", "indicator--e5e4ca39-a299-4dc2-8b7d-6302366b4c51", "indicator--95c86c4f-040b-4fe1-b650-94efa318e668", "indicator--5ce689f1-d1c4-466e-89c1-a9d05a30fc73", "indicator--32834ad9-5cde-40fb-aa04-7ecfe3cdb279", "indicator--20a57ed9-f426-4b6d-8030-0b7597b5cf2f", "indicator--268222ca-c61a-4b55-9abf-882b7a61a143", "indicator--f10b06b7-3aae-4e88-8b6c-f1f53d04b834", "indicator--cefee336-8ecb-4734-a17e-05bb8696a080", "indicator--e734347a-8fdd-4ce9-b72c-c5e2eb6d3285", "indicator--7cfed9ed-11de-40bc-ad8b-c2839d541207", "indicator--68e0b1df-fdfa-4c42-a198-35de4742e9d9", "indicator--ebcdc276-5279-425b-90e1-141c922e4a1b", "indicator--eba0e3d9-b27d-42d0-aeae-08f225c23fb0", "indicator--41111a0c-e072-486e-a1cd-058058c85165", "indicator--422e5e18-429c-4f8c-bbb9-b0e68ae32742", "indicator--916ea379-41d9-4c1d-9b44-2855a7c24b97", "indicator--b180d80c-ea31-4cce-8fc9-bd6dfa5ac350", "indicator--0c538d1c-9b48-4f5f-8e02-c7dfab05b791", "indicator--607f85ec-cab1-46b9-a34b-4ea80f43ce05", "indicator--e310d4b9-d1f3-4de1-9a37-dadb152e58e1", "indicator--dc5fa8f3-5bf6-42f6-9dd2-dabcb0269c71", "indicator--9fb164a7-a1a4-46bb-b77b-529f8a7acd0e", "indicator--ad440320-ac54-4b52-b55b-59463b8a9ed4", "indicator--9865a52d-9e30-4b6e-b9a6-80d02e7f4e4b", "indicator--8f81b2e4-e057-4f6f-b7f7-f01b970528b4", "indicator--818acde3-4efa-4368-a86d-5f565fe6455d", "indicator--276fc100-a15b-4fc8-aad4-6e5ea622099f", "indicator--078f0ec1-5951-4407-8733-8e965ab99940", "indicator--0898d015-36f6-4c0c-a638-7f1dce278667", "indicator--5a9f6771-8666-42f7-9c2e-bc2d4cc6667a", "indicator--98fe9404-a2ab-4aa1-a99f-7e88d2981d75", "indicator--0ed3a91a-ace5-4a4d-bda7-b18a2e0672f9", "indicator--bcc80de3-9fa2-4339-91c1-d6e1177d3b3a", "indicator--8ec90baf-09a8-4b41-8b2d-7b492f33ee53", "indicator--459922e4-5787-4f84-be5c-562c73c2a820", "indicator--c2996e06-a75d-4ab6-9d73-412da76e12e8", "indicator--4f70f1a4-9813-45b4-be56-44854c38bbff", "indicator--cb12f49f-fe53-41c7-9075-f32f359a468d", "indicator--b0d70758-678b-407f-974f-db80c6eb7be9", "indicator--c0b91a3f-63a1-4620-8ecd-c902b6ccdf3c", "indicator--1f8e5124-9c60-4bfb-9b55-2c5ff4ed5d62", "indicator--8745ccb6-3033-4531-9fdf-f7bbdfacfbc3", "indicator--42d9f530-13a4-49d2-a89f-8035c83a4946", "indicator--a847de8f-1d9b-47c6-bae8-00e3cb1c0def", "indicator--a2cb9667-d300-4f7e-8ca3-492726e1e91c", "indicator--bd0007bf-6a64-4c55-89cc-8d688fdd145d", "indicator--24dde0df-5f2e-4e37-a299-8ab10d00fbe9", "indicator--199ead6f-b701-4f25-8a52-037525bda1d8", "indicator--5bc8ea90-91f1-48a6-9c6b-3e270372a360", "indicator--298c7707-9602-4ff4-b3b1-48bb6156d1f1", "indicator--8f23f0d6-923f-4bad-837f-77568d727751", "indicator--7399ec63-e5c8-42a6-8c05-b2116e5b79ac", "indicator--09a2bf69-f343-4390-9003-bd5968961bf5", "indicator--35e1760b-9e2f-42f3-bb78-8213b8c6ae0b", "indicator--c0ce0074-7645-49fd-9b05-e50c4d50e71e", "indicator--6387ee0d-92d9-46e7-8bf4-88fe982b8f23", "indicator--e234f9da-7e75-401c-81ce-d807b094db97", "indicator--505a50dc-2328-444e-bccf-d8cbf33843d2", "indicator--902acdef-7aba-4de1-966c-d5ade8bbdb44", "indicator--381b3a82-58c9-4a3e-81ee-4f4580a610a2", "indicator--91ffd0a8-d9d5-4331-91be-68bf9821a81d", "indicator--353a464b-c145-4983-ad54-6e881f92427b", "indicator--8fa7ed7c-7816-4992-8257-f0cbfd9d04ea", "indicator--8d398079-ca8e-4003-b917-aa58beb52036", "indicator--af806878-7182-4b88-b060-f51433924544", "indicator--0a815a19-9756-4602-b3b7-ec82742bd01a", "indicator--166c3ce0-30c8-48fc-9cff-13b464540e6a", "relationship--09055f15-0a76-4c62-8551-c91b7fdf2fe0", "relationship--bdee5405-81b5-44f6-b02c-79ae02750b23", "relationship--3aa4b77e-081a-4a85-93e7-432df0c03699", "indicator--5fe1a154-2921-40b3-9f60-97f675e4bb06", "indicator--bd086901-fb9b-4a04-b5ba-59985625ffb5", "indicator--e354b2b6-7c9a-4e3e-8c3e-4ac236edf149", "indicator--dcbabbcb-7abd-4dff-90c6-b8ef26d2e08a", "indicator--d086d624-bee9-4694-ad82-75227f9fbd3b", "indicator--06c84b40-37a8-4b00-82b8-1dfe03a13afa", "indicator--8701350a-ddb1-4c79-a47e-4936df037c42", "indicator--019f5b46-a7e0-40e7-9102-2148d78a2ffb", "indicator--3684d64d-566f-4a7c-9099-34cf45977df6", "indicator--11328339-447f-427d-929d-b7b7acc16871", "indicator--a1e03c23-c6e7-4d6d-b343-70eb6028899d", "indicator--2d768a9f-3305-48c8-9131-657eda6fc312", "indicator--461df821-64cd-44cc-8956-5bbb6c858724", "indicator--df768666-b87e-4c3e-8f14-9ff22417a32f", "indicator--c801d29c-1e4b-4ffe-a209-c4d07470ff99", "indicator--e277a066-071c-48b5-939d-ad98e58a4404", "indicator--2f7309a7-d490-4959-bc2d-b4beaf37dc92", "indicator--c16fa202-3689-492f-bbd9-ae3f6ce808d1", "indicator--12fc912f-99ef-4a21-83a2-0f06565146b4", "indicator--fa8288a5-7930-404d-b01c-fa6cd1996961", "indicator--8189d3a7-c1a1-4521-90e1-2f0219f3c659", "indicator--aef61448-8d06-4c56-b46f-ed4173eee469", "indicator--67d292cd-e5e1-40b8-a4f7-c2901df05331", "indicator--d6edab93-e88f-4b09-b385-d3f3ac548421", "indicator--295ed1f1-be4a-45ba-a65c-6de3663d3800", "indicator--1ace6557-98f5-4317-8194-df917dc74808", "indicator--20625835-4236-43ba-86df-600d72c6c83f", "indicator--7d84b376-7b0e-4e15-a5b1-7dbb92ea1cdc", "indicator--dac1e6a6-11a4-4673-838d-5a24792908e7", "relationship--2cc48777-9032-44d6-bafe-876d32e7bcb1", "relationship--4c501218-6473-4ec8-b563-9da6f38ea6cc", "relationship--70580c54-69bb-44dd-a6fa-6eecbda804b6", "relationship--650fd8e3-329c-4a5b-b4f3-d361effc072a", "relationship--6b725e26-df90-408f-bbdf-07d5674babcc", "relationship--6b30ab0f-60db-4b52-a181-c6184e6aa2ca", "indicator--3d3e8d2f-0ee8-41c7-8488-0480b77cfa99", "indicator--c0927c80-7390-4aca-abc2-842af135b7ef", "relationship--29a12499-0f76-43a3-a31a-3b903184d4dd", "indicator--01fd5172-f3ff-475e-9d7b-024400ffd569", "indicator--882eadd2-de2c-46ae-94fa-597fc9e6e2f7", "indicator--c72c7d97-7ee5-4b92-9f20-615e06e9b957", "indicator--644ebbd9-d53a-4b38-bcef-d66fcb95eaa5", "indicator--665a5188-f538-4f15-ae33-db9ca3f4235d", "indicator--4285f23f-b17b-415b-9042-7996258e00cb", "indicator--b38455fe-53ed-4ad6-ae28-d75526ccce20", "indicator--03c7c03a-15e4-462e-83ee-5fdcf0a72d85", "relationship--a790d717-24c1-4f80-97aa-5e552e824f97", "relationship--7efc7d01-f0ea-4530-901c-ad2cdd142746", "relationship--9ad9c34f-12a2-497f-a67c-b3b3edb7c81b", "relationship--7924e11b-47d7-4cc7-9cb7-bc28535dee24", "relationship--89309761-eb7e-45ed-b4c8-8a77528e47bb", "indicator--b6caf3f7-d6e1-4508-900a-bab4da1982c2", "indicator--39a8bfb8-7248-44dc-9cc7-8c9acdd10eac", "indicator--6d5cb13d-d253-47eb-adc4-7ac5fc6b472e", "indicator--e49fc6b3-e8c4-45dd-a37f-69675295dc82", "indicator--8185a2eb-87b5-4e18-b4e5-8460f1fd2794", "indicator--7e5b2bda-2fe1-4a2e-832d-922068df0b73", "indicator--e9e49ea6-e40f-46a9-8b55-8fc8020bc21c", "indicator--6daf0372-a920-4358-aa66-a4007a4dff6c", "indicator--71d9e02b-bf1a-4645-aefc-2449942ede9a", "indicator--7635f5db-d114-4dd0-8b6b-fbd7e6148506", "indicator--30d17be5-4c0b-43df-9fcc-5077048eadc2", "indicator--787f916e-3473-4a0f-81cc-523edb431b62", "indicator--78a2f06a-b682-4e6a-85ef-ba11ee32395f", "indicator--a5d41a09-f093-4558-9122-c5c0cf3af187", "indicator--6f8c8450-0bc7-43f5-88cd-b7edaf42aeda", "indicator--d9856133-f3b2-46e8-a2d0-55ca31261385", "indicator--58f685e9-385b-4317-9485-22ebfd889008", "relationship--c00d62f0-a44a-4e7f-98d7-00e163f8b290", "relationship--9a64b022-0a99-41f3-b4d2-19d224fdb819", "relationship--d206ad94-8cd2-4e2e-97a1-10177cb6f516", "relationship--4c304e05-b49d-48f4-92c9-ff2fdab34512", "relationship--00932843-84ff-4365-aeb4-f8b7634a4195", "indicator--14eecb21-93cd-4adf-bd0a-b2dae328f598", "indicator--3470737c-96b3-4928-b720-9255ab488ad2", "indicator--0b6c6cbc-c473-4444-bf4e-2439b10d816f", "indicator--d7a08992-ecea-4c71-8bec-dfd1f786d306", "indicator--f3efc7b1-dd43-421c-94ea-8502237537c0", "indicator--252d7166-0f4a-4f6a-ba50-36579f491291", "indicator--96daa6d2-e533-4093-aa29-f213c051894f", "indicator--cf496592-a674-4934-95eb-90eb27ed54fa", "indicator--192aca9a-a377-4ecd-882e-1bbc979d705d", "indicator--8747f520-9e2c-4b32-b717-5c6cff65a4f0", "indicator--235642f5-2891-4b2d-8994-36e894e077fb", "indicator--82900186-9e83-418b-b7c0-f488927eec37", "indicator--e34c1577-3402-4aaf-ad0c-4e8557fa5156", "indicator--66b04b69-66d8-4233-b676-569b5c300488", "indicator--d27392b3-6b69-4b26-bf28-c078c3f3a940", "indicator--f3de538e-e10c-43f8-8e24-8f28cbd43bc5", "indicator--74cad676-9fa5-4494-9942-1cc7235099a8", "relationship--897138e7-1c6d-49e2-89f4-7a292334a972", "relationship--9358e188-2040-44b1-aaa3-4b0940d31ae2", "relationship--2422bfab-8959-4cd6-a8c4-533eea6fd85f", "relationship--c7d8f61c-5cf8-4fa7-b307-c17aedb72f80", "indicator--d45f14ee-4d61-4920-b16e-f67d367b6bc3", "relationship--8e0a00e4-2b1f-4c67-90a0-8c5fed351ede", "relationship--cc0959e0-4b68-4a42-bd40-76e4ed5946e4", "relationship--7aff7f65-2bce-480d-9b6b-03271eab0781", "relationship--45012489-40df-4336-80d4-479befc8836d", "indicator--c6f9335a-20f6-40f2-8496-629517e24e86", "relationship--e6db1fc1-e3e8-4e57-aca7-59d4bd5225ba", "indicator--16bc6ac2-bcbe-45ca-b8fe-2d7173492dba", "indicator--c650de43-501c-43e1-9f31-21c144bb8ac7", "indicator--7e66fead-0f21-42da-a3ec-e08c4eef1ae8", "indicator--4e59ffd0-96d2-4bf9-a6e1-fcc552372d98", "indicator--b07933cd-72c0-41b5-b344-8a8dcbe86dae", "indicator--ca98c0f3-fcc7-42ec-bbc1-29daf3cd57cb", "indicator--24960ac3-4cd9-4221-adce-985a1d364581", "indicator--ee0fc889-a62f-46ec-aa6b-08606b379ede", "indicator--95322096-c7f3-4375-9d5c-51dd82ce353a", "indicator--a9e026f2-1d8f-4185-a4db-06ff9a9d9ed5", "indicator--20e55e58-8a24-4a31-b37c-d3ecd24d0364", "indicator--cdde4a5a-5bdb-4933-bf2d-765a85fe08f1", "indicator--c3432628-bfa3-458f-9c25-abcb4b147499", "indicator--f54db456-3f88-4ddd-8e35-8d42bd5ee128", "indicator--9d1aa3ec-56d3-4f35-bc39-cbf3133e3764", "indicator--fa220e1c-781c-4e07-b7c4-e6cd45366ef2", "indicator--5626ed68-5384-481c-a0ee-da161fa2aaaa", "relationship--a1600f3a-9402-413d-80ed-e504e0205ddc", "relationship--66602a10-55ca-4497-9fef-d6b5d3a61e12", "relationship--a477552b-dba8-4daf-9466-c3c8b263e0e8", "relationship--5a1b8bfd-0df9-4282-834f-3ea3ec328046", "relationship--d7ffec9d-8de9-49e5-b823-60ecdda7421e", "indicator--f8656669-553f-4cc3-b086-3e38bb2f1a38", "indicator--9cd81447-e4d5-4cb7-a8c8-2e21a7337992", "indicator--084269fa-78c3-4e96-acdd-903e768c518b", "indicator--1bf8aa5b-f1ea-4a80-a3ca-781dcaab0042", "indicator--d28cb27b-5217-47ea-ac9b-60314d19f1e5", "indicator--32679105-6052-43e0-8535-a4890ab18567", "indicator--d1c83948-fca7-4081-9b3f-870d42579381", "indicator--956bec2e-c62c-4904-9641-bb64a63557a2", "indicator--edd323da-2abd-423e-8efc-df0c4504dac5", "indicator--82aea44a-79fe-414d-80ec-cb124558c8b9", "indicator--00c61290-ba75-459b-abfa-e151a3d88c9b", "indicator--bc4af55b-8a81-4454-afbf-413baa7e4996", "indicator--dbb5c3ae-4a12-4c07-8456-83a12d10c99f", "indicator--dd0a0961-da67-40a6-af0c-d54e275277fb", "indicator--8004a55f-ac2b-4a98-a8af-6c9366d4ad83", "indicator--7e9dbe00-adc4-4d6d-aaa3-6042f46be724", "indicator--18fab2f8-4e8a-4de7-bf85-750cc9d27d6e", "indicator--43bf73f6-d9d5-48e8-915e-5a076c28a0d6", "indicator--b6921d8b-2a21-40f1-b1fb-01bb24fc527e", "indicator--72328416-1ffc-47c8-8ccd-e8227675fb54", "indicator--81abf8c5-d0ce-4b39-94fd-600255345dde", "indicator--c82b04f3-3da0-4f09-b271-245edb619b9f", "indicator--1a2d5137-345b-4a80-a6b7-3c6a8145ecd5", "indicator--8eacbc0e-e196-4bec-bc92-3a80937f727f", "indicator--2d667ea6-df12-4c24-b8c1-2cdc07af8591", "indicator--f4e7906f-724e-40a8-84ed-1079f80ea631", "indicator--0a2d40e4-ecde-4dd6-afc7-a7a9e685177c", "indicator--5572dcaa-6d1a-4aeb-82b0-f37140a54169", "indicator--47a38f5f-8d1f-4a38-a86c-9107c7742ff3", "indicator--b670269f-e8d2-4ac3-92e0-02742d2f1d09", "indicator--7e8c8a77-49f5-4dfd-a59b-1e1d23e120e3", "indicator--cda2ea59-84e6-4956-b10e-1b4e73fa00ba", "indicator--8382027b-cca8-42c0-84aa-297e2e962646", "indicator--9cd35105-fb95-4ba0-b1a0-000506d3c2c9", "indicator--87754364-cfb9-44c6-bc7f-d8ecf26437ba", "indicator--4afd9c6f-bbe9-422b-be7c-58e65d3b5169", "indicator--e5f9097f-d91c-419c-b278-528e3d2007ba", "indicator--125ef046-e804-4805-90b2-858691d92863", "indicator--1e5baa12-af97-411a-bb91-4c4ab52d98d8", "indicator--4ab0db6a-7c19-450c-abe7-3d03131b2348", "indicator--cdf4f1bd-58cb-4e6c-946e-6b2cfb6784f9", "indicator--89f0767a-c783-442b-855c-44b4ecd7e5c9", "indicator--3b40d8bb-5a90-4907-8756-109677777ea5", "indicator--6004cc65-33e8-4615-99de-33213d0f0fac", "indicator--c2d2fb59-8637-4536-b521-1ce5fc7280dc", "indicator--a1a32b9b-dd64-4587-af32-1c6f8b591303", "indicator--1e7f1fdb-1477-4b9c-ba02-2e6fe64f8ca3", "indicator--449bb158-590f-41a3-984d-b4ce5157fa1e", "indicator--be1ab65c-3475-4235-9907-01e136b974f8", "indicator--725ae765-95cd-41fd-84cc-b0e26aa13b45", "indicator--8c8ab0f0-b2da-47f6-ba2c-f5f1592111ec", "indicator--810a6ed1-07bf-446d-bfe7-8ad21938901b", "indicator--4026116a-39b7-4f7c-ad53-57b335b2531e", "indicator--54be8596-ef55-480e-9ddd-54526c1e53a6", "indicator--90c6bb77-32ed-4128-af31-945ef15e2a35", "indicator--3a159ad3-4be5-4761-b421-99e4412e4477", "indicator--c65ba560-957a-4cc3-b8e6-299aaeffe5d9", "indicator--f2a17dbe-acff-41be-b8bf-31f1c395fb78", "indicator--17bb2468-d3e4-433c-81d6-5c0f5c0ba14d", "indicator--db52cff5-a152-46a7-83ae-a610f014b356", "indicator--49cdaeeb-edd7-4c63-af27-c12b8ba9980b", "indicator--71ae818e-53f1-4a70-ab0c-97991326ec43", "indicator--cb8e5874-c16a-4fef-bd73-2b1148b3cf02", "indicator--b8f156b7-a2e2-4c64-8873-35c97f8b1cb0", "indicator--ad9644ac-9885-4a5c-be0b-cbf7240891a9", "indicator--6d786054-387a-402e-9840-dd01e139cd57", "indicator--55c1063c-48cb-484b-a99d-72ba0165c3b7", "indicator--fc27077e-e47a-40fa-a5bb-8b8a33d74f92", "indicator--fe1489de-9764-49e3-bc9e-0b6ed8f18730", "indicator--e817be59-a400-440d-b0cb-9b8322dcd1ef", "indicator--61a0b5b6-53d0-4b5a-a8db-ddb2169bafd2", "indicator--61cfa950-1b53-4a2a-acff-42fdfb210826", "indicator--494656e8-3af8-4230-bbbb-6f34771c8efd", "indicator--aa0b067b-d7b6-4439-8ade-d3e69de4df4b", "indicator--17ef3178-8ebc-4d43-a780-67cab0003cf5", "indicator--81b9a529-bb96-42cb-9399-5c54eae7ba08", "indicator--165e69d2-e9fe-41c2-863a-7fceadc1614d", "indicator--9835e7f8-816a-4207-af5f-c9867e0293d2", "indicator--f3be408d-b345-4bf3-bf18-933f09b52b9a", "indicator--5554381c-adcf-4401-8e24-cc28fa50a4bb", "indicator--5ae5eba0-c8b2-4ce0-9f45-38fb5ef027e1", "indicator--aa4d93bb-b04f-4c54-9d45-3ee2b477434d", "indicator--4d3c3cd2-085b-43d1-85ab-498eb9920fba", "indicator--60986ce1-a362-40f7-b7e2-bf5d960ddf58", "indicator--2ba62a07-a700-4b94-a2f9-03b871e812a2", "indicator--17f9ff22-4303-47a1-a195-495000895463", "indicator--7c211dfe-f835-40d8-b324-42f9b05ab9e0", "indicator--2a2341d1-cf8a-454a-9b44-cc8a852187ab", "indicator--f5e7055e-9f48-436a-8466-f510ec00a041", "indicator--750741cd-3c37-48dd-a79c-ac9306cb3775", "indicator--93961d7b-c4d7-4d94-bf4c-b94d8bfa1200", "indicator--909189a6-61b8-4ba3-ab39-216f46bdf5ed", "indicator--9a13e5e5-8394-4575-892c-dbbad3216b38", "indicator--563e99d1-d061-4cc5-9d03-d7f30ac02657", "indicator--bf6dc2fa-0c8a-4b58-9211-bd034002afba", "indicator--28eef82c-461e-4cfd-bb24-799743690388", "indicator--fdbb85f4-b92c-414e-bcaf-7028f9dabbe1", "indicator--fa5cce2c-8d8b-4fa9-8f40-653641a1f461", "indicator--66043d79-f474-429c-9cda-44e9157ab2f9", "indicator--70c50c89-19e0-45f1-bac5-e25c59492e3c", "indicator--455ad3a5-44df-4bea-a792-70971f86f071", "indicator--8155f4b6-af2e-4607-8a14-cf55144d3c4f", "indicator--b297ad9d-9cbf-419b-b256-7766b7ed1516", "indicator--9e993af1-9a86-4c2b-a59a-d08401bbf0e8", "indicator--29a10c06-fd8c-4282-8706-142123f385dd", "indicator--788685de-94b3-4812-ace7-e89e011cca24", "indicator--0b5920b3-8e8f-4bcb-805c-277ebd64b41e", "indicator--5325e38f-df71-4095-9b00-053ebad080e0", "indicator--912721dd-e00c-4806-9c43-825dc1abd598", "indicator--2680a6a2-1b45-4d6b-9081-bd1e18889e7c", "indicator--462eb76c-d765-4354-9f8c-50339ebd3a59", "indicator--e1e90dcf-fecf-4dba-9478-9f53b024f319", "indicator--bd6bdde0-2e5d-4add-823f-1cc3c582bd3d", "indicator--29871ed8-37df-493d-8b73-fbd9b0e85c26", "indicator--e31861b7-6bd2-4464-ab8f-5215dbc9230b", "indicator--f6aa4bbd-b39b-4538-a055-6bf81fa9e8f3", "indicator--6c770447-af7e-492d-b78c-8e7ef49c523e", "relationship--331b5484-6651-4041-86ba-95544cc52a25", "indicator--37963fad-75ef-4ba9-b3a5-4247e74b5f56", "indicator--e14f010b-c531-4124-9592-6a3c41974a2d", "indicator--bf2490d0-9d56-4407-9687-673861fc656e", "relationship--9fc663a7-330e-4978-8a91-407743d70641", "relationship--2c167633-7cf7-4a37-af39-a65a74b6130c", "indicator--6843355e-f3ed-4dbb-ad66-163dedbeeb5d", "indicator--e6d196a5-0c63-4c08-b5d2-c15c2650b8ef", "indicator--e196e138-183b-47c0-b794-56e4cda82187", "indicator--5209e04b-846f-4e7d-8bf3-438cd2ff251b", "indicator--46c4cda8-93b3-4879-bfef-2ad126a08bfe", "indicator--de2347f1-393f-475d-916f-f8971a923a44", "indicator--1e8b8c99-c188-4123-98f9-d4fe9a14f5ec", "indicator--750a4554-b10e-401f-ac87-fb78e16e2594", "indicator--91aa88eb-af4e-471b-8e39-3a35fea06306", "indicator--64162616-b13f-4cce-b557-68cf9a04278e", "indicator--c4c9ce97-7cd1-4917-9a6a-2b742f3cfcd3", "indicator--316955db-d796-4903-ac66-2e6d1e684bf7", "indicator--9c83833b-61a1-45a0-b16b-8384470cdf25", "indicator--d5288d48-a38f-407f-bfdb-4c8cfa3136b7", "indicator--6838ba62-b46f-4470-8240-60f09e65b657", "indicator--ab8ca6c7-d96d-43d1-b0ce-61b29369384c", "indicator--5d798963-9055-46ef-8dcc-073aca193b7d", "indicator--c178babe-2b89-41fa-a8c0-523c86c6b16a", "indicator--813be32a-3ec5-49f4-83c0-f90b6923e8ba", "indicator--a9094472-7e9c-445f-9f13-00e5d3dc9201", "indicator--eb60ad8d-b37c-464e-9e6e-19f7377da073", "indicator--23987c77-9f8e-4918-84f1-b3c86735cb9f", "indicator--1575cb55-21eb-4c22-8f30-2f5815dc81cc", "indicator--60d7ac43-db0e-478a-8e64-c960a9d86a41", "indicator--5e6da31e-8704-4f7c-b946-21bab9755a90", "indicator--9d9fe559-7925-418e-9bf1-2f03715ea9c8", "indicator--b7aec7a5-d974-40bf-9550-4038fc71b61b", "indicator--27517786-9133-46b4-a5d8-3a6d0d7b2013", "indicator--e790b980-ff5b-48bd-a87b-9a60fa1168da", "indicator--07cc44af-7665-4e2f-801b-47edc30b4ab3", "indicator--fbd8299c-2131-469f-bd68-f1ad765756de", "indicator--0b522e4e-047d-43da-b6ea-e01899139f5e", "indicator--592786d1-8c57-447f-b267-8176e15ae626", "indicator--9edf4e15-f059-4829-afb9-c5cd5b959c39", "indicator--cfc0e4c5-451e-4a47-9761-51982b31bcec", "indicator--db749075-eefc-4971-8a87-8c9a1f2f5a70", "indicator--fc61c248-d695-46f3-8f2c-7353d18c2d19", "indicator--053ec13e-d656-4ffa-9ca6-845db11b048f", "indicator--cc7718ea-11ee-4a13-9ff0-53f65b47ad54", "indicator--a2383813-0a29-47cc-b7e3-b2dbbb532bf1", "indicator--b1862041-0a3a-4a85-987a-853ee09e3e7c", "indicator--b5ade061-7b16-4d48-85e5-d33dbc232c58", "indicator--f2b3b8ff-af9e-49f1-ac3e-edce49d5499f", "indicator--b41e1b20-f175-45a8-8e6b-7f229b9b1ced", "indicator--1e0e1828-9be5-4ba6-9ce1-fb36b051c8c1", "indicator--c036263e-1b93-4407-aa47-6496ac03ba51", "indicator--77c519c7-4115-41b9-97cc-4fa762a26e86", "indicator--4b689057-bcee-462f-bfe7-2571e804daf4", "indicator--545627d0-632d-4526-9144-266310a091b1", "indicator--f8a4b2c5-5674-43bd-9e29-35d72408a009", "indicator--7b8e0810-eca5-4b08-b348-95ff844f84b5", "indicator--9390705f-9c10-4a19-8129-71d6bec1e16d", "indicator--f8f85d00-d5f6-4c74-a076-3ca033106387", "indicator--696fcf17-12fe-4d33-b15c-03d79a7ec535", "indicator--ed068058-858d-4ef1-af44-aacce0de795a", "indicator--f262ebd2-ba9e-45e2-a037-4111a6391cb9", "indicator--c18a7f96-e903-4bf7-9e4c-a04029eee9ab", "indicator--37e4187d-20e1-4609-9016-4735c7edf19a", "indicator--04b4eaaf-d2ae-441f-8536-adf236807054", "indicator--248c0170-9bf2-47aa-9ab2-b82d9c631537", "indicator--b4791522-7ff4-4582-852b-a0ddf5ce4c73", "indicator--3a1faed9-59b8-4bf3-ab7b-1c1006a57c45", "indicator--ba5d7baa-9126-4497-a0c6-1731fd7c6143", "indicator--2f9d0f48-04e6-4aea-b71c-2b7af63acbae", "indicator--f48ccd7e-1114-4625-84fb-af8ba6cdf58e", "indicator--12232ecc-6166-4f82-9e1f-f1bef4189954", "indicator--4cb3b9cf-3cb1-4203-8929-bfd560580fa2", "indicator--ff7d487a-b521-425a-abb0-ff91b29baea6", "indicator--cccf1a4b-4f39-43b1-9065-7da27c9ad0e6", "indicator--5ac894e9-65fe-4253-93fc-dacefd10b94e", "indicator--1f0dbd86-2202-4c80-bdd8-29ced8ec8f34", "indicator--1ef478a4-1a1a-4e0f-8275-1f33f1a47b2c", "indicator--da84fedc-177d-4862-b476-d80f2cc174f2", "indicator--a1436483-d55c-4e65-980e-c77b6c8c5a9c", "indicator--0f45e6b5-5726-40ad-957c-da2db0f74173", "indicator--aea6d6e1-1d88-43a1-b6bc-8fe243da9c09", "indicator--3c53fcd8-387f-4512-917b-a59201b2d423", "indicator--b17c5c37-cc30-45e2-9e9e-7436ae4319e5", "indicator--801e4857-29ae-462a-9538-a05aa7180ab6", "indicator--9b3d1074-6b3a-405b-9958-8c86bcee1ce8", "indicator--4b090b6b-eae8-442d-9795-61983102d9fd", "indicator--7089703f-b563-4c33-a76d-ec30bd829521", "indicator--4b766db0-43d8-4cbc-8fd8-864fa210ebc7", "indicator--08921590-91ce-48bb-8513-6b170f24661d", "indicator--694ecdd9-ce3e-46a2-ba8a-ae606e0da3f1", "indicator--af295d51-f3d8-412f-8913-69e6fa8c719c", "indicator--225a8c06-3f6a-46c8-ba50-1b866f27ba3d", "indicator--58284988-f837-40f6-8050-8688b3434171", "indicator--a5ccdc21-4069-401d-a1e0-b2bac5835da1", "indicator--10ea3fa4-87de-4b15-af00-60a1efa59117", "indicator--7d7a343e-6dba-41ba-ad83-b6bf032fdac3", "indicator--45a87855-d918-45ed-ae6a-c23a5366bee7", "indicator--3f48c3c4-0e15-45ba-82a5-a6810e070ff3", "indicator--dfaea65e-6059-4142-9948-df6a45553574", "indicator--825e8316-44da-4b8e-863c-f1500a5b5499", "indicator--9f0f6aa1-ccef-488a-aa2e-91f0d04536a4", "indicator--fef76042-a65b-460b-aa73-72c3265f317a", "indicator--9f2cdb4d-0ae2-4713-ac09-19f991d2e42c", "indicator--9d8bdb26-b7ab-4da2-8b08-4dd8f8b11b2a", "indicator--9df463eb-9e88-4fe0-be7a-6dfab3e5def9", "indicator--0f00d4d2-cd08-4829-9145-272d4ca9c3ce", "indicator--543c9cde-dd23-4070-a17e-a7def634a33f", "indicator--05fae702-fde6-444c-a333-d33eec5c6020", "indicator--2e3d4da9-14b9-456e-9754-d492a704e8c3", "indicator--bae4a8a0-f67d-416d-9839-d111211c57e4", "indicator--da63cc67-3b1c-479a-ab35-baefe8100e72", "indicator--de1e1f80-25be-40aa-919d-995096e9d0b9", "indicator--f9c26973-ddcd-4912-a711-221721dcaa11", "indicator--e58901ac-ee5c-451b-8b0f-5f87ad0dda0f", "indicator--b1169a25-062c-4c62-b279-1207d2364271", "indicator--41d527c1-29bf-4243-b4ed-081824f2e2f1", "indicator--8a8330da-7133-4a1d-b069-ec51f94f45e2", "indicator--cd9c5e4a-732d-4c95-af4b-68c2803491b3", "indicator--6661b200-56c2-4872-b596-e57c5e7e954a", "indicator--0338ed86-9907-4e12-a801-18b482253cf4", "indicator--918ae315-912b-4e99-adf6-0149a88ef4e1", "indicator--37dc9984-0767-435d-aef2-2ea6d065940c", "indicator--6576977c-8231-43f4-9803-ce4eddc02a15", "indicator--d7bbc8d4-ae7d-4504-975b-bada68d96edc", "indicator--c10ca294-f0c8-41fa-bb03-d134e8fd1873", "indicator--95e49c53-99de-4dfc-9663-40485db47ea8", "indicator--aa12c34c-6c69-460f-b1ce-4593f3bdd0ec", "indicator--ba3f867c-a00a-4754-b035-d095ff5a30a1", "indicator--3fe86374-425b-43e9-8b2b-07584d4a6d16", "indicator--29d1cde9-2a8c-4902-839d-3d8be23dd097", "indicator--fd96f871-9e1b-4508-9252-6973cfcdae7e", "indicator--d61335d6-e140-4c04-8a78-79e4d3904e9f", "indicator--aeb04321-54c7-4878-9a49-bea064e1b2f8", "indicator--1b59d3ae-47ba-4716-832f-44ccc39d3800", "indicator--692c4937-fd3a-4f53-9df9-3889ed19c76c", "indicator--4523d809-a64e-43b1-a8fe-a38634d0569e", "indicator--0e1fc5af-d043-46d9-bfab-bed9f774f77d", "indicator--fde790bb-e0c4-4892-9a36-c3be10a9a70b", "indicator--ff7fc297-d308-42ea-8492-f2017358619c", "indicator--36d44eef-374a-4b99-8fd2-df4a04a4db4c", "indicator--78ea9ba9-2aaf-4c38-8dad-04fcba813fff", "indicator--1846ea01-647f-4bcd-bda1-d2a710de7595", "indicator--39cc8122-df91-4104-abd3-a7c44f9a016a", "indicator--ca2fed5e-6ea6-4864-ad4f-f323e3690142", "indicator--e24ede41-2558-49c6-a2a3-78402989264c", "indicator--383ecc23-55f3-4ab8-a1de-6a785bc700f0", "indicator--1a9a323d-ca46-49b6-938f-aed00f2ffbfb", "indicator--383752a3-a3b7-4896-99c1-bdc158882f87", "indicator--4504d63f-5316-4da6-b1bb-572bde0c6461", "indicator--0d0eef5e-43f9-4c00-aa71-10e35a5eafbc", "indicator--578010b6-cf40-462c-80be-6d2e65b32914", "indicator--71c328a8-a59b-4e4e-91e3-873d2902add1", "indicator--b16778a8-fc8e-4847-aba5-3c83f6e88b45", "indicator--7f89b320-c462-44c0-88d8-432315c0d90c", "indicator--3973b926-253a-4e6e-b9a0-4b33c0f23826", "indicator--be3f36d4-01c5-4f56-bded-7a5127c5bb88", "indicator--3546e8d8-0bf5-4328-9875-89301ea59748", "indicator--cac0f103-795f-470a-8f4f-fc5ced76d348", "indicator--22713829-a8ec-486d-bf41-bb417eabdd0c", "indicator--c9c3c57b-0c25-4735-b5e2-361051e12bf3", "indicator--4111e530-e705-4373-a157-38ad95be136e", "indicator--11c6b11f-fbe2-4ed9-8b36-597224d97cdc", "indicator--05602503-0dac-42ce-afdd-112a5b161e7d", "indicator--7cdbe083-a913-4983-8f0e-5c47c37a714f", "indicator--11a77e3e-3112-4e5b-9174-73b2da5d4858", "indicator--db4ded76-5cbc-4d5b-8b82-de9f2e6d02fd", "indicator--92f169fd-a6ae-4953-8e8c-872c94630517", "indicator--264fdfef-68e6-4a44-b741-1808c838a81b", "indicator--13cee8c2-7d80-489f-97aa-20d56c810602", "indicator--1805dbd8-82bb-47b2-bc92-fc49a76af4ec", "indicator--64d18a02-a285-4459-b6cf-67c2902c82cd", "indicator--2137cf7a-466a-460e-8a4e-153788c436fa", "indicator--0f58840b-2ae6-42b9-b8bd-94f4c5c20333", "indicator--72abbf47-7f0a-4706-9896-6ec67bd3baf4", "indicator--921325dd-0108-4706-a780-8a1585b11793", "indicator--82429600-5b80-4eee-bf8c-352f92b0482d", "indicator--36284412-ad5d-475c-b3d8-47a1779c89cd", "indicator--f0af6787-d846-4f23-9209-4ee93864d936", "indicator--c9378f81-f5ea-4b23-8190-a2bec9dcc2c4", "indicator--1c38e616-9e0a-4bee-b6c9-ea44b2749746", "indicator--5285d6b0-020e-4a62-b939-0b77b9153cd8", "indicator--e925926b-561b-47b9-b1c2-65708b49465e", "indicator--58b21ba7-6664-4877-9b7e-e542f4101dba", "indicator--ea731591-31bd-4ee4-b4ae-d0941a3f49f8", "indicator--e78128b4-0b1e-4fdc-ba27-0c6b9b14064f", "indicator--0c450148-728f-4351-962f-79fb3c6091c1", "indicator--97093ce3-eeb7-4ed7-b3e7-fea907622fcf", "indicator--ea49aa82-2858-4c7a-a243-328594f51683", "indicator--1ea94156-dda6-4c91-833e-c5a70733c71a", "indicator--7b71fd3e-2f7e-4c6b-8627-dab140159f19", "indicator--bad15646-ce27-44ba-99cd-1208c525b57e", "indicator--4f912113-b4a2-4e4e-aacb-e1c16e3dedc8", "indicator--a0dba249-5793-4ba6-a3f4-9e225410701c", "indicator--3e101900-c767-4abd-8c68-15079e13a249", "indicator--052d3ec5-9465-43f8-a984-b604a9f00d75", "indicator--cbe29653-aabd-4813-a5ff-3c8d920cf79f", "indicator--2fca26da-9cc5-43c3-90b8-cf9909e6a327", "indicator--b8947bc7-db9f-4c6d-a0b6-b07a6f912afd", "indicator--29abe02f-ec1e-4b24-840d-5ad73f353822", "indicator--d727342c-68b0-4eab-89fa-77192bd218db", "indicator--7b105eb7-a2d0-4fce-9971-15bf7c2e8cbc", "indicator--daebd799-26dc-4a92-976f-bbcdf0fe2c27", "indicator--bd1437fe-510b-40fc-a4f5-bb09ea6092d2", "indicator--3f0af19e-8672-4fc0-8bdc-f89bb1bf2718", "indicator--ce23ec4d-2979-4d25-8940-ba73d96e34f9", "indicator--a39d6191-d622-4894-b467-8e6103aa0ade", "indicator--2c1bc5f8-3efe-4a51-aff4-2488dbd1265a", "indicator--f3cf0e2d-61d0-458a-8024-818d5afaacb4", "indicator--06e6db15-f67d-4a79-9c22-1c7495dfcdd4", "indicator--102e613a-3e79-451c-9bb1-71029a81d381", "indicator--a028b3d0-0bd3-4a56-9e3e-ac50e9c2c4c5", "indicator--5361e35b-7f45-45ea-89df-af3200097f84", "indicator--c8918c96-6357-4dab-9ee8-9ced02972cac", "indicator--14303c04-4c15-431b-b78a-26d0befd3c44", "indicator--6582ede5-c301-4378-93e2-f5ea311ce932", "indicator--3b31d32e-e4ef-4ef8-a018-7a5395606ae6", "indicator--769fbd42-9554-4ef8-a3e4-bda988a2b106", "indicator--073e9af0-5707-4b16-bc91-96f287a967c2", "indicator--8808e550-75ca-4e9d-bf7d-0ecedc9cbcc2", "indicator--2eeb7499-223a-4271-badf-38b5de9735c2", "indicator--72969966-8f44-43e8-b508-9f1419557a19", "indicator--ccc9e301-2a50-4ed8-ba79-c14f3bbb7384", "indicator--22b5e6b8-f0a0-4103-b522-9c87f5a14bcc", "indicator--2fc19db0-1039-4c5f-bd47-bcdc3c657904", "indicator--a6eb0f0f-bf46-44c0-9a55-32a931065b48", "indicator--d5a8dd68-4e05-4c3f-b3ed-72f09cba5af5", "indicator--ce019b2b-bcdc-4111-9a99-79f0709203e5", "indicator--dd9ee5fa-7376-4c93-b32c-27e8c9265b4d", "indicator--68e96de5-d82b-4265-8698-331ac05738bd", "indicator--cbccd3d8-9b22-4f93-b379-553130dbb9f3", "indicator--53f71f28-c260-43ba-94b2-117a0c262523", "indicator--577fc8e0-e1d1-4ae4-9c05-a58ecd6b259c", "indicator--2404c90f-bd9f-44ac-b817-8cadd4b1746d", "indicator--32d87bd4-91a0-4656-909c-abca0b376fe0", "indicator--d2d74d7a-ee6d-4495-b277-c8b7c9164478", "indicator--ff5ee315-8feb-41a8-8e99-63e22746e11c", "indicator--7b97a0ee-7362-4cb3-b259-536c81269cb4", "indicator--5a90eef3-24d5-4fb9-9487-888efda35cf7", "indicator--5daa9f65-a2cd-4217-b6c2-ab17007eeb01", "indicator--82f30bce-717b-44d7-9240-d654e9f38ab8", "indicator--b6b57ac5-a6db-47bb-9e8c-7731593cfdbe", "indicator--bf4f1fb8-5829-4382-8253-164faa18cdfc", "indicator--df4264c9-596f-41bb-9909-51451710f70d", "indicator--b48a5fd0-d8bb-4718-929d-7e67fd995e33", "indicator--f7da826e-9ada-45d9-9808-7f4565a2290f", "indicator--a462cb31-8b28-4e5c-81d8-4d7cc8cf74a7", "indicator--0e260d46-8646-47fe-97dd-d2c4610be294", "indicator--fc46ddb5-c4d6-4dac-a7e1-102ee0e2a358", "indicator--60ed4be3-7cd3-435e-a28d-ff6f25f5598a", "indicator--c4db7b16-aa9d-4742-81c0-12d749e8c10e", "indicator--5d3cee5b-bfb6-4076-a518-7f0ff2dc9a30", "indicator--8c224e62-d845-4f8c-a30b-1ebe5c905f3f", "indicator--46028604-90b1-4a98-b4eb-faac5d112695", "indicator--d17c898b-f721-44b0-b7a2-100816421b43", "indicator--035080d0-13c7-4f92-b981-1710fd66e909", "indicator--308bca3b-f32f-4d3c-9255-906e97a2f6b4", "indicator--ead5da76-9ebb-492c-b3a7-c025439c2a05", "indicator--83de02ad-56e1-470b-b28b-042ba935b81f", "indicator--dc473a3c-c0bf-48f7-8fe4-ff4f3b2c183e", "indicator--b915c794-6498-40ef-834d-7598355b60d5", "indicator--bfb188a6-efa3-4526-a4c1-682eefd12bf3", "indicator--a9468e17-d71b-4860-8428-262acedd9f18", "indicator--b026d616-f5ad-4cdf-86f9-5f84f9c7ed45", "indicator--25478bf0-2a06-405b-889f-d0fc43eb0a34", "indicator--dc5516ce-65d7-4633-95d1-73e0b45d8289", "indicator--7c610fbc-e970-4bd6-b9b0-84be779b5ccc", "indicator--31095e04-5d92-40ff-9cc1-1b0f146a1ad2", "indicator--9a0f11f3-0c54-4fe4-aed9-51186146634d", "indicator--69e240f8-6808-4a91-8f73-faf1d25e8ebc", "indicator--859811d9-4428-4629-854a-2bb71cfa252a", "indicator--19a2d1b7-3bbf-4396-b8f9-dbd9a3cb3517", "indicator--6ef1b3de-6674-42cb-a6cf-dc973fc80aa7", "indicator--e0ec8aee-dc68-4ebe-bd7e-6e9befbf8676", "indicator--89565023-06b4-4296-ae85-1548b89929ca", "indicator--eeceadab-fac5-4b95-bee0-d5913857e2ac", "indicator--f237edf3-60d2-410a-bf29-cc317f962f70", "indicator--7cc32e94-d3e8-47a8-8af7-4ebd0f7028d8", "indicator--903203d6-7315-4767-b4ca-8557a2fd1d22", "indicator--7e858721-50c3-4537-921c-3d62c92f91b3", "indicator--7e737487-f0f6-4e1f-af30-db6adeeafdb3", "indicator--4a3e1fa4-6db2-4b3d-bfb4-c9348227e27d", "indicator--ef38dbb0-ba20-4061-b34e-99c923fc78d4", "indicator--4baa743e-785c-44b7-9f43-352d6571335d", "indicator--6a4ed53f-ec5d-45cf-a98d-e4b4928d4ed4", "indicator--547f84d2-0576-4964-88a3-f96f4fcedce2", "indicator--ab961c1b-adb9-4b29-b944-bafa0ac68fb0", "indicator--b26fb237-9bbd-437b-8d45-01007e2d97da", "indicator--fbfe1e9d-9eb1-4832-8a00-4401021b3ffd", "indicator--89bfdc27-400e-4cfe-96fe-73e4e4db6ea7", "indicator--f8be8c22-027d-4819-9c4f-0dd6832497f7", "indicator--b48a8b49-cf15-4e12-920a-2837a6972071", "indicator--ed72cfeb-6c11-415f-a3ba-437467291a95", "indicator--51497633-3c0c-4e88-860c-d0e6d66b500e", "indicator--2259a1d3-1f5b-451f-a33f-dc5018a96975", "indicator--e0ca3a90-d54d-4ffb-b8b8-0cc822849dfe", "indicator--7f14090f-a444-4054-88a6-cdc243a3f505", "indicator--e5373ebe-bc8e-44a8-ab6d-b5f9f8f59e83", "indicator--352a1ed4-6468-40b3-afd4-b3fb36e64e81", "indicator--a0682be1-2b5f-4272-9ee2-d7b6253a565f", "indicator--11fc84ab-07f4-4448-ae71-ab2cadc6d2a7", "indicator--560749db-4626-4717-814c-e5bf2c53dd98", "indicator--a01634f5-e249-4f29-abc6-78802517881b", "indicator--7d3139a1-ea9e-4833-bcd9-b9b6c05d3e1c", "indicator--f25fc4e9-3812-4ef6-a57f-92129c5203f9", "indicator--04ec870f-203c-469b-8631-da2393b2cdfb", "indicator--89d3ddc7-dd4b-4214-8ce8-1b171c82c3aa", "indicator--d8818fd8-95a7-46c2-92af-6a553e10f6ab", "indicator--c5f28b4b-0d48-483e-8a94-d08693d8e832", "indicator--bc1cbc44-f682-44dc-b02c-7511a33a625f", "indicator--ad6df302-1189-4fe1-acd5-71d4ad8567db", "indicator--cb233ee7-e65f-4209-b8b6-a7468c71c571", "indicator--a01b190c-5ac2-4e8b-9e0d-54ac5288f8f1", "indicator--a396fd40-ec14-4763-96d0-d60c3f67fb2b", "indicator--9d67426a-bd16-470c-8cf1-f67bd16778ed", "indicator--f1585825-361b-4a25-8cf6-69991789f132", "indicator--9c30bd4c-b9ee-421e-8d66-9bcd8771eeba", "indicator--eb122476-68c9-4550-b4a9-d42c4ea25d71", "indicator--296a8046-d685-4049-8c60-6549dfcc98c0", "indicator--f1bb6218-74f6-4690-8c93-dc775d2a45a0", "indicator--07a1d5b3-c8ea-4fbc-b438-435c815d51e0", "indicator--68967f92-4481-4f92-a22a-eb931d646dd1", "indicator--69849db1-eda3-43fd-827b-6676ba29995c", "indicator--7d3b2aca-d99e-4acf-b92b-b121580a2ef2", "indicator--3ef8b0ae-d089-4b1d-a1b6-fb40c3cb19d7", "indicator--ab50ee29-1451-4304-8691-dc18a979db40", "indicator--acb22b19-ad63-4b83-838f-3f027129c178", "indicator--a9300e71-1658-4a35-bed7-3f3f3647bac4", "indicator--9a78ed87-9b07-43c0-b302-aec145e1195b", "indicator--8e6f3304-75af-48c8-9ecd-791deba47efd", "indicator--8950781d-dc21-4f24-818e-2b8f3dade355", "indicator--af818c02-87c2-41fc-84e2-b5017f18b0e6", "indicator--4e1ac279-7ed7-4338-9fb2-2884ca998a27", "indicator--fcb983f0-865e-4667-8742-10cf35354e6c", "indicator--cdbe940f-c642-466e-9305-beac16ea9b34", "indicator--391634ce-b280-4d8a-8bfc-a49ba1bc8b2b", "indicator--113e2141-a087-4f95-92b6-c68a9b6c970b", "indicator--29c085ec-c212-4011-b773-1631c5a57ffc", "indicator--936fb784-87af-4b06-bccb-dd3c7558d574", "indicator--86ea3fa3-9cf6-4ecf-bd50-b633d83963d7", "indicator--ce96972b-3d00-4534-bfb3-34aa1e060b02", "indicator--f4bb9e68-6669-4e6c-a11f-536cd5b62bf8", "indicator--9c10cb61-6e59-4318-ae08-fe2a7cab375f", "indicator--87e3cd2b-9b8e-4851-ad20-bcb697f953e2", "indicator--8237bf70-9b23-4175-bb08-f8e8096e3a84", "indicator--6e4bc58a-0b4d-42d3-82ed-53d4f3be9b9f", "indicator--6e360adc-cf81-473a-8baf-d4672cdc5082", "indicator--98873bdd-4af9-4467-bc2e-a2233440006d", "indicator--e1d4cc1e-438d-4264-8eea-13bb0e716aa9", "indicator--f190d60c-846d-4476-9323-bccf3929d888", "indicator--2cc4ec1a-e4f3-4004-8ba3-aeb96a79dbb4", "indicator--9e5d666a-4a5e-4a56-b74f-b1db02b6e825", "indicator--c8f8eccf-7658-4dcd-8cf7-9d16e0919792", "indicator--c9c12f6e-1b49-44b2-b51a-9e97f0996110", "indicator--66027d1e-7513-440e-807d-562071cbcf4b", "indicator--f262b17b-ff7b-4146-b863-bc6a16ae391f", "indicator--7d131cd3-8baf-447f-8ff4-bbbed6b34963", "indicator--1cdcf408-25f6-4801-81eb-595f438d41db", "indicator--d80f6ccb-9adc-44cb-a8f9-23e47e9f59f5", "indicator--30962a68-6bd0-45d8-9059-8811f5c49b50", "indicator--f04778bc-a767-4127-b89e-17f7e13a513b", "indicator--125987bf-c2db-4fb2-9b55-f6969695bf28", "indicator--e72a58d6-a258-4d12-b302-0e2e5b77c47f", "indicator--564e6692-bade-4c4b-930f-d5db399ba5af", "indicator--4f5483a9-a3bb-4d66-934d-71cebc8fd69a", "indicator--3c9f8104-0850-427b-84dc-6e6ac9905fd7", "indicator--7828900d-2038-4d24-9042-8f3fdff2f7bf", "indicator--a4565bb1-0476-4b39-823e-e5d97a725c48", "indicator--f0d25f15-cd8d-434e-b46c-e76e5ff7d355", "indicator--cca69b7d-c8f6-44a6-97e9-278b1168222b", "indicator--cbb4a220-5571-4e4f-b63a-e223fc8fa749", "indicator--c287f5d5-f187-4033-9811-ccc8889db70d", "indicator--133cb744-a1d0-4a5f-b1b8-fae8565b55c4", "indicator--8b4815f3-eab1-4a0a-a896-3b2c056602a4", "indicator--fe8af0d8-6241-4b1a-9151-10d105a7836d", "indicator--c4145c50-0b84-45be-a632-7bfc443ac4fe", "indicator--f36d874c-7719-418a-a0dc-56863bcc0614", "indicator--0c4eb345-ebea-486e-85ed-f19aa632cc50", "indicator--50131425-903b-4586-9bdc-98ef879d1949", "indicator--ef49030f-12e8-474d-9e1e-7013be47ee2c", "indicator--53ec7034-307a-43f6-ae75-9be2c6f5286f", "indicator--f1e7b722-614e-42e7-bbb8-9406a8353744", "indicator--38d1ddb4-f26e-4cfa-8194-2dba1c60eb9d", "indicator--3e34c4ae-788b-496c-8efb-66541fed7d99", "indicator--af401456-c220-4793-b710-a49416c26984", "indicator--ff64f98b-7135-4777-848f-417eca728214", "indicator--303db442-0c58-4910-bbc7-89059eca29c9", "indicator--919fc8e4-8629-4bdb-98ac-ac6c264f9f1a", "indicator--33d2ada0-79ef-424f-ba33-a7012d4d0d52", "indicator--0f491358-1a21-4edd-9f45-6b3c970f7ff4", "indicator--25759c84-c40e-479b-806a-fdb5e4c6da63", "indicator--61cfd334-d555-40cb-9d29-24a85737336b", "indicator--8ce1310b-f50d-4185-a4f0-4b3dc9f88a21", "indicator--b3115f79-e08a-444b-ba95-1181b42a2c88", "indicator--7b1a88a6-073b-4bc9-9b9c-2f5dfa55d816", "indicator--6f56c3bd-8b92-434f-89f9-dee4eacea072", "indicator--0380930c-620b-4066-a38b-ce373b6d41a3", "indicator--e83eb406-d8f8-439c-8b32-70fcf4816bb9", "indicator--18fba6ce-5c5b-47b4-a781-ba0839533700", "indicator--571046e3-3a0c-48e2-8e63-eef906c6e694", "indicator--572c10c0-96b6-4777-8046-30fedacd5099", "indicator--7c0c6119-11f9-4109-8190-86843538f5ce", "indicator--c7aca7a6-336b-4799-acc7-7262f9b49c76", "indicator--d01f6247-4f57-4b3c-91ac-90a7335450f8", "indicator--59189457-0fd8-44a1-8755-96e16dc67c65", "indicator--edae7896-aa7d-48c9-9b8d-261258b6d7b8", "indicator--30e4238f-51f9-4480-8df1-fa57a89bc5fe", "indicator--70135e75-19ac-417e-9168-21d916a3aec0", "indicator--6539ea78-e67a-4007-b02b-aaea9ad9895e", "indicator--57509119-d3be-415d-a423-6282b39bfe47", "indicator--e480404c-4d7d-457e-bd3a-46257eef8589", "indicator--e706b102-970a-453f-a169-322bb1dbf5ea", "indicator--ee297b3a-edfa-4fa4-9b43-2d432f46100c", "indicator--55a48b5b-2636-4392-8caf-775b060d17d7", "indicator--9b6b18b8-7982-4045-9a06-5cc8e1fe785f", "indicator--0f4e6acd-c799-4a3f-a892-95af22fec056", "indicator--0d1456f3-52c9-4e6f-a212-4022426de75c", "indicator--509ad39b-ecdc-4659-a37a-dc4b0f8fb0eb", "indicator--9ea31f11-92a7-4b6a-bacd-2dfa02c99b96", "indicator--3ad11dee-a8a3-435f-9dbb-4993197c8ceb", "indicator--e1cbf0d4-b919-437f-9ef8-fdac878f4ef4", "indicator--99451b2e-3897-4f93-a3de-7b135fea5dec", "indicator--d510ddda-62dc-4780-a87b-05c7396902d3", "indicator--19360c09-0349-4de5-b7d6-3309276764d1", "indicator--9841d573-80d1-4b6b-b27a-02bdec1da9e2", "indicator--f3ac34d0-916b-4c51-b290-90b9f0d6c560", "indicator--39c01aa3-d419-4926-b0ec-b97205f995fc", "indicator--b22955ca-13c1-4faa-bbb0-d2de5a16a37f", "indicator--6f49f9d8-35ef-4443-8f63-df4d1191f9f7", "indicator--7456803f-db79-41f8-98cc-8708bb88303f", "indicator--8b97c0ab-413a-4155-80f3-7ff14432e821", "indicator--446e94c7-46d7-4415-a3bf-6e5a22ac588d", "indicator--e979b680-7226-4887-a2bd-99a83e46b746", "indicator--54b5b70d-f948-41ae-bc8f-bade5ceb8d40", "indicator--354c7582-b2a0-400a-81a7-e81061bad8fc", "indicator--c7738d68-197a-4977-b9aa-f33b7c7436c1", "indicator--d3a68444-7e91-4780-a98a-082be062e7d6", "indicator--386cb756-a7de-4c37-87e9-a16ed56f5296", "indicator--c45f1712-e9f6-455d-836c-7d99259875fb", "indicator--5fa431d9-ec0b-4c01-b12c-80ebe5298186", "indicator--4418624e-f0ea-4af1-bcb6-b910940ea245", "indicator--8d2fad72-cb3c-4afd-a7cc-b62621275005", "indicator--31d8a9d8-8459-489e-82eb-9cc1b73aab95", "indicator--caec749c-7082-41b5-99f5-e597597e0ace", "indicator--57aa1964-4184-4c70-83f4-c53fad0685f7", "indicator--a283cca0-1857-4093-91da-8916f4b9930b", "indicator--bda0853a-3b29-4da1-9902-c1d6204a5806", "indicator--58e4ea1f-f3e4-416f-b4f5-aceb46b6d1d5", "indicator--8223e418-1056-4b22-9b54-a365ef95eb53", "indicator--39fed68e-3fdb-42c8-9e2f-20dee408d85f", "indicator--dfde3f47-ce51-49f4-9e4f-82271e16c41f", "indicator--9419770e-4caa-45b1-81e4-07c03ad06c97", "indicator--52b98597-9cdf-4a31-be6a-915fe1fb2fb7", "indicator--42cc0e70-038d-492e-abb6-c933c068147f", "indicator--b317cf6b-fcee-4c4e-a027-fc033d588e97", "indicator--186ecf97-fca1-4705-9e20-c819f85ba6a2", "indicator--c88f9852-8962-45e5-86f7-38cb62b571a6", "indicator--36c1e1a9-e98a-41e9-bf00-816ca5970820", "indicator--cc89afc5-d4ce-4c22-92ca-2e583b022451", "indicator--88f78de2-5e08-4986-a640-18e5e552dd5c", "indicator--dff73772-bb1e-41e9-af16-ec4e5f149631", "indicator--b86cb435-fee0-4240-be5a-7eae9066a156", "indicator--3f6453c8-3c84-4319-a935-d566dc45b5ef", "indicator--60a1fe16-d5b9-48a6-9485-fd753c2b1468", "indicator--b0871095-3095-41ae-898b-172d54911695", "indicator--57502214-d239-4d95-9718-615ad316817d", "indicator--3722a126-39ba-481a-9b5d-512c8e9eae68", "indicator--8d42e0f7-12e7-46c4-8d4d-5b53bb31f0ca", "indicator--7abbd088-8b99-4f65-b362-2aaff5eb7eb3", "indicator--d1dc7cea-ea07-43c7-9df2-9d8a2c623cfa", "indicator--a546cb8a-4bf0-4823-9509-28d07f19c5cc", "indicator--8bbb0004-5ff2-40b0-ad4b-641b52b6d24a", "indicator--c7029a25-755c-4699-8521-40e6f492ab4c", "indicator--b9793f0b-41da-41bb-87a1-7449b652019c", "indicator--629c7927-57b7-4229-b44e-e1e0b9f6b17f", "indicator--bec90ccb-ed3e-4eb7-959c-a857f321a7d9", "indicator--4e649c74-ba94-4b57-ba6b-603d01e24aa4", "indicator--b8fc1004-7284-41c1-8eee-b1260f4c00de", "indicator--367fc31d-236c-440e-ba22-0d2415f3e60f", "indicator--4c9a232d-da44-4a39-8284-e0c187dae78e", "indicator--addf72d2-5014-4765-b394-9f61e8635e2b", "indicator--ccbb60fd-1631-4da0-93c9-b249f2112889", "indicator--5ac728d2-df42-4128-88fc-b2b65445f6ab", "indicator--6a2830cc-3605-4aaf-9958-c70bb3ee1c37", "indicator--9910170d-66d9-40e4-aa51-cbb794c220da", "indicator--7db830af-57e8-4bca-8d37-ae9949ad5b15", "indicator--8425a127-e16c-4d14-83ee-e8910dcadc80", "indicator--4471203c-3d95-44fe-8e9e-67ae14e46f31", "indicator--56d457b9-d315-425f-a136-ef4b6d6adf7d", "indicator--4b712cc9-8f40-4baf-bd1c-771a75a3198c", "indicator--59813ffc-03e9-432d-a3aa-ddefa7cd72a2", "indicator--8d7c3635-4f6b-4f02-9c41-307b1883008b", "indicator--0845e1c3-d6c5-435f-95bf-42dabfdec6b3", "indicator--a913bc92-6421-4c20-b30a-9e6e7bd9e7d2", "indicator--363132e4-b8a7-41e6-b3e5-4e663717de32", "indicator--d361f8f1-00f8-452d-9eef-26c2d4fda1f1", "indicator--b518d686-3942-4cfd-b208-509759e70903", "indicator--b78f50c8-be79-4b43-9a10-f43a69d96fe2", "indicator--78bd1193-0cf0-4c03-8fb8-51382e9806aa", "indicator--88f3cc54-974b-4a75-b300-30cf343d0aa9", "indicator--bfec3088-5ebb-4ea0-92d7-99f8c3c06bc7", "indicator--3c4020b8-2c18-4367-b48e-46da0fc64254", "indicator--f3e0746a-de91-4103-893c-283870cbe85a", "indicator--1db161ab-02dc-4d0e-8ae2-1ba339a975a2", "indicator--54fa6cb2-bc94-4317-9de8-d6dfb168bf80", "indicator--d9f1334a-8bcb-44b3-b951-e17ea3a0637c", "indicator--85e4f9a9-07a2-4397-b12c-3989f1e476d7", "indicator--2e8fc695-cbe3-475c-acc4-c15c95d05a70", "indicator--2064fcbd-9673-412b-a033-b68e862d00b7", "indicator--4e660427-e706-4917-9ff2-bb1bb8994439", "indicator--9cd61530-ae03-451a-82c9-a13ee7a74240", "indicator--cd0d4640-955e-46c3-a4e0-d22cce1b9c04", "indicator--4ffbe5f2-ab19-4e32-92bc-31fca303d9eb", "indicator--cf176a70-2f99-4294-b1ad-3dc652d8163d", "indicator--5f05ba90-e458-4424-8a82-eee4261804f9", "indicator--88eb485c-f231-4d91-9209-45d666f4677e", "indicator--1999e2eb-28eb-4df3-9216-78aa59d84533", "indicator--c41a9401-a568-4002-a4e9-8d1869be371e", "indicator--a6843906-cf78-42e2-bc79-18432e5fe740", "indicator--974b4624-f3af-4b1f-ba14-b84d5f5315fe", "indicator--c3f35a20-f0b3-46e5-bd32-9730225bdda9", "indicator--d61c3f23-50e3-4837-8367-9d779aba935f", "indicator--7b5925f7-3845-466e-beb9-536ed76afc0c", "indicator--d0e41d25-90b4-49a8-8272-55f03d4d5e90", "indicator--3305f184-7e53-4e3a-b669-5f6938b1fce9", "indicator--4782c0f3-2e9d-4a4c-a7ff-8aff29e85e87", "indicator--f22a7a1d-d06a-42e2-b604-f5c6da416b07", "indicator--1f8288c5-8548-430a-a981-2c014729dae6", "indicator--628950d1-8efe-4e24-9735-c138108a6560", "indicator--dbd9346a-a4ad-4e67-b149-345743347e4a", "indicator--ae73ca79-4f75-4fea-9129-b5ce90a0ffae", "indicator--ab73fe54-3c9e-4ac7-ab11-13ef337904ac", "indicator--c212a5d2-4132-4ca0-867b-6a82cadfdea1", "indicator--3c2cacad-da62-4591-86ba-e6a96aa99518", "indicator--7bf24340-e3e6-4306-8542-8463ddd23bfc", "indicator--1e75a960-cb14-4391-8e81-63c7d8b2ade9", "indicator--eefca3f3-9537-41c9-a0fb-f2ebefc23abd", "indicator--8d0be440-8bc3-41ea-8113-67eb8132536b", "indicator--79f9d062-5e75-4e02-8866-0701b4028bf9", "indicator--b1808d2d-474e-4275-bee1-9944c12c55dd", "indicator--6358b1a7-0ba6-4cde-b799-3551091347f2", "indicator--31326eeb-d793-4cd7-956e-9801deb57bab", "indicator--22d1fb21-7e67-4b2b-bcf1-01a63b4fa6d8", "indicator--77f3e474-da1a-4c5a-a1ff-6bbd83c822cf", "indicator--adb5e9e5-ea5f-4595-b9aa-9021ac0310a4", "indicator--457fe9e7-fbb4-4492-8e8f-36a667593a34", "indicator--baf0f34a-9068-42d5-a546-c49cf9b3b02f", "indicator--6e509d17-85f3-417d-a4de-6474d718f832", "indicator--52bc6a37-9cae-4c5f-b621-294698a1ed9f", "indicator--ffe75bed-b9a2-49ab-a6ff-59e75ec85527", "indicator--595bbc9c-da7c-47b1-aee5-0301288556ba", "indicator--8499a660-bc3d-4e4d-b6f6-88fda82fa2d1", "indicator--f9d7db47-d827-4dc9-8644-11575bf8c022", "indicator--21a671b5-5c8c-489a-bcaa-469ff6dbe171", "indicator--a05b546b-aa11-4ce0-9c5c-8b227a0cddb1", "indicator--95d74eec-a8c8-4ad1-a509-48a2d425fb62", "indicator--1394266f-2846-4667-a61c-a040986ef4e2", "indicator--7018edf2-f855-4490-9714-698dfc37b673", "indicator--36e8e5a6-2e8c-41ba-a488-edbb10757231", "indicator--a294a7f3-7293-4e4a-8d0a-92a764f2f87c", "indicator--5d5dcaf7-92f7-4753-90c7-ec7e392d3600", "indicator--52dcdf48-8f45-4a95-8c7b-956641b05152", "indicator--a946449c-3dbe-4cda-8e5f-0e9451bbe80c", "indicator--1ddfcb97-797c-4989-ad83-21968dfe5869", "indicator--5d9bef60-4fda-40dd-a40d-0bb506fea7aa", "indicator--331f4d2d-82b3-4808-81fa-d90c634fb8d3", "indicator--bd50a4c2-66b4-46be-8672-f34fb779915a", "indicator--b1d5288b-0398-4be9-827a-e176ea9db873", "indicator--3f648e38-f9e3-4761-86f8-c992d2b809bc", "indicator--e7f12824-420c-4648-9aff-258322e2d25a", "indicator--50bd1d1b-6a75-499b-8eeb-6924086e92cd", "indicator--7e75f7c8-80bc-478c-8d05-ad537ca19715", "indicator--72560bce-7b4d-4fb1-b51e-acf1e267fe83", "indicator--1f5d85e6-a429-4497-968a-a7fd877a3211", "indicator--9658e5cc-22cc-4d54-9494-95be92145969", "indicator--b354c901-747f-410f-bebe-1111eae9b3b2", "indicator--2cc5d2f4-3e52-43c3-8334-1b2ee7d7206a", "indicator--c12a84c5-fcbe-4247-aa96-87ca51c33add", "indicator--61c102bf-b3d3-487b-90ae-f3d3306bb280", "indicator--b388dcd1-2ae6-4eee-8cf3-e5aa45c39596", "indicator--54fcfbad-4030-4f19-b13a-24b1da0a25b4", "indicator--86eff03b-01ba-4fc9-99f9-54fc9a07b94f", "indicator--3d34615c-92f2-46e4-9873-601dc9f173f4", "indicator--a6bd37d9-4042-476d-986c-60aed4cafcc4", "indicator--af7ad86f-04e8-42d7-b8ef-4e463405ac7c", "indicator--b2893d7a-d75c-4ccd-9012-3fb79d914d46", "indicator--30985c10-6692-4e1c-b57a-d40e2b95fd0b", "indicator--d7c094c5-3a75-48a9-9564-5f98a6d97536", "indicator--d0fb5ee5-6f63-4db5-a536-da78052c8ac7", "indicator--cfff528c-e807-41ab-b3fd-79e10bf5cbaf", "indicator--d1870d0c-b6d2-4eed-aed2-7e0c43290cf6", "indicator--5c51894a-5b1e-446e-92d0-7233bc2c23e5", "indicator--a75b04de-0a03-4d2c-a097-666dcb7e4391", "indicator--3907bd26-d5fd-4f77-9ea8-0c46a89727aa", "indicator--535d1285-6583-4fd2-8189-7a673854e1c0", "indicator--c8561767-728e-44bd-a0d7-4329d71d0e25", "indicator--ebb94f5b-f426-40cd-9af5-39d5bd98b881", "indicator--8ba92748-1e12-40d1-86b2-503f5d593da9", "indicator--1e5585d2-c735-4687-8b7a-a70e18e5d7d5", "indicator--64acf4d2-5ed3-48e3-b2e6-fa35360e1ceb", "indicator--ea29c058-b287-4f1d-8fde-974dec9792ea", "indicator--f830d24a-0376-4d23-8e8d-f159a1cfa2d5", "indicator--dbb24dec-2ff9-426c-a50c-f538921eeb60", "indicator--f6261417-15a7-4fa7-813c-e7d924e54799", "indicator--6d7ff765-3498-4651-8e1c-1f76dd0f8628", "indicator--58bbdfc2-1a6f-44fd-b11d-bfc1d2fc770f", "indicator--e3622f22-8c29-44f9-8fcd-567b889fbd84", "indicator--3dbb2dc0-27ab-4f16-81a5-fa1780802503", "indicator--d71f0a44-b614-42fa-8407-cdc8fe9b3d81", "indicator--9bc4fe64-36c2-4ad2-878f-1451ca4ba2b0", "indicator--4d15dc66-0d0a-4e95-9989-b82f56e82a69", "indicator--5b09d9d3-2630-4b47-af88-4db42722860b", "indicator--f63fd68b-b98d-493a-95d3-fce85db6e9e4", "indicator--3676ade6-9362-4376-bb25-0c6521e2d2e9", "indicator--61780efe-3899-42ab-bbbc-fd2a7dbf11bd", "indicator--3ddb277d-5adf-4315-8216-49d07b9dba9e", "indicator--2ea3d6f2-4c21-4f45-bc8b-a5a53e69c09f", "indicator--0783970d-5475-4c4b-8a5e-c71aac9fd5a3", "indicator--4d0d3e4b-9802-40ff-8605-b4b26e746b59", "indicator--d7d4ab12-aa01-4a24-8350-524c6ace9cb6", "indicator--dcde111c-40ec-43c5-83ea-55f7571a69de", "indicator--9c09b06b-e5e8-4f82-a7f5-d51df4877bc1", "indicator--e892b8f1-04cd-436b-8b6f-de524f4a17d9", "indicator--b4290085-d89a-41ec-b6ca-9956104fdb53", "indicator--b51bd981-85b8-402e-aac7-c3ce8e1ae6f8", "indicator--97106c82-1054-41df-ba40-af27e92bcaf0", "indicator--fec5470a-9c81-4df1-9505-7a65e18d8108", "indicator--405886ba-96d4-4caf-8f4f-ca9170fda540", "indicator--2655287e-a156-4670-a3f9-1e49cd67ba6a", "indicator--54796870-5ed6-461d-958b-22fa1a11a375", "indicator--db7b9803-79fb-4eb2-9e99-11d11b775161", "indicator--fb4bc7b7-1e13-42c2-ab49-bd6057a1c133", "indicator--d9fb69b2-0e35-410a-b6cd-0d32d2fd4496", "indicator--36e9730f-084b-4c9f-9d34-9ebaa316f135", "indicator--14ff9802-fa21-47f7-82c2-d7ec2149cf69", "indicator--33627c35-ae81-4199-bc6e-ade7bbc70e60", "indicator--dc1904eb-d236-486f-848d-377721cffa03", "indicator--dbcab393-6f63-4dfa-8c07-2db19b02fe78", "indicator--e7f6c767-3522-4e61-bd3c-fd8f007e6e46", "indicator--81c7dcf0-6c3d-44db-b910-06340854018a", "indicator--5e05321b-b5a4-4b34-be4a-932d40d3ed77", "indicator--21619b2c-fefe-4b83-ad90-0a7298247590", "indicator--d224b390-df6b-4a02-9674-13a40f74e49a", "indicator--fc4e9756-b3f0-4082-a9ec-b3df02659af1", "indicator--45d6a167-ae65-4f86-9d4b-f3e5a02b33f9", "indicator--6874c73a-c92f-44b7-ab25-013c9277b043", "indicator--c5ff1930-c31a-4326-97f7-954765654d70", "indicator--8fa5eb6f-a081-45d7-8e6a-81829186977e", "indicator--c927bee8-3a20-49b0-9f84-359d50bb9f7b", "indicator--77743dac-4042-472b-899e-a5960588cc8e", "indicator--c7349549-d3b2-455f-b2bc-9bf44ffb6ab3", "indicator--6cf6bf3e-9f48-418d-867e-0d28ceac39d6", "indicator--1c4ba238-8cba-4e71-abc7-bcc65788e75f", "indicator--7e0660a9-f7bb-4ef2-bd29-b867119cba37", "indicator--eb1ae57a-4b9a-4c63-be74-6bd964ca0b35", "indicator--09e3e868-8ecb-4649-aaea-f755267ee545", "indicator--81e6eebf-b9a1-42e9-8eb8-a8e907e8686d", "indicator--cd975549-8523-48d0-bc68-57cd41a25b91", "indicator--cc31d951-8c4d-432d-ad72-c5b956ff10fa", "indicator--d33c54d4-c5ed-4e89-bbfc-ec53aa378a8f", "indicator--5a2e1201-c031-42d6-a94a-9e86e1b1256f", "indicator--6ab53a2f-443c-4e5e-86e4-64c257cd7924", "indicator--1639dd57-e381-4abe-84f4-c074bfd88f9c", "indicator--249b9200-bdb7-4e46-9aef-1266a8df578d", "indicator--f3a0b7cb-c976-4b16-9161-a836cb0c27b2", "indicator--4f686c61-76ac-4478-b416-d213e6d55cab", "indicator--c23b9742-d56c-4ca7-8c1c-ca411d98a5cb", "indicator--df06a518-5511-480b-9acf-93edca54f424", "indicator--ba7eaeb4-c9cc-48a3-b086-69382ca5a09a", "indicator--123897d7-f5f5-404e-b91d-33837e445e82", "indicator--2e206e83-1e11-480a-9698-e093960e8624", "indicator--36d4a8f9-95e2-451b-a69d-ed54ab24c336", "indicator--1472942c-dcef-48f5-9b3e-a6b8d0198fbf", "indicator--a670143e-72bc-4587-8018-11a2f187968f", "indicator--531c93e8-ade4-465f-a0db-de2f454e5cba", "indicator--596498d2-a97b-4624-8384-ca6fc4d172b2", "indicator--6cda1f47-97b8-47e5-a0ad-8925a323a814", "indicator--c64c77aa-658c-4610-8b9b-fa60c9116fba", "indicator--3a9ae02f-1d9a-4f3e-8a3d-68d2a670cc3a", "indicator--18bf3a66-9163-4d96-b0fd-0f4999e4966d", "indicator--dd74e3db-338d-47fe-958e-da07b25998ed", "indicator--99ab4814-cc9c-4860-8bd1-569e97f10304", "indicator--61015335-1865-49c5-b954-7259c17a63ff", "indicator--b662fbe6-65ba-4bc9-9ad7-50ee694df360", "indicator--e7b87e97-4504-4c5a-b6e6-fbd576eab85a", "indicator--a53e2670-418f-4ee7-ac0b-45a2fc4cdb59", "indicator--6cd4c938-e270-4872-a3fd-094113317b8b", "indicator--3fcd3107-ebbc-41fc-8a3a-aedd7e25d517", "indicator--ccef116c-15f1-4847-976f-aa8748f5b0e8", "indicator--d6dbd03e-6966-4c05-9d31-2172403fcd96", "indicator--bcf20111-c564-4e4b-adde-ddaa646eec17", "indicator--34f07a58-92e3-4032-abc9-3162b7284e04", "indicator--9c86776f-5dfe-467e-a202-7c958a2c4a5b", "indicator--fb0bc465-7916-46bb-8760-493750a90d88", "indicator--03f8a63f-1cdd-47e9-ba23-4c881bffcb49", "indicator--bcb28907-0267-4ac2-b30c-03eee7e9374e", "indicator--3dbff42f-53ed-44ca-b157-40f6bed98499", "indicator--183dff89-fe89-4711-985f-d153e60d1c14", "indicator--688a2c4f-cf2d-4e94-89c0-422ca2d1a78a", "indicator--02e26dfb-1c35-4087-8ec7-6a0bdf743997", "indicator--f0421ad7-d206-425c-aa91-04b1f8b79d81", "indicator--306c34ca-bebd-4747-8caa-3d0f46965e0f", "indicator--204f9113-c84c-4e7b-91d9-821c9b353b94", "indicator--ad41dd5e-4813-4a83-b2ee-11b22fd1eea0", "indicator--bdbca9d1-bd3d-4142-97a2-8b3445f4eff3", "indicator--d537d325-9f70-45f8-8360-689c3f4e7ee8", "indicator--14fe9a7a-c6f0-47eb-a4fd-78014e516644", "indicator--55e9a2d1-a764-43b8-afb0-8f798bc631ef", "indicator--dcb73a63-2b71-4af6-8e5b-978e493d5962", "indicator--c394e323-1e55-4a94-9609-bc879ac7934b", "indicator--a565d3b7-35a6-4f21-a7f0-06d7f6d540ba", "indicator--0476c21c-d3d9-49c7-ada6-eb3af97fa968", "indicator--fc51f14d-5f5d-4971-8e31-f7913c454f1b", "indicator--466392c2-de0a-47e5-9985-091d6b3cd5b3", "indicator--bf97ca77-cc03-49d1-94d4-b8ed3e342217", "indicator--7af154f4-5a64-4954-b193-58bc2133f270", "indicator--f140971b-9d13-4f69-8ce9-f4f558aef4a5", "indicator--70cd3070-b531-401a-add9-d068a1d3541c", "indicator--33283beb-b07d-4437-a4ce-faa4abc1e2df", "indicator--7dc67024-ff42-47ae-bb4b-39b064e6237b", "indicator--83afb584-5f3a-4b59-ac32-8ed1ddd4e7ec", "indicator--2a26d0fe-fed7-426a-85c9-84462c6cfe11", "indicator--5ff060fb-0e18-4a3c-b028-7f6e41ec39d3", "indicator--5d326ed5-c6e2-4a2e-8b1f-6bfc820034b5", "indicator--dea869de-48dc-46b2-96b1-5484ea7dd2fb", "indicator--1055c95e-50e7-4eaa-ad45-2ce6f79d8447", "indicator--41ebb20c-cb38-401d-b892-5d82c8f08f7b", "indicator--2a7daf2d-f11c-4dd0-ae47-a8543451ca1c", "indicator--8fcdf897-3335-4112-9bd1-5e63a24410c9", "indicator--1e037609-7422-46d5-b78b-2b3398f22b41", "indicator--fbcba403-7404-4478-8cd3-a7654474803a", "indicator--e4f28347-80a7-4dad-8786-c9222fc82b17", "indicator--7849823f-2c64-4329-82c6-e6b4a6339fd8", "indicator--b5bd2327-3b28-4b27-b114-0c03307d908c", "indicator--cae36ee5-2a47-4fbc-8f35-b8d327d8c910", "indicator--3070430c-d749-44ad-a701-d2bacef3c1d7", "indicator--0127a0d3-ec79-4708-84da-e682212072ec", "indicator--c6e4a5fc-07fb-4c7b-9ed1-df9303057aaa", "indicator--cf2f2d91-3bb5-4210-b9b7-766f88a67a73", "indicator--f10e7085-9509-4a12-9391-18d9a6f77809", "indicator--ec33ab6d-fad4-41f1-adb8-6d14c61b4d4a", "indicator--86c8bab3-b9cb-4ede-963d-d00a0ed3eac2", "indicator--9fbe4d81-926c-4db0-b75e-15ea27a2e7d8", "indicator--44ffb19b-44df-42ee-8573-2ace4a497269", "indicator--ca0a7c5e-8980-49b2-888c-769c96b4604a", "indicator--02c00da1-f9bd-4b8a-8805-dafe10cdcb7f", "indicator--5715d74b-dd10-487b-8d77-89f044150498", "indicator--414bf3f4-b4ac-4c1b-b7ad-8fa5e119cade", "indicator--cac2eb3d-3164-4751-b88f-cce334caf330", "indicator--31134826-bdc5-44c7-b1a0-44871f0f62f3", "indicator--75287b89-a48e-4d13-8a6d-68c3b4406b2a", "indicator--4bdb577d-5f02-45fa-b302-ce9a9923e969", "indicator--423440f4-9112-499e-9f4b-df09da5d4ef0", "indicator--7447a62a-6274-464a-affb-59682565a0b2", "indicator--20eb45ec-4698-46c2-b137-bdb6b7986204", "indicator--895be419-bdc3-4be3-aedc-bde3ad2dbfcf", "indicator--1465eff9-7f34-4a14-bbce-e5e90b03b17d", "indicator--02ade87a-f704-4848-ad82-c79c50ea19de", "indicator--dca453ba-7bfb-4c5d-ac58-f299a6765eae", "indicator--0fa68867-3e6b-4a0c-8523-80eab5e68de4", "indicator--bf28d6f7-89db-4e55-b67f-cbf5e7485a8c", "indicator--16707e57-9022-4e9e-9526-7bd7ea585931", "indicator--34a452bb-4cbc-49d1-8c79-4119f0a23991", "indicator--cb6c468a-651a-43b8-8707-480afb549a45", "indicator--d38136bc-8119-43b0-8c23-16499f377035", "indicator--b4d639a4-c342-48f2-9843-d2f581f74c65", "indicator--d0eac1b7-1c99-49e4-acfa-d37b3befd65c", "indicator--2339ec50-4c43-4cfc-9b97-409b641c7f00", "indicator--32fadf0b-2072-40dc-8bcd-7ab91a10db1b", "indicator--ce0a25ff-3753-4d08-a1f3-a36bfca539db", "indicator--e5ce05e2-31de-4317-9110-978d9adcb051", "indicator--38389740-4c33-449a-b882-2a3d817ce478", "indicator--dddd14a1-cc13-4d25-b614-8c2a177ca61c", "indicator--e6a6f89e-65e3-42eb-8003-48ca11678589", "indicator--dbb09b03-238b-476d-8c6e-de7780857a78", "indicator--7473cf4f-b4c9-49bc-8fdc-b623f52a2e2c", "indicator--e4fa9e49-4f9a-426b-8388-94017cd1b81e", "indicator--e5b29b77-7b5c-41a0-9b0c-21257acff84b", "indicator--4d9b2260-fa58-4e8f-81e7-1b1a067a53cd", "indicator--2706b3ff-db00-4482-b567-7826c4726484", "indicator--09fb24f2-2cef-4355-8d62-5b964d080931", "indicator--b92f4046-5529-4cbc-aedd-e25f89dd8648", "indicator--2af04531-c7ea-400c-8b76-0c8cc9dd2cb9", "indicator--3d206402-0dc3-4671-8eb5-f8dd12ceaec0", "indicator--16ba74ed-30d4-44af-bb3d-5d7abf3fb6e7", "indicator--3856ea6d-de60-4292-a633-13d4ff452ac7", "indicator--47b0a08a-82b9-4fdd-9d35-82492f119e89", "indicator--383858c0-c3d7-4af1-bcf4-3cf29cba2636", "indicator--3d33f76c-c26f-468b-9e42-d1a7cac06115", "indicator--35535644-854e-4f44-91ec-f475648dfd15", "indicator--866a9d81-cde6-49a1-81f1-4584564d2c17", "indicator--1603fe00-56c1-4826-9387-6315043e94ad", "indicator--7a3e3616-e80f-489e-a3d8-51c21f3006d7", "indicator--92c2b40a-9f1a-47ea-9bf7-59ee3ea493b7", "indicator--db8948de-83da-4456-ad0a-c259974223fd", "indicator--c081c2d5-4cbe-4539-9eab-2c7881858440", "indicator--189a4cf0-66b1-4eea-9a50-d14c9b17370e", "indicator--452b4b7e-dfc8-47d3-b55b-3491d59dc384", "indicator--9d3bf349-b621-4143-b191-165492e47813", "indicator--da9753ea-26f1-46b4-84b8-6d1c6b8307ce", "indicator--cff7fbbe-da0c-45f9-a316-79e8aef6719d", "indicator--ee571d36-15ca-46f2-a377-cfba07c97e96", "indicator--dd314a5f-29d1-495e-a71a-fef6c00c4c05", "indicator--887184aa-a27a-437f-b753-50b49d78d4fb", "indicator--057cc3c0-fc32-405f-b7de-e793737f6f42", "indicator--0fadcfa6-4765-4707-821b-f239b37d1315", "indicator--7caa0931-8200-4008-935f-b8d84618419f", "indicator--ac559021-e515-45a3-8adb-97c9ed28417f", "indicator--b6ef53a4-f193-4132-836f-ce8df714ab8e", "indicator--16445d9f-df16-4214-bbac-12cbaf1b5555", "indicator--beff241f-e013-4ee3-a240-4ae5f53307ee", "indicator--84496cb8-6c7a-4cf5-a718-9f3ebe5b9c44", "indicator--8fe3f663-91bd-4576-87a6-7c369b6b8d2d", "indicator--109633a1-48bb-4913-910f-73850416b61e", "indicator--7ab857f1-654e-48b3-a6d2-e0dab44762ae", "indicator--aae4ba1b-640d-4a3b-a3c3-fff2148e8c35", "indicator--622b21b7-b231-4253-ba12-7e78ae678611", "indicator--4345230b-042d-4cbc-903a-7e7a24cf11ef", "indicator--f6fd178a-1159-4b97-9c15-5f1a55405ae1", "indicator--e8e0a211-69c7-4a7d-92e1-e4b7aaee0a40", "indicator--2556a987-9e08-446a-ba16-8a2c6dcb2f8a", "indicator--e43cb02a-1d05-40c8-9e05-81bdc2e44aa3", "indicator--436f5456-b346-4ab3-bdfe-eccb41d67e21", "indicator--82bd7e6a-1f53-488f-80e1-7fa096f536ae", "indicator--076983a3-3a60-462e-a3b0-d781df1feedc", "indicator--39f04f2f-efd6-46e5-8d8c-9b2b8c70a098", "indicator--0fe88231-0e64-45e1-a8ba-3ba3355415c9", "indicator--a187ecaf-3a55-4702-b4ba-b6ebae5e2eff", "indicator--678a6f04-bdc3-4a8f-b8b9-cff346a290d4", "indicator--318a396f-6158-4d2e-8378-15c8c74b5cec", "indicator--f7c5effe-de90-4803-b43d-47f49a6cef64", "indicator--313d68e9-e086-47d4-8bda-10bb8d878f28", "indicator--9408ae0a-8f67-4bf6-ac07-786e89fd5938", "indicator--6a599dbf-8c72-422d-8432-fcb0bb03a5ab", "indicator--7384f396-1961-4e6e-8dcf-7459166305e5", "indicator--f19afa94-73ea-459b-bdd4-08da8470cc13", "indicator--1c769a6b-6019-4453-83e6-74860714a44d", "indicator--37fd33e2-42e3-4b2c-a76e-acc8bf32e0ef", "indicator--9b65d3a0-8364-49ce-8bcc-58b7bc2f67b1", "indicator--e6a4f98a-251d-425d-8ce4-f794d637bb67", "indicator--4c63d700-a1da-403a-ac78-3ea69613e68f", "indicator--dec1d9a3-c23f-4c05-ad92-11bf1153b03d", "indicator--528ab024-a667-449a-9911-d90446fc0bbf", "indicator--6b6fdc1f-c27c-454a-a87d-a98b7a2a15ce", "indicator--3b2c5a03-da33-432d-8b40-978a180940ad", "indicator--381025ec-49ae-4416-83b2-54f75723e6e8", "indicator--a0f8c8d6-6fe8-4897-914d-c897a7e2b891", "indicator--d3091dd0-99a6-4f1f-978c-455292307ff0", "indicator--f20a890f-b788-4755-b837-be0e7959b94c", "indicator--4175d5d3-96c5-49ad-b243-ff7034ad3050", "indicator--30b130c1-24c6-498a-811e-c21c65e122f5", "indicator--dd76a21c-4699-4869-a713-f8c6d7575883", "indicator--8d4d6964-3a3c-4fc2-b5e2-08a4b3b3a3fa", "indicator--5640392e-a9be-48c7-a4f2-9a9a6893e730", "indicator--5cac7670-eab7-40dc-97f7-53e6df163073", "indicator--1db48833-58b1-4904-9f4a-66d91e08d21f", "indicator--9e4e17bc-f429-42ec-8071-15bcb2a17927", "indicator--09f7adc7-171a-4207-b2bb-8ef433ba14b6", "indicator--054f1e36-33e9-44b4-b676-61ca47c57420", "indicator--56df9145-618c-4825-aca3-9a1526321830", "indicator--33e6cfe7-ea02-4eab-aaf6-87634ae0fefa", "indicator--9aa7070a-fae4-4bfb-9b4d-0a9e737cdab0", "indicator--03451ce4-de47-49bd-94a3-37997f6d1c33", "indicator--b61e088b-1328-4345-ab33-d4de90777c0c", "indicator--1c6dbe10-62f1-4ee9-8ea7-0c005e19a73b", "indicator--5f619f1b-ebcf-42b3-bc53-1955cb4f4a1d", "indicator--fe69180f-6edb-49d6-9e78-6e85ea097d66", "indicator--8fc3516a-c645-4a69-a7bd-7ac2b04a7e56", "indicator--d42639bd-8e29-4dd1-9d5e-be74ff09209a", "indicator--d6d43731-d64f-4ef7-a344-20feb9c4c5c2", "indicator--af994438-cd98-4070-bd24-407d4868b866", "indicator--72a26da7-1a4f-49e0-b5a8-07d9e0378148", "indicator--5ee1d41b-22a5-42ab-93d6-f15640ecf1c0", "indicator--752c3ac7-e2c5-4c8a-b8c1-a3d1b0ef4db0", "indicator--ba5c656c-9c75-40c1-9065-7b69fc41c8b5", "indicator--565e2665-9c9a-4219-afc8-e90902a9182d", "indicator--ab3b39d7-6328-493a-a157-b6f975f2c700", "indicator--ca51b3ec-fc53-4a3b-bf0b-3e6d241b2341", "indicator--615ec988-8aa4-4362-979a-fc5d5ce0535c", "indicator--4fc73bfc-30ef-4af3-8875-6ea0b2a0acd3", "indicator--fa689dcf-4a41-4478-b037-1a285d505f67", "indicator--73808f43-f716-4a0e-98e6-0be2d6ed9868", "indicator--883459a0-8beb-4b36-ab04-3e1aae2c0f50", "indicator--1f51c304-852e-4b81-82d5-9d722226001f", "indicator--8bf1a53c-ef44-4ef7-994c-b1fc09a40c54", "indicator--6e1eca15-fc05-47f4-805a-b2b650763a26", "indicator--4935f149-e90c-4884-afcf-2a0dc772982a", "indicator--cef38b52-eb64-4fbb-965b-fce482a63d4b", "indicator--a80a44c7-b86b-424b-ade5-8f8d124c4e8c", "indicator--8a3c5c0b-6860-45c8-bec0-3a0f4565fe0b", "indicator--780b8cc7-f6b5-4f0b-820b-b7371dcea1f5", "indicator--6c03b06f-c74e-4ba0-a38e-0a8e2844572a", "indicator--e53b24ce-3b7e-4bc9-82d7-5c96fe41fe1b", "indicator--ee22f7d4-f1ab-4472-882b-8cfef606cc4c", "indicator--a69c8d95-c325-40d2-99a7-4b85f9f982de", "indicator--0601123d-d8e8-4cfd-9a92-8c4d0ea2e7d4", "indicator--6ad5d29c-bfc0-446c-8362-241c9b79cadd", "indicator--1c634fb4-b8fe-4bb0-a26f-935a3441c189", "indicator--917b8087-0b87-4451-8d55-f6d1e3696f5f", "indicator--eff11510-b5b2-4347-a73a-b747e940d36c", "indicator--9d5bdc1c-3889-4821-bd78-c42042b3417c", "indicator--0d45bfbb-5967-401a-838c-d11f94da4c3b", "indicator--1c4ffcad-d02b-4222-b9f7-d7d5d380e86f", "indicator--85bc792a-7bcf-46f7-80fb-bf306c45e73b", "indicator--462e7779-0941-4657-b3c6-880048504d18", "indicator--565cc4c1-2b9b-4284-9a5c-a547b87e0d34", "indicator--8bad079f-217a-44b1-9d2b-2e1d2869e865", "indicator--a91124f9-da6f-4abe-9795-1445a237b3ea", "indicator--57092fda-9384-4eda-a07c-942d1e2cdc4a", "indicator--74635671-02be-4bf2-a409-8c09d1aa8b74", "indicator--c6bfc620-f3ae-4b1b-aaca-6631317fb3a4", "indicator--1051f379-3d4e-41ef-aa68-be0a5460f900", "indicator--e7a95be8-5877-474f-8147-224eeba24a15", "indicator--4e85744b-1dc0-4bc0-aba9-ce93493d09d9", "indicator--80796fb6-be00-42a7-86fb-a2c01b198185", "indicator--9367dd09-552a-4749-97b6-0a5f4c935c2f", "indicator--582c624e-0d1c-492e-b8f3-86af41786b95", "indicator--fd50c612-16ef-453e-869a-5fb953bbab2c", "indicator--c577e55a-fd82-4fca-befe-ca10c7656c2f", "indicator--4ac7db31-8542-4bda-9a76-c2ae388f4b5b", "indicator--642323a6-96c1-4fa0-a432-67e88d07a3ba", "indicator--6641d4b9-7c05-4b5c-bbb7-4a55bc797c7c", "indicator--82d887cc-a9d0-469b-89a8-7cebda60cfc5", "indicator--32b49117-b204-4e6b-9fb6-e2e8d256f03c", "indicator--0502ad43-8e48-451e-ab59-4ecdafdcb605", "indicator--38afa6ac-a1ed-444d-909a-0121638020f3", "indicator--e0c8adf8-3d89-4bfe-b371-6b712ce3d93d", "indicator--9505f552-d43c-4248-af02-417732e6431c", "indicator--8b970954-6049-438a-bb87-213d49c7c8da", "indicator--ab49368e-9ad4-4711-8152-f7249a5d11c2", "indicator--bfd1843e-1597-48e0-af9c-5bf583d02954", "indicator--08030c18-9b7a-4aad-8219-49e07888f1e0", "indicator--17408084-5cd6-43a3-96d5-4d0b4962866e", "indicator--5b2f498a-9cdf-4f94-bf27-00ea981e5698", "indicator--756db61c-5856-4a5d-9cc9-28a85a8efc1a", "indicator--187912d3-d800-41c0-a5ab-f9e194bddf01", "indicator--12d5cd5f-487a-4ef1-96a9-904ded92fe9b", "indicator--ab5c2690-088d-4092-8792-93c25545a08d", "indicator--62a97b24-01ad-4708-bcda-42d9ac3346fc", "indicator--697f9017-1281-4fd0-a09d-d939146ee478", "indicator--5b7ceb37-9792-49c5-822f-d779b09bb039", "indicator--7f208db0-0016-46dd-8b48-0b12dfed7bb0", "indicator--be1033db-e449-4c31-ad78-5a3733c7def0", "indicator--6757c3bb-6858-4208-81d0-1dec8f8e930f", "indicator--00a181a7-1818-4084-a3ec-9ee544eff5a0", "indicator--8f432b7d-afd2-400a-8127-9e8c19d878f9", "indicator--db862a44-9191-42e4-bb8f-0648a3340101", "indicator--471667fb-b9a6-4df7-b45e-a98635083ab4", "indicator--7d1285f7-b85c-44da-9702-0d5f2855daf1", "indicator--0052ba29-9742-4e96-9033-ad82d684d1a7", "indicator--d86c83ca-6293-401d-9952-9d19a997f2c2", "indicator--cf2915f3-f360-4b6d-a83e-f4a1c1385ca3", "indicator--9fc4696c-fd27-4fe3-805d-531dba477878", "indicator--2c242098-506a-413b-a8e8-63c1a5902d42", "indicator--cdf47af2-18c6-400d-97c9-017b364ce727", "indicator--32666f74-f899-46f1-a1c5-c3b9c4f09fda", "indicator--e9a460a3-3d5c-45b0-8075-63fdde4dc7a0", "indicator--895fa160-dbaf-4072-bbea-67508290ed7f", "indicator--27f7625e-1acd-466c-8c71-2a3af9bdcee1", "indicator--26462cac-3018-47f8-8704-6c8802989812", "indicator--ae2313fa-dd71-425d-9901-0090e1b17866", "indicator--e1dff613-6ab6-48a6-9c2e-ce35ae5c1e1d", "indicator--27bf6526-45bf-45c9-ae7e-c6efd886689b", "indicator--a3b470f8-6ab5-45f2-b1b0-dd6671f848a2", "indicator--2b5b27e7-eecb-4d5b-a1ec-38078b32d71c", "indicator--0f76536f-ced8-43a2-99b8-8c119ca639c6", "indicator--1c53ba9d-609d-42b8-b0db-4cc34d0fa258", "indicator--a5a9fc14-2a2d-4439-a302-018a7420f823", "indicator--544fca42-9ffa-43bb-a16b-8efc812bf756", "indicator--b4a8a6bb-1b35-45ff-8153-ccfc390f1048", "indicator--434d540c-fa61-48f0-80b2-a4d4fa953fec", "indicator--5109ca79-c4af-4247-a70c-fdada45313e3", "indicator--0267d950-67ec-4d2a-b5f2-b05e39426a66", "indicator--ccdc4298-3c93-4927-a26d-8e0c5950382a", "indicator--cd0db99e-7675-4c79-886d-27af4c94e210", "indicator--16d00cf9-1a0a-4e08-95af-64231a11ba48", "indicator--8a828cc4-200f-49a2-b4fb-3e72c3074171", "indicator--5418728c-c459-4c94-8bcb-2c4a2f58f731", "indicator--84c474c7-f29e-4029-8c9a-86458241d5ac", "indicator--bd44109c-937e-40b5-89f9-ccc5c825b83a", "indicator--b0d4fbbd-584f-4c86-96b2-48f2bcd3d106", "indicator--daabd826-c989-4df4-926b-d3fcdc151531", "indicator--6ac3331b-5492-4580-875e-d351faa7fd10", "indicator--aead7bce-a793-4d91-b960-e67656f892f1", "indicator--67629fde-04cf-4a3c-aaf7-899022314a99", "indicator--d5d39b0b-1846-4977-902f-7e329e8fb20c", "indicator--07c41b5a-0216-4c18-8464-03c598481f81", "indicator--c7711402-8da2-416b-a938-cd66b15f715f", "indicator--402f36ac-0587-4b4c-bcaf-62490ee2a76b", "indicator--06658086-c3cc-4d9f-b9e2-c6528973ddd5", "indicator--35a81166-dbc9-470d-ac33-41ebabc7d835", "indicator--83c8696b-ab17-4703-bf98-734f5948c814", "indicator--52d06e86-f6d3-47d5-8cc7-175907e54020", "indicator--971b8af0-be2e-43cd-af17-ba6c50f01e8c", "indicator--1ab89a4a-9b3b-40e9-b2c0-9001d1653b2f", "indicator--baeb6b85-a45b-48b6-ac7d-e86a7cd12578", "indicator--90771e5f-79b6-48b1-850a-d5f46410b728", "indicator--b347b629-139a-45ae-b6af-2c606c802386", "indicator--9e7331a4-78f4-4764-8c7a-0bb75499f358", "indicator--93b4c1f8-922d-4601-a4db-f7146eba6d1b", "indicator--213b56cb-e3f3-4b65-826b-215cfed0d94d", "indicator--89c6476a-b806-4699-a371-5448f2916cda", "indicator--5758f4a5-d8d1-46da-897d-8bd5460b4ff3", "indicator--330d9ad6-afaa-480c-a687-6c54eba608f8", "indicator--95f2d882-0c46-4adb-be8d-5a644c5466f8", "indicator--ffe34480-31df-4127-afd1-701c61d550a3", "indicator--973e01d7-1104-4cbb-95a2-63ca9d66a5ad", "indicator--314c5fe6-d034-4276-a37f-d7979905d047", "indicator--95ba32aa-82fe-4e1d-b8bf-b1e723247aa1", "indicator--e85f97aa-448a-4313-9224-2e9c3378346f", "indicator--2e65a589-ea45-4d9d-af2f-6205c8c5551e", "indicator--71e9c0a2-35b1-4a6b-be59-5db918992637", "indicator--430d6fff-7f86-4880-a2f1-8b2a9fef2071", "indicator--aaf07f85-5510-453a-bcc6-d83d6045219f", "indicator--37a34745-cc28-4d53-888b-d5a6e46c151b", "indicator--cd6fb3b3-68ea-4597-abd3-15a58472120c", "indicator--c1bc26ba-39ae-463a-8511-9aabc2e0f48c", "indicator--bca4b286-9480-4506-9d1b-c89ec38a4cb4", "indicator--8248a46b-6590-4c27-a68b-9d0bf953de66", "indicator--4c01ef60-747e-42ac-ac5d-9367e46ea00a", "indicator--e23b6edf-6e7a-4fbc-93f3-7b5e36c996f4", "indicator--b57a8f0d-bc10-4e6e-823f-30e211996e07", "indicator--3ee1d0de-f2b8-4364-96c1-c340e8ff607a", "indicator--e56743ec-e8ea-41d7-b3f1-c1a106505b08", "indicator--49184c95-43a7-4af6-90ff-04e0172306e4", "indicator--a7c29c41-5e07-4109-b3c6-a1620cab0d6d", "indicator--0cf69f3c-b0a1-4d7f-9c19-a2fe0aac2f85", "indicator--9b428530-6955-48ee-aafb-7686a1aa68d3", "indicator--b53601d7-6880-42d0-9e60-6c1fbedeca64", "indicator--281c38c1-f811-42be-9126-f7689a679e8f", "indicator--37e1800f-caeb-4e89-9dbc-d93d2b21bac3", "indicator--27167dac-fed9-4716-875e-3bb3027c0e50", "indicator--5e1eac1d-2f45-4cfe-aea9-d14185e0e1ad", "indicator--a42239be-21fa-400a-940c-4017e2865c3f", "indicator--87dc54bc-91f1-46c7-b26e-d724f266d556", "indicator--5f083277-586e-4c40-8041-070a17cf8277", "indicator--673b6478-e7e2-4ca3-b297-f9c0183adccc", "indicator--e47beb06-dc2e-425b-a06c-818d309f9c74", "indicator--39fc598e-3745-4c67-b6e2-387464064547", "indicator--5b6ed3a2-8e88-4226-a67f-0e702cfdda88", "indicator--99a725b3-e223-4cbd-8473-03c72daa42b4", "indicator--e0216d41-0698-4529-9bdc-71e900453941", "indicator--97cc74d3-d65a-442a-97de-b8f79216f632", "indicator--3acfa7f8-7d0c-40e9-ac56-01a5f9311ce8", "indicator--c64c4645-3071-4c71-9b98-2badc2624e2a", "indicator--b192223b-ce33-45b0-bea3-13df192136b9", "indicator--5fe60725-ca95-450b-8d3d-cd83c5ee26d3", "indicator--b4d9a206-a39f-41a3-b47d-27dedd4c7810", "indicator--4c371722-ac6c-422c-b3c8-0aa6a5c278fd", "indicator--21d38b54-ac48-408e-b103-5d4fc5387280", "indicator--52467857-a892-4112-8d98-6c082017b220", "indicator--4b7b05fa-8496-4fb5-82f4-dcfbe9898705", "indicator--aaef1359-4a05-4a34-8746-6bcfb6136537", "indicator--7363cdf9-67d6-4447-a2e2-a32b560ebe5f", "indicator--3f3d764f-5e74-4444-8519-177a63efb747", "indicator--80fc6070-f727-46a6-93c9-b5ba611117d5", "indicator--123dd7b7-1e86-4a2a-8414-f487921b7531", "indicator--aa0eff4a-6663-4202-9621-d8c946b8d58f", "indicator--2911fd45-777c-4b1e-864f-b8505263e6e1", "indicator--ce785155-3b46-4d90-aa0d-31988d19b827", "indicator--6a67a213-65a6-4c00-bdce-58e786e3c244", "indicator--3296228d-6951-48a9-bc08-bae61ef78feb", "indicator--fc787810-b631-4a09-b678-f2a5994eeb80", "indicator--497f29f8-fc69-4333-a409-e04370e100d7", "indicator--3f34dfbf-3c21-48e7-bded-8ab9ef0960e3", "indicator--a2753f71-ccd0-4527-b30e-a853deb94418", "indicator--bd12f3ab-9e64-4bdf-895b-6d9536b05733", "indicator--ddea8494-9498-46f4-ac7d-fb6e2e6572ee", "indicator--1f6e9492-bd28-41e2-b4b9-28104bb97677", "indicator--8dab4e42-7fac-448d-b6ac-a412f8121142", "indicator--b1a33e7f-57f7-46e4-bc98-ad0d59470557", "indicator--9defb1ab-632b-4a45-b966-f69b52f3f6ea", "indicator--ef52e4b4-1a67-4c07-9244-49918257e0db", "indicator--03d43e24-eb54-4cfb-b374-2aa72c5b9cb8", "indicator--18254991-f794-470f-90ae-cfefe691f109", "indicator--8b80f12c-e7cc-4b06-9d57-5ab0cfe9b335", "indicator--25d8a28e-c894-4372-b987-22205b3be29b", "indicator--9c4efa04-37ac-4bb4-9697-959713ed9a08", "indicator--774b82a5-55be-46bc-9f46-346756b2bfb2", "indicator--8aed9372-dd4b-4f68-a6be-49f2970734df", "indicator--9a22e91e-7e3a-4510-8913-602f75532f7c", "indicator--f234fc2e-bed4-4c22-886f-73c44a8addd4", "indicator--122caff6-d050-4068-a420-d235c1f7e8ef", "indicator--8066f339-d194-4d9c-8504-91e9965d7a2a", "indicator--6682212a-034e-4857-9124-e0adb16aa02a", "indicator--fff370d2-a34d-4ba8-a04b-4580205b55b9", "indicator--5eb62f45-31cb-4aa3-bf73-20be568a5431", "indicator--d6052693-b415-4a31-b9cf-2c3da286c597", "indicator--18f5bf5b-1604-4d3c-b8f7-1f328205a1f1", "indicator--aa8e5774-753a-4002-845a-07702d62840b", "indicator--3b0ea3e3-7dcb-45a6-8b3c-c1aae9f7c2ee", "indicator--5a467a22-b5fb-4ff8-9438-d606b61d81b7", "indicator--b21dcf23-c1a0-4b23-8cf6-872bd7dcaa9d", "indicator--3e796f4a-1ba7-4936-ae09-4cdfd56c41ad", "indicator--4e2a803a-54ff-4fff-bd22-74344cfaf573", "indicator--527e1e0f-2710-4b93-9ad3-db883eadf281", "indicator--18a2a02a-f163-4463-9d9d-c5f16f2e15e5", "indicator--34cea952-a1db-41a1-8a22-b840d09aac5c", "indicator--28cd639d-d8c5-46fb-8d50-2671332ebea2", "indicator--a1890038-710d-4450-b962-7fee4f1b720d", "indicator--132931ca-2995-444a-819e-a733f1e6e70e", "indicator--04109fa2-62b9-4112-aa15-854363cbf6d3", "indicator--770f94cf-2b49-48ee-8217-a6b01b39d0df", "indicator--5ae36a58-2310-434c-9d3d-42af9ebeedf1", "indicator--c6efba6b-5ddd-4ce1-95d8-1578a91a4a10", "indicator--9ce44d19-fe0f-4964-8ce2-a6ab292a3734", "indicator--d05beb43-9509-4b3b-9ef1-eb35fa71ec0e", "indicator--6f420aa8-a400-4c97-a911-8d75919c0a2c", "indicator--aa528f12-1074-4fa8-ac9a-18100069531e", "indicator--50265bc3-38a7-4d1b-892c-bdd07a65917c", "indicator--43d5401f-8746-43ad-9dea-ba616c61fd89", "indicator--626c205d-96c6-43de-988f-253d4a2bb532", "indicator--c8f07835-20d0-4672-9402-dfebdc30dc07", "indicator--5f483cbd-783d-4c1c-a4f9-7a9b9cf5392d", "indicator--f6239855-4508-4fca-97d4-f464b0aadac5", "indicator--45ba3ca1-99a2-4a83-ba59-770d56957e0a", "indicator--a15dfd85-a87c-4b86-87a9-edf0286be71d", "indicator--4aac389f-69bf-48e6-b87e-a1eab94699d8", "indicator--0dde3c1b-aa89-43ee-888c-de6d95bf9990", "indicator--96247877-ae3f-472c-b714-b8888cb1498e", "indicator--68207997-135e-40e5-bd94-b88514bbfdf0", "indicator--d8859355-1a1d-47e2-a6e2-1f37d5683401", "indicator--dfd78d04-02e0-4b68-8c50-d10a8f214ed8", "indicator--f34f8cef-f563-45f0-af50-e35446025538", "indicator--eebec42d-891e-45c9-ae4b-c72093b11fe6", "indicator--8a0d241d-b5fc-424a-af31-2f8cbc1602ed", "indicator--b2234e54-ae9b-47bf-a4fc-54f1cad90300", "indicator--bfd19c7f-6d72-4ebe-9cdb-473c7247e1f7", "indicator--6e379809-cf73-4aaf-b11f-abe94ebeeacc", "indicator--d7415e3b-2a86-4867-9667-d5f0d3e28e04", "indicator--865216fa-3b84-42a5-972a-33479b731510", "indicator--5de3a909-65fd-4e73-b3b7-15fe30b34e88", "indicator--b90f1293-ca38-4743-8213-3d12de3cbcab", "indicator--90f5216a-bf51-4f9b-a46d-861082a8c59c", "indicator--011bed32-377d-4b60-8614-d27406a1ba4f", "indicator--1036ec64-739f-4807-9dc0-0576b81b5afd", "indicator--feb55143-9e8b-470c-83ff-e7e9b1f6555f", "indicator--9daaaa99-590d-41b1-90e2-011c8e22e825", "indicator--c334489f-4f87-4d08-aec7-86eff3bddf81", "indicator--9ac39df6-e55f-4539-8661-66c99dff1926", "indicator--ea2c2218-a2e4-4ab8-aad9-b171afd76b30", "indicator--6a5ccaee-6d00-4295-85e9-7c8382443011", "indicator--1a22a747-c4ff-4c08-b353-e24ea3d5e3d4", "indicator--2d1532a4-fad3-4b7f-ae03-0c1e91d6813a", "indicator--85819934-92f8-4af3-8d55-7907fce8427e", "indicator--1435a0c2-dfe3-4af0-a0e1-3efe8f7eaa1f", "indicator--e421d71f-a2e0-4b4d-9426-01f2638cb4af", "indicator--111ede45-02e0-4db7-9426-fdbd5590be4a", "indicator--f861fdb3-fcd6-44c6-be91-158164f2a0dc", "indicator--a23d32d1-f75b-44a9-80c5-b6dad1830b53", "indicator--e8fbcfbc-8592-4b29-9f75-100859e060ae", "indicator--d31adb63-b927-4fe5-ab07-0edaa809a79a", "indicator--c853976d-46ad-4b9d-918e-65e1d9c64d90", "indicator--707f977d-ef9f-448c-b77d-a08065379991", "indicator--8811c1d3-4aae-4c8b-b482-d78d4c183a0a", "indicator--2dccf4c6-c49a-4f8f-b2d0-82f1bbf0a342", "indicator--92cee3f1-1cf0-4585-827c-20aadb3b63cb", "indicator--cdc4080d-bdcc-4f4f-80c2-7d5e53980c56", "indicator--dc83c7ff-9ba7-4176-b941-56363b988d2c", "indicator--86caf7c2-2da3-41a2-b8fd-c7e38376b415", "indicator--4ef4a2d2-15ae-4fb8-993c-9f5316511233", "indicator--5baa9dc4-349f-4b22-8f8a-596144f49b1c", "indicator--40a09398-be74-4cac-aee2-850034db5551", "indicator--be0800f2-b6b9-4b94-bf24-e1e881156f42", "indicator--8c67c924-14c1-4724-9194-52bc23ed66fa", "indicator--bc2bfb65-d9a6-4412-bb9b-10e287500d6f", "indicator--621b6a3d-e417-4cd6-92d9-58178fcb98f4", "indicator--9f06d20a-5203-4070-85cb-f4bd73fb913e", "indicator--2f3b1fdd-7a86-4859-97f6-82a0d3769f62", "indicator--f16fc9a3-6289-4b99-9bb5-f14259743a3c", "indicator--a93885b6-b436-45a7-b20d-811f05426e64", "indicator--94a502fb-ca11-4c36-9732-03826edb27fa", "indicator--d5324b29-1e37-46a3-9702-b4622a891690", "indicator--4542b182-2039-4042-a1db-d3d2ad67fe97", "indicator--3515237b-55ac-478a-aaf9-c295a23a06a3", "indicator--54fc48a1-e62f-45a4-b0aa-d1aa16ad81c2", "indicator--9ea81aec-edc4-4eb0-b1e3-e1c2017d76f5", "indicator--7318512b-a2c7-40bb-a83f-6fe3fa460caf", "indicator--2cd627c5-deb1-4ab5-bcf4-a47b2f486baa", "indicator--342764d7-3ae9-4513-abc0-82191fa7289c", "indicator--1dea126e-507e-4945-b59a-ec1450d45c77", "indicator--f7a6eb55-5fbc-4667-81be-34c4c6165b49", "indicator--b582fb07-7b75-468e-b686-efae2e3599e1", "indicator--9749c6d6-23e1-4f68-9ac6-379ab9212b86", "indicator--119a0bb2-d487-4fa7-940a-157f9f1bcbd7", "indicator--1f2c7a51-4a86-49fb-ab9e-04fadd739f2c", "indicator--513efd18-5bfa-473d-88d3-e987d67f8f9d", "indicator--81fc73fc-29d4-485b-baf1-59403fc0cc2c", "indicator--5321fa2c-e5e1-4ef4-9ff3-2cdf7b169166", "indicator--6866970d-818e-4bc4-8e49-df4628c06a9b", "indicator--e8397a59-4269-480c-8404-c9e0390804c7", "indicator--c01f0972-9e1c-42fe-a762-252ffd14cdd7", "indicator--6b2ebb60-b1ca-4337-be07-630795cb0da5", "indicator--3cf04891-9071-4eb8-9b4e-c5e8cbbc9ade", "indicator--31645939-d578-4b26-9ca4-239f51514555", "indicator--0c817cac-d23c-40fd-a380-59955745a706", "indicator--e599d6a8-8489-472d-87ed-56b480c62f65", "indicator--83c3b19c-715d-4375-a44b-737a4010f495", "indicator--c623ab17-ba38-4b35-97d2-2acc00c32350", "indicator--ae1040bb-2c09-4f76-a218-f66ee7a1a46e", "indicator--f7204bd8-031b-4055-95df-bf66ffd67329", "indicator--08a53d3c-6d73-4c40-aab4-0bfc9613de53", "indicator--1c24079c-44ed-487c-b7d7-7eb1da56f8be", "indicator--688dea5d-f410-449d-9818-60bfaea4eb90", "indicator--5d62edb2-0b2f-4a74-8396-bfce97703507", "indicator--3539078f-8b25-4721-ac68-e2ec7c4bafc5", "indicator--1cce0be5-d27d-4bfb-87d9-25f2c3555d97", "indicator--c3e193cb-576c-4f57-ac65-cacd4f405657", "indicator--4f0b93f7-9360-4413-934c-4c678d9ae845", "indicator--9ace36e4-84c6-40d3-ba50-c07ab3f3b369", "indicator--cef4800a-3392-47db-b453-f3c01e3b964e", "indicator--9694877b-dcd9-4f5e-b56d-3b6f86b8c8cd", "indicator--e82746f0-66bc-4711-91e3-8aa8be3cd153", "indicator--5dfc68bb-6c5a-4a8e-ab79-09cd1864dbc3", "indicator--5a75f4c1-8c34-46e1-982a-dd7d3572ebf5", "indicator--253a6d36-9e40-451a-b4d8-33d7ec058fa6", "indicator--ce4e1a36-4a80-4cd2-a96c-48a915e20880", "indicator--4258b74c-16a0-4a37-9b86-f00f579971ab", "indicator--17e5d428-ce06-45c1-b8d1-db1c24315d02", "indicator--f9eb39cf-221d-4aa8-a95d-a9a2ce3f0219", "indicator--cdebffe7-2837-4f7a-b987-13b0ff8e2c79", "indicator--aad6c6be-6c9b-4901-a2ca-a22c243ce58c", "indicator--981b52bb-b09b-4217-aed6-c54c1ba755db", "indicator--7e0693fd-7569-460c-8b80-64be70030a0c", "indicator--f1e5d0f5-9eea-4230-88b0-b54f984c12fd", "indicator--ed961296-fd9d-4cb9-b7f6-3a9d594c0fbb", "indicator--f52e9447-06bc-46b1-8d84-900f859d9c64", "indicator--b56d62e7-b7cb-4dec-860e-a1eeb34ac201", "indicator--3dc5cb79-4671-4d6c-a7b6-dacb9e532bb1", "indicator--9597d605-fe7d-4756-b489-1d4c82772af8", "indicator--a7f1b7c2-0530-4f79-b217-eddbdb43f1fe", "indicator--eaa709a0-8866-4843-a611-56efb1f1e6b7", "indicator--13139d69-c79d-4ae4-ab9c-3d645e3572c6", "indicator--22bcc5b9-7e6b-4607-a80a-c2b67a6672bb", "indicator--35fd0b46-d70b-4ccf-b4c2-daf8ba9edd41", "indicator--66f163af-fd0f-4aae-b479-29ab4c8ec7a1", "indicator--e9287fbc-d56d-41e7-af61-a122495d3329", "indicator--6fdffdbd-3fda-4235-92f1-8d532cede3d9", "indicator--f475d417-bec7-4930-a96d-823c3319ff2a", "indicator--28e71bdd-27e0-495a-89a0-e27e5001d4e6", "indicator--ca22c054-1ff9-4e79-b014-93c3bbc93f22", "indicator--78c3bf2a-326c-4df6-8edd-1235d77ce1dd", "indicator--2bd48d70-7215-4225-96e2-212e1e43828e", "indicator--5e83c1ee-ba29-4f56-96b2-854bf4ea84fc", "indicator--d1a278d4-c391-4eba-b7d3-2668e3d4f2ca", "indicator--5a69d54d-f5ec-402f-a61c-6427a037bc70", "indicator--7224681e-7dc7-4871-a8c2-d352c65301f2", "indicator--ae239c11-5798-48ca-a9f6-7fc21202a894", "indicator--e86fa7b4-c941-46e4-b32d-f3de112609e1", "indicator--fd7c2648-d729-4e67-bcee-3aa88501546c", "indicator--9cd0e6e1-9116-48b9-a1ac-40c465f44def", "indicator--6f30eef5-c631-4d1b-b3f8-b0231e99d81f", "indicator--d5a0097e-ed94-44d4-a4b5-dc3a0d3e0721", "indicator--d5db14e0-0e85-4d1e-9049-8d8647555675", "indicator--8affe076-a2f1-4b0f-a5d5-4624a93b2048", "indicator--6c1082fa-674e-45b5-8b32-d3e6fd3f6638", "indicator--37eb89f6-201d-472f-885d-6f494cea8a55", "indicator--a2116ade-6e45-4e4f-90ba-01acf556780e", "indicator--30e6d0e3-f975-47d9-a5a2-05ba7da82f20", "indicator--98912067-b5f8-4532-a93b-69c140c45581", "indicator--597084ff-2d64-48cb-b9cb-abc29c5cddfc", "indicator--4c529926-dcf6-4565-933a-636add0a87f3", "indicator--70d1964f-6863-4c32-9748-5513bede9529", "indicator--52e3097f-dc4d-45e2-ae02-12bf8ea3ca4f", "indicator--dca43be9-b0fd-454c-a61f-c2b12e51140e", "indicator--99693921-e689-4328-b976-52549e60d7c8", "indicator--8fe1760e-d19b-426d-8b12-a0ff4ead6e2f", "indicator--5b65e1f7-e607-4dce-8d8b-b834ee9e3a97", "indicator--effd2f53-f5ed-4184-9c8c-dfb842c4a50c", "indicator--b358534f-f6d8-45e6-8a50-2617a8088b7f", "indicator--be897556-80ad-4ddd-848d-630b47f764e3", "indicator--19a536aa-02cc-4a13-8a30-cf8d03e8cfba", "indicator--b4bad864-8183-48a5-806c-4fe3c32c2796", "indicator--1e404d37-d095-4ece-b9c5-483823983523", "indicator--64cee975-b823-4dab-b194-3ba725f12f60", "indicator--a3208987-beeb-4153-a648-3d7fe4aff676", "indicator--f5a8595f-290f-4716-8b70-c14ea935e290", "indicator--34dec529-534e-4551-89c7-105ba81e6d23", "indicator--18d2722b-7215-452c-b456-9af45e2fb537", "indicator--7d9ef414-7a8b-4bb3-bf85-9567bb1c3bea", "indicator--a6af481d-cb16-4266-9e1e-c41d8eede6b4", "indicator--0712730b-2671-4984-99a3-65b772ecb058", "indicator--d9daef34-7548-4186-b226-f63f4add2175", "indicator--e2cac47c-5368-42f1-be66-9d3e98ea2dac", "indicator--bcd92e47-5bc5-4730-abdd-df063468f218", "indicator--d9ce2ebf-9886-43e9-a72b-c5a4b8bc10ee", "indicator--4b926ea9-429e-4ae1-be03-94ad16c697c7", "indicator--1bb6911a-0763-4d17-8dba-17c119e518e2", "indicator--0f64f50e-2c52-4655-8704-8f0cdbdf453c", "indicator--691d810b-66da-46d6-b50e-2aad92fc4d35", "indicator--a24b4c5d-36d9-408a-aa40-90313edde325", "indicator--504c30b5-284e-4541-b4af-197ff63109c2", "indicator--ea2f5ee9-d509-4693-a0b6-eb02d3709b02", "indicator--06d59a3b-f248-4da5-b3c1-4dba80b34d30", "indicator--1fd08c5e-5898-476f-8cd8-9c4124131793", "indicator--b29f8ab7-74ab-473e-a11d-a20f06a01f77", "indicator--5b968844-2f08-411a-a9b1-c383780c88e8", "indicator--1c7a527c-9f7c-47e0-aa50-1142bfe45940", "indicator--67dc5946-c431-4ab9-9f24-b78dabb096a0", "indicator--6b5d65a3-bff1-4bfb-bb26-7cf82970ae40", "indicator--74d1caf3-6a58-466e-a935-19f4703864bd", "indicator--00d23731-25a7-405f-9f32-ebae0ebeb340", "indicator--c03b6171-97e2-4154-b0e5-4f2fd0eac9a3", "indicator--b8726a8a-91b2-413c-8f6e-30cc2e2f3871", "indicator--6f6156ad-0fb5-4450-ac75-8d7601ad8b1c", "indicator--bc4fd848-8b84-414e-bc14-2c6111d00932", "indicator--b6427bc5-31bd-4059-badc-3fa5431d80bf", "indicator--68893275-2958-49dd-9c63-38645e1f9c94", "indicator--761ca289-b41e-44f8-8a7b-f255182cf9db", "indicator--4e5afce2-cbde-4429-ac07-cf6b5ab5d7ab", "indicator--95130a70-c277-4ade-af0f-ebec76945b72", "indicator--c929c071-f31d-4c7a-bff3-c1098c2a2aa4", "indicator--009ebcdd-63b3-4213-b208-0af491e5654a", "indicator--bb53751f-d9f1-4a6b-898e-1b33a7c3b7e2", "indicator--ba1957e3-7dcf-4cb3-a564-c097b3b36f0e", "indicator--681c40cb-fd72-4a8c-a05f-15654725a46a", "indicator--10259aae-274c-4910-adce-8256dae84394", "indicator--fceaa8fb-8494-4d4a-b5d1-6bb5b1d454ad", "indicator--37141220-a0eb-4747-bd58-87c8ae02fdfc", "indicator--9d362277-17e5-4421-8b75-99795c5fecf0", "indicator--413ddf74-f39f-425f-b388-a9e037bafa18", "indicator--f44630f0-5186-4129-b41d-38b33bcfafc6", "indicator--0739b1dd-d337-4d79-873c-fce6aad1003a", "indicator--4456eac7-37e9-4768-8167-684af1329938", "indicator--13497340-9d71-4efa-a24b-ac99e67331b2", "indicator--e2ebcdc1-3751-48bc-a805-8adb580b0609", "indicator--a6a7745f-d95e-4311-8fcb-3b0737b6526c", "indicator--552518eb-8a74-4d1b-852f-222c918cf3ad", "indicator--81c5bd06-167e-474b-b179-47e3fa518574", "indicator--9e8b040d-557e-4f91-bc6f-b06d9e10bf99", "indicator--6d736d1f-2f63-4132-ad2c-d733f6ce0347", "indicator--a352152f-9c45-4047-bc75-03159ff437cc", "indicator--6c3d0373-4fe3-496a-8452-75aae4b80a59", "indicator--19ec5421-c865-4d78-91a4-424d74d7ce0c", "indicator--7d4e6a1d-c370-41d4-8831-188ae97611d9", "indicator--0876ccde-5a04-4fa3-95c7-b9779285b5ba", "indicator--9d590cd8-c2b5-465f-a651-b8b5136f6227", "indicator--a5560d54-9e0b-416f-b00e-0450175a441c", "indicator--aa8fe93b-1bcc-414d-814b-04736307ff50", "indicator--841d42a4-e13c-4385-a771-838bfe56a46b", "indicator--7babaf3b-839a-47e5-8761-1fadd963f2c2", "indicator--40697dd5-a517-4c44-9c72-8d9479026f9d", "indicator--19f0ed09-adf7-4da1-8348-bdcc526ef752", "indicator--f850d646-5e05-48de-83a8-819eb8b24625", "indicator--913d0e8d-3c6f-4696-b006-035d5fd9320e", "indicator--6087f96a-4ee4-4ab0-a4d8-7a934c616094", "indicator--1851e937-c3ea-4d44-9ca9-ac9ff5204c1f", "indicator--3a2354ec-6460-4073-9c02-4d6f8f479e7f", "indicator--5dc1d180-df44-4724-ac02-396acaee7874", "indicator--f19ac267-3b54-4e6f-9fc8-c01dd08feabb", "indicator--69a8a86b-022d-407e-b3d4-86b2dd0e9c7a", "indicator--f10fc506-fdc2-41c9-af86-8284f4105f0c", "indicator--8c4a9247-09bc-41ab-b306-c8d1a04e7a2a", "indicator--c1f84e00-fae3-4597-bac4-4b9aa2008ce5", "indicator--7a41d329-e48a-4a8e-9dee-f24d0785d34e", "indicator--e6b30a8a-ac29-4d49-bce1-abc0b9749a00", "indicator--f0753320-98a2-4b2d-b038-fad6170eb3db", "indicator--02560472-7b0b-40ad-859f-adbadca0b852", "indicator--faf529d7-0ca8-4c69-ac53-1a7c84a6e97e", "indicator--73c34b28-e2ed-49fc-ab87-c9288a7b5b4a", "indicator--c127bd03-689b-4414-9c97-3d19f592c182", "indicator--192de801-8f18-4ead-b563-10f91561b3e4", "indicator--389e7a33-0e99-42f4-be93-5ef920efd913", "indicator--3429e279-fa6d-4191-8483-d609a4557c16", "indicator--324a0970-be33-421e-9829-2740cac09f8b", "indicator--2b324ebe-5e71-44d5-b268-586f30f8e085", "indicator--9710da89-0d13-41ec-b652-53617d66f4b9", "indicator--98784a0c-c3dc-40e1-8db2-6dae81993444", "indicator--e827a95f-ff08-458a-b92c-c91e627f521a", "indicator--ad7e88fb-79c1-4bea-8d0f-8c45158ade91", "indicator--8076f8c0-c154-41f6-be1a-9ff0762c0f27", "indicator--ff909bcf-b00a-44c7-a2de-92c753d6fff1", "indicator--044b766c-74da-4b66-8b62-2ff5b041d142", "indicator--01b5a2a5-4c5c-4c47-8801-6fc5d37b24e2", "indicator--2b700d48-7b2c-46de-98d0-5bbad5d34035", "indicator--c5d0e83f-31bb-4e2b-b98a-1c5dc64da264", "indicator--09106522-1c8b-4319-ac86-dbb90692a392", "indicator--87aa843a-f81c-4df6-948c-cae0017d8233", "indicator--da52a30a-0e9b-4e8f-b0b3-39d5c65fc9a7", "indicator--1b5315de-db55-4a52-bd62-1429a43c80e3", "indicator--150b8d73-f2e9-486e-bfb0-f0033cffa9ad", "indicator--e93081ae-2236-490c-bd50-3f9c46d06268", "indicator--82084668-4597-4cf0-b229-7f52497ef6f0", "indicator--6bbff078-ed87-4a45-8b5a-c15bbbf4276c", "indicator--d094bc10-7449-452b-b572-6e2a09369840", "indicator--c7d32582-8439-4344-b183-b9115908540a", "indicator--274e9b33-5320-465b-809d-daea1bca54b0", "indicator--631f655d-4479-421f-af2b-bf91466fc620", "indicator--cb3356ba-2bde-4ca5-9f11-56f5078a02e2", "indicator--8d508bbe-7e88-4fc8-a0e2-7c59b9694742", "indicator--77e73c8d-c47c-488a-901c-5fff39abad17", "indicator--1bb9c77b-59b4-4a22-b0e2-f40b66f5c64d", "indicator--d18ed11d-3934-447a-b3be-e535213d893a", "indicator--cd936cb3-92c7-42be-88fb-6a025364f486", "indicator--8cec7359-4377-405e-b5f4-8c4c6ca12886", "indicator--81c75fbf-a0f1-40f1-bd10-e48490d4a7df", "indicator--10425753-0666-47cd-9a1d-e80b16d37f84", "indicator--782a33ae-14df-4235-bdd3-551b1c702c74", "indicator--8a722295-75f3-4a31-90b6-c41b3d5b1a85", "indicator--3afabe39-1250-4822-98e0-98c7bcf067d9", "indicator--e1aaadbf-11be-461f-9bc8-1edc9a608919", "indicator--212650a7-8759-4c7d-8444-57f9591b8241", "indicator--00858cfb-fd11-4fa6-bd9d-dcb69ffcded8", "indicator--efa5dd59-1239-4142-b043-1f4d027aff7e", "indicator--14bbc7e9-02aa-4018-b3a8-c460557a7924", "indicator--467cfed8-6b6a-44db-85b8-e84cb8166a8d", "indicator--db0f5040-fe90-4cd7-af61-2feef4197189", "indicator--feb8d0b2-40dd-4274-9480-f7ee4b6c9b99", "indicator--acc9ee87-5ec4-4960-90f1-4db4f6829b5e", "indicator--73e35827-a1e3-4ad6-99ea-5e842791e4ce", "indicator--b4951715-f055-4c1b-b885-f04c0f4d67f7", "indicator--200c75f0-effe-443a-bacb-71249b83a61f", "indicator--2603ce50-9db5-448f-a71b-80bf348aef2b", "indicator--38111e03-e272-4827-82e6-955ba20c6bcb", "indicator--0193bf75-c6d1-44fb-ab13-4ded874ab2d9", "indicator--bf1a2bc0-8509-48a0-a890-86236341eccd", "indicator--5aa2de41-117a-483e-a57d-7279b07802b8", "indicator--8407f356-2ce2-48ee-9761-886ec3e37190", "indicator--131a30d6-b911-478f-a51f-529320beca25", "indicator--23638201-606e-44e8-85c3-381beb4bb6ac", "indicator--bc91ef97-15a5-4a05-b1e0-7a0322ec8645", "indicator--ca4615a8-392b-43e2-82e3-b3cf64b2dbcf", "indicator--6113e278-4211-4f43-aacc-0b2728971f08", "indicator--150da064-4214-4bd8-8c8b-7fa435bfd053", "indicator--b0f8bc26-b02c-4349-a7e4-ec04d71afb68", "indicator--0b2ade36-2741-4069-8b17-f2350e34815c", "indicator--c766e1f7-b7e9-4c1e-800c-fb1f9b95f43d", "indicator--64d4f8aa-b8d8-41e9-915c-f41d99a4f9d0", "indicator--ebe445c1-6626-408b-8365-23243481cce7", "indicator--05b88769-5aab-46c5-8b11-558e3a5207b3", "indicator--bd568d5d-6d10-4ea6-a0c3-aca631e437c8", "indicator--4b3c0326-a4b1-422f-a87b-2fe2309a0396", "indicator--cad659e3-d6c2-43c0-ad12-1071f810b18c", "indicator--96fb4ced-9471-489f-a285-072456be2240", "indicator--4edf40dd-0945-47e9-a4c4-3a910da72a55", "indicator--7d562a21-810a-4392-a0b9-371e09bc5f44", "indicator--601626f5-b6bb-40df-a040-f189aeb033a9", "indicator--e630243e-ae6d-437d-84db-d46682297933", "indicator--fcb6d967-e5d5-4672-807b-b746128922c8", "indicator--f53d8a6e-4f13-4dab-9918-8de99cca20bd", "indicator--e26c4acf-ed32-4845-af1f-a363b45830d4", "indicator--d7be8864-2703-4007-a534-03de94124ff6", "indicator--27bec5b0-12cd-4c63-8383-580a1c6bd16a", "indicator--7dcac084-4ceb-4d3e-b9de-df8ec966fbb6", "indicator--6a573e26-987f-453d-a7eb-c19f2478a3d8", "indicator--c0b07f2a-a969-4933-8959-d302c3a098e0", "indicator--0fda2f00-2565-48f8-96b3-145f2978556e", "indicator--ddfe8695-39d0-4178-bae1-4db2f715f034", "indicator--f0b51c22-c75b-49d6-83df-1cbac52f12ba", "indicator--32460718-3d9c-493b-b1bb-b01f932da261", "indicator--e89784c3-0e25-4470-a087-313596f8ad38", "indicator--fa593d36-886f-4147-b927-d4de601943e0", "indicator--3c9fffcb-bcdb-47df-a2da-a2f3fa662b2a", "indicator--1063d16e-88a6-4bbf-bcf7-fa1c3998ab77", "indicator--98ee5d50-e37a-4cbf-946c-bc2a9f2fbb92", "indicator--02e0c5a5-1a66-45ff-ab3c-17062bf2b261", "indicator--ceee30c8-336d-43a8-ab67-199ab712e278", "indicator--4b7702ee-7a68-43f8-8260-3487a8ae760f", "indicator--6ebf3abe-546c-46f1-a9dd-6ea068209f6d", "indicator--ab855bfe-16b8-4f49-b2a7-b3455ce28a48", "indicator--9c319956-2191-498b-a974-8be4ff0ad4b9", "indicator--c040a05a-dd35-4f7a-a86d-451ac17f356a", "indicator--cc1b61e0-885b-4302-95c7-5dce850d0aed", "indicator--70ac34aa-05b0-40eb-92b7-bed064e09c64", "indicator--5ca35f01-36ff-4345-8d0e-ef11c796a51f", "indicator--92d1a4ff-ab3a-4bc3-952f-70a1e0799267", "indicator--6315dc0c-5b7f-4c1c-9f11-6468dc11094e", "indicator--9def86cd-deca-46b5-bce9-6212b866f0de", "indicator--d30ba6fe-a3b5-46a5-8678-a09f17e51890", "indicator--f8674c3a-aa06-499c-b076-7b6db5f292f0", "indicator--5dd6a150-826d-4a60-9f7e-78cbbd74ae83", "indicator--15d675a6-d838-48e6-871f-8db1d74a869f", "indicator--7f858a9a-2314-4ff0-b778-2cd49b8d5bde", "indicator--5d79e59c-cfda-4fbc-b5cd-383abeb3febe", "indicator--5db2a043-dd2b-43da-bc3b-cde02eef04df", "indicator--517786a0-2270-4175-9e5a-26494ee7a8ed", "indicator--ab1c9ad6-97d8-4b04-92c5-bb4035af8007", "indicator--6dd9b8c7-e619-476e-8262-7a5ed92bb83f", "indicator--c9931cca-dfec-454a-966e-bad1f37774d0", "indicator--3e5da0ff-e704-4159-b60f-845838f28291", "indicator--496d2134-6b1c-4323-8876-5e5681e8faf0", "indicator--8ed37de6-51f8-415f-ae43-7e01a6a052ba", "indicator--d6abc040-c4fa-491d-9415-980fdd40d5d4", "indicator--89d45d00-57ee-4eaa-9de3-9e304c2801b7", "indicator--75793585-87c2-45e5-86d5-6130f06b9ebb", "indicator--8e3a45f5-916e-4946-9fff-afa8c3b07cfc", "indicator--cf178648-71ed-4c3a-b4b7-673381e001c2", "indicator--b6ce93a1-131c-4f15-8b83-a9c2f6fc2c35", "indicator--ee4fd7c5-d6ec-49a5-ac8d-6122286d8807", "indicator--abfa02d2-a382-478a-8833-9666664d0f8d", "indicator--6add278b-09ba-4313-bc87-1c0d5c26e514", "indicator--c344ac25-f96a-4143-9f0f-71078cc9b6a8", "indicator--3c293b4a-fe44-4744-aa37-f2b83c9fce88", "indicator--d2c31bbc-5ee6-49a1-a493-3468eed90215", "indicator--452ad389-4902-4a59-bded-14b78b668de4", "indicator--1f40e323-86af-46fe-96da-8efec1b35867", "indicator--ee50f970-cf7e-4658-95c6-db84e3507956", "indicator--6264afe7-ddd0-4198-bf0c-4315b2e2bd30", "indicator--932ca94e-4197-4440-a7ba-c8325628e98c", "indicator--80d4b071-aebd-441b-a315-8aa7d6042668", "indicator--e7adb125-2191-46d2-bb4c-caeace2c093e", "indicator--6966e2eb-9bcd-459f-9ae1-5d56cb5c82ca", "indicator--6db98a86-97dd-4906-93c3-3b945e283161", "indicator--a3b48be1-33bf-455a-acbc-e478edd60529", "indicator--4aa3538f-b666-4ba2-ac4a-37d570c3b934", "indicator--885de93f-046b-462e-9a07-2c4c3c511862", "indicator--0799b446-ee5b-43f6-a642-2caab1344487", "indicator--bb1ae87e-5794-433e-998a-9f8d7cef2c66", "indicator--7cf91ea0-27c0-4fd0-8990-4683b2060fe9", "indicator--865f7651-be88-4abe-9e0c-e6b4bafc0c3f", "indicator--6a94e7e2-c2d0-41c5-b1a2-fed469a1de88", "indicator--0f0f5fcb-f211-4e79-9316-4c6ce2461790", "indicator--3cc7bcff-4a8c-4ac7-a0d4-58cd258582a8", "indicator--e95b0808-50c7-4998-b482-5a59dca7cad6", "indicator--365bfdaf-4a87-437e-a798-5f28ec7c695b", "indicator--c94b838a-4c60-4af4-8c3c-b460c1cf06cd", "indicator--663a7ab9-ce03-4c2a-97ae-55c8015e239b", "indicator--667b3a26-cf9c-4b1e-bb7b-718a3984eace", "indicator--02883391-5df9-486f-8f66-8ef1bf54edbc", "indicator--ebdd83e2-9b30-4a7c-9b5e-ba13e65c21e4", "indicator--9c6b72fa-aa38-4d15-8b86-e1d437d6fd5d", "indicator--a6aa528f-dbf4-4466-93bf-d8804e05439c", "indicator--aca1c160-b6ba-4691-91d2-0c14c2d34662", "indicator--a92d3d43-9850-42ab-8f8e-c652116114ce", "indicator--44a34f90-34ff-4cc6-928d-fad1ef69e85c", "indicator--5a7413d3-af7e-4330-a8da-2c279457d06e", "indicator--56595549-9187-4a1b-9205-f580f0bf03b7", "indicator--9dfe29e6-345d-4b1d-8246-6830ee899e13", "indicator--3f497889-6858-4beb-a54a-0709595f68a1", "indicator--061348c5-9fd3-42ae-ac9a-2266de80ecf1", "indicator--aab30b1b-97df-4b02-ab20-d0474772d01f", "indicator--342341fb-e464-44ca-ac59-75ac72811195", "indicator--214282dd-1ed3-49c9-bf99-6703203423b0", "indicator--2566865f-04ed-4f49-8583-085fb35b7c66", "indicator--c4a15bc4-d3f2-4ccd-97f4-b46083643a43", "indicator--dcb582a4-dbfe-4b37-befb-900fb59334ea", "indicator--8a422015-7f28-4be3-b03e-136519bf00c1", "indicator--f32f6471-ba83-4e43-9014-563d056db858", "indicator--98444bad-7773-47ea-9a7a-f17c4dc1c143", "indicator--7dee0a2a-3cd1-4bf2-b5e9-bad9d6f4e107", "indicator--fdae28da-2986-4e9d-b759-d387cae76398", "indicator--61dbc78b-a565-4b85-8c87-1c9813cebd7a", "indicator--7bec3b41-7d0e-44d0-9bf8-1d0e77638093", "indicator--9edc3f3f-c7c1-4f0d-b3cb-fb883d7b8076", "indicator--421cae7d-6fd0-497d-a6bf-0f9048f899af", "indicator--0821505c-cbdf-4d04-bae2-56d11fcf203b", "indicator--92bc8243-9622-4eef-bc48-154594b106de", "indicator--008fdc35-9b1c-4657-b462-1889342c3870", "indicator--56458648-b7e5-4b2b-9cd4-9d7ffcc97b6a", "indicator--f8afd74a-f7ca-4d8d-bbea-1a744715a6d6", "indicator--98cb58c3-0212-448c-a568-66a1e10c4762", "indicator--7f019d49-55fb-4b6a-8a53-e016f87b3ac3", "indicator--2cad5382-b609-477d-bd08-b8fbf58d02ea", "indicator--df0d8a69-a880-4557-9b40-83dd8c62e3e7", "indicator--576ef262-0296-4e74-ad80-1aa782d64951", "indicator--0801d1d6-4f2e-440f-8d75-47320c67a6dd", "indicator--4ef55477-bd95-46d7-bf12-b96732f1eac4", "indicator--1c9afcbe-7517-4538-8d4c-9088cf6552bf", "indicator--d59837de-e85b-4caf-959d-03c4067a29bf", "indicator--d641e5ba-bb89-4861-9de1-8c08fc04edfb", "indicator--4083861a-65af-4298-ad1f-792df669c58c", "indicator--8d56e5d4-3fd5-4ef1-b056-df9b35c0dbfd", "indicator--fb201d1f-d22a-42bd-8ea7-74c8d6208eff", "indicator--44b8fe94-b979-4edc-a6f6-0e0d4bfa6503", "indicator--01ad950d-bb8c-4cd0-b57c-13d5b6f32089", "indicator--5883f8c0-a36e-4a1d-9759-c27c9f104af4", "indicator--10abfedb-268e-4212-b03b-ef8ed8bdfddd", "indicator--42afc082-fed1-44e0-a9dd-021a3366e742", "indicator--aa9d318f-9a17-4565-9f03-0ac52e2f74a8", "indicator--330e7fd6-91d2-4818-b6bf-de41266d4093", "indicator--4c485059-0d48-43cb-a2aa-45535995d098", "indicator--5d51a19b-c153-494f-884f-b31603e49fbe", "indicator--2d5e8426-d760-4763-b832-181d6c36b0a6", "indicator--b6098ddf-2c81-4c60-b133-bd4924f98cff", "indicator--c4f9b5c1-4757-4220-9387-4908dab5b496", "indicator--7552b125-63be-49c8-b403-e470810c8448", "indicator--d4f84a10-775f-41fd-bc01-43bb955a0754", "indicator--36b3e17c-4614-4914-92fb-f01ca65e3aef", "indicator--c7a08924-1d9f-4dbc-9ca0-b1e8ff634706", "indicator--956f388d-0f65-48bb-96f5-5bfa2322589c", "indicator--a677b6a2-5586-42a3-ae8a-4db90b206f8f", "indicator--49032395-ab02-4a00-96bc-a28f8771bb68", "indicator--8fe2d78a-e644-4495-8b5e-e5401a8a85e0", "indicator--0073b697-3ee7-43ab-9438-b70bd30d6205", "indicator--2f4e77c2-3983-46c0-ab16-d47b9556675e", "indicator--a1c2ff0b-81e8-462b-81a8-2b6cc51352dc", "indicator--b128a59b-7e3b-4d1a-b2e9-5ed80604a2c1", "indicator--39ffc2b0-86db-4fc0-8034-b25dea2908fe", "indicator--011f3fcc-0ee9-4fb6-b7b0-baa9663d3e12", "indicator--34883a77-f0f4-48d8-9335-f6dbaade746e", "indicator--1db35bb1-ce79-4bde-b028-e1974cccf9bf", "indicator--c74c8a4b-3ea4-4887-885e-1fa495487884", "indicator--9e7c7ce7-d380-4239-b568-1fca0adaf218", "indicator--26cf0076-467f-45b1-8048-b41e3fa265a3", "indicator--24aecffb-2d9b-416e-8b5d-9c67c993af34", "indicator--e66424b5-f8e2-464d-8227-ed7d53115748", "indicator--38727149-f2c8-41af-b98e-ddc68a7160f7", "indicator--713b4daf-80d5-4883-a33a-8ab4cfda9c69", "indicator--14dd405b-7432-4dcc-a62d-5344f052efc7", "indicator--6e2d2b3b-801c-477c-a821-83e140e4234f", "indicator--7a957b84-c865-458c-8f45-2e14f899ada3", "indicator--40b92135-426b-4ac2-8a91-15423fb2cb39", "indicator--7b1253cc-ad20-4265-b755-9dc45fd49f4e", "indicator--1123ea49-60ba-418c-8176-72c0326b91e0", "indicator--565920f9-e39c-4f16-bad4-f022886c5225", "indicator--f482d596-bd08-4b30-9565-211c95b98c83", "indicator--6d3c928e-ed84-489d-8fc4-f8b16a09dad7", "indicator--b058aeef-37b4-4444-bb11-8b74d1e87399", "indicator--b867d018-1053-46e3-936c-2a85ec600e47", "indicator--da51100f-98d9-4456-8457-7d917c364474", "indicator--237ff243-2f18-42fa-8b25-a4d4a7ec5df6", "indicator--801d4a22-f932-4f5e-8a88-556f2af89548", "indicator--66abf691-4982-4da6-9665-0fd1eb391a23", "indicator--feecd9a8-5460-4176-936d-49b996c49a09", "indicator--79c5b59d-a60a-403d-9ad1-1486b564c606", "indicator--af86d434-4ffd-42be-b63a-cf8311dd2658", "indicator--59b97d88-239f-4974-98e3-9aec86a5a7d5", "indicator--3c7576a2-d1a4-4b09-9670-ebc079780885", "indicator--3c197a68-63ff-41da-b190-e68d192ddfcb", "indicator--870939a4-8c92-467e-8205-d663a7ecad0b", "indicator--354d51be-aed9-4f04-9559-bb6721cfd4f1", "indicator--86adad8b-2867-496f-8efb-947ee25a0406", "indicator--ef7639f4-3038-4da7-a9d0-e761c50edb52", "indicator--88deb54d-f3a0-46bd-aad6-a9aabe36019b", "indicator--a261f3ea-7400-48a0-8b8f-64d1be685366", "indicator--d1ee92bb-268b-426c-b0b9-e5c82d0e9c17", "indicator--63192784-7abf-445c-ba52-0aee73cc7c9e", "indicator--31c86818-8524-4b80-8e1d-3e5b0e94b017", "indicator--d3283aa3-fc6f-428e-a6d0-85bc55412957", "indicator--39f5a474-f026-4de1-a36e-d4b494c63f7b", "indicator--055d5c66-1ddc-49f2-a455-06dfc0f61309", "indicator--6f6f886b-548b-4c4d-b8c7-3d1eb26ced07", "indicator--e53fde2d-23fa-4838-bf7b-cae4be228a3e", "indicator--3fef25db-3dbd-4329-9dbf-6a344f957cd9", "indicator--86312078-8510-4c37-970b-afb3081cf39b", "indicator--e9d27cf0-69e8-49dc-bb23-92cc4a2dadef", "indicator--fc4e5909-d12e-49ee-aa2e-f2319bb51d95", "indicator--b51d706e-d8aa-4e4a-9d34-17a075498bb5", "indicator--212d0c10-888e-47fe-812f-b4c7e3a2077f", "indicator--b640d621-7aa2-463d-bba7-e237954896fe", "indicator--2d603f76-78ec-4dc6-ae20-fc3aa91ce1a8", "indicator--39f39e9d-d2c0-4d30-936c-374449f9bf25", "indicator--b1f2d060-dc38-4756-a369-63abafa21b11", "indicator--4eebe466-9c6a-4025-a5b0-dc42eb8ba983", "indicator--756cabf7-b24c-437b-bdb1-75045c648721", "indicator--46874872-6258-4acd-8061-7d52146058c7", "indicator--6168ae40-dea9-40ba-8c08-c6a3c8dcb0d0", "indicator--525e6339-a359-40b7-9b32-d1bc57a1e0aa", "indicator--238a9542-941c-4505-9cd0-5dff23eb2eff", "indicator--c8b07ab0-3c01-4087-affe-3966d5d210d9", "indicator--7d87e38c-436c-4ada-9b4d-0e8099eb948c", "indicator--a405c07a-3e49-4414-9c3c-e81cabfb2b50", "indicator--a2cb2b54-cc7d-41d0-a56e-016bce0b6e8e", "indicator--f6c0b8f0-a380-4acc-b828-b761204ebe99", "indicator--3f490b6e-d565-4ca5-8b26-e46bbd1ab7e2", "indicator--86bd2a67-076a-4151-b21f-da09d7237473", "indicator--61c4a6cf-d209-4b66-81c3-d0df726fdc14", "indicator--ebd272a6-0d91-4537-8911-9552c9e43e0e", "indicator--149b5804-169d-44bd-8d61-f9605146a6ea", "indicator--b3e0e11d-86f4-4ca8-a11c-219ea3cb56ad", "indicator--5562cda0-a2b3-4e5d-8579-65751844b532", "indicator--3ec6721a-84dc-4cbe-80c3-16afdf23e27e", "indicator--c37a206c-b740-411c-a630-d58f9cf67a15", "indicator--c1c3b0b0-6925-4504-b39f-0c765160276f", "indicator--d8db73e2-2fdc-4b52-a8e7-b54ea285a785", "indicator--7566baed-8d9e-46e5-a7a9-2d3bca0b7208", "indicator--e6a3e17a-556e-4068-8bff-8359145ee02f", "indicator--c04f2b31-1413-42d6-a6a8-e542af28f923", "indicator--0e57b67e-0e6d-409c-92c4-d51087deaa84", "indicator--2fdb8f90-22fa-4b0d-af7d-48251225f28e", "indicator--1e7ff422-6e74-479c-ad31-df5951fe7e91", "indicator--edefcb3c-0342-4695-a8bb-87656ce66953", "indicator--d63b0af5-5d22-454b-8a49-1ff6ba1661db", "indicator--c167629d-6eea-402e-ab3f-abbedced981f", "indicator--255cf4ba-199b-4cd1-81d9-b13c91953c06", "indicator--58c58f0b-5965-4c96-b491-df3a0ccf7ec9", "indicator--2893299d-d5c5-4cc2-821a-bae53718e3df", "indicator--4688cbf8-35f5-4aa5-b612-192ed1876705", "indicator--2011be92-f1ea-4761-bbee-53733475b717", "indicator--707b5d87-eb21-490f-a40a-f1c64cd894d6", "indicator--67f81aa7-7d08-4ece-a120-33a9467e8dce", "indicator--bcd0180b-b03c-4a91-a121-186c616e9540", "indicator--8cbd1737-460c-4777-beaa-ea3f658481ba", "indicator--22538bbd-20e1-43d7-a6cf-f040486b1cd8", "indicator--5cd78dc8-685b-46e7-830a-e7509e0feb32", "indicator--b81c8eec-2829-4da8-890b-b3dafe8e7c3d", "indicator--ad640b0d-deda-4840-81ae-ceca325bbf91", "indicator--06bd4b0e-159a-42ae-bc4e-11d08ad7b4ad", "indicator--735dc7d3-64e1-4aea-8127-1ada61b3d1da", "indicator--f2173b22-29e8-43d6-8400-2d1efbc5b79a", "indicator--8eff44fd-236f-4e43-9697-63df29d6bbe2", "indicator--f0baf725-3b69-406a-9c44-57359591a1b0", "indicator--d1cc018d-e229-442c-8473-c442a3cafcec", "indicator--f4e3446b-0d6e-49b1-a842-10307a21b124", "indicator--2e1fd080-605a-4449-85d4-82360091d08f", "indicator--bd230783-be53-4d8d-9448-dc8da39993ae", "indicator--074a777e-d24d-4e59-ab26-6afdcd72b0ce", "indicator--fc85ba96-996f-4b1a-b02e-bd13a381088c", "indicator--9629f76c-29f0-4b6e-9bea-1ba6fd0be4f8", "indicator--206c6dd7-0797-49a8-b963-91ebe5617453", "indicator--68a12bbc-15dd-43c2-8920-3b4a4990de0f", "indicator--8548735f-b43c-42e4-9e4c-91f952756b38", "indicator--01be3d32-a2ea-4a82-b74e-d7bf1b71c185", "indicator--9fa6c2e2-6584-4d8a-941c-0e505109ffec", "indicator--83997756-a66e-4ad1-a1ca-31737802ee9a", "indicator--b407d5f9-88cc-4c58-b270-5ac937af5993", "indicator--907982e2-4765-4a35-b5e9-f70bf81bfb63", "indicator--e2108d37-6a0a-4907-a433-0913f27378d5", "indicator--b3be3c5d-1494-4adc-b1f2-8fdc30fafa7d", "indicator--7f5c396f-bec5-48dd-bf21-ca138a72a8ac", "indicator--e4623ca5-03d4-451c-b316-cb83020cda4c", "indicator--7cb92956-4001-4867-b063-158e8f914b7f", "indicator--ae2f2ce2-59d5-495c-aef3-43cac7efd15f", "indicator--faac6572-53fc-4bfa-a803-a88ed439118f", "indicator--6aac4f66-de95-41a9-8483-18b9c6d54040", "indicator--569e074a-a5c4-49da-9b38-3876bf00882f", "indicator--26d1c08c-c9fe-49cc-b245-c7b30a766e1e", "indicator--36cc1e1f-d101-42e2-beea-64dadfc03685", "indicator--68091760-1ebb-414d-9c7e-2a34989c5c20", "indicator--19afaac5-48f8-4a9d-917b-345e50751507", "indicator--f021ac3c-c5cb-4992-abda-c65fbbe38bb4", "indicator--8fce6a40-4087-44d1-8126-0ea7b103bc5b", "indicator--3eb5f41c-22a9-40a7-86d0-857a61ff12d4", "indicator--c3cf0633-e34e-4a7c-9711-4ee84b0b8131", "indicator--7689bce1-a4f9-4458-9baf-955c4fb2b1ea", "indicator--15ed9a52-a34e-477b-bad5-0d81f837d349", "indicator--4340aaf8-f9f9-4d11-a3e7-98722ee058eb", "indicator--be540da7-f0a5-47c1-87cc-d296a6a77f63", "indicator--86dc47fb-58ea-4703-96ff-0e8f17ea5a0b", "indicator--f54ed2b5-04b6-4864-a5c2-81971b7b4e14", "indicator--0a3dc71d-7f58-4758-a92d-65e666e59e55", "indicator--7618c0f2-2fdb-459f-a29d-9695d8269cae", "indicator--bebc645b-428a-487b-8593-64b006f6e04d", "indicator--dfb4d59e-7e6f-40a9-965a-d83ad173bd84", "indicator--108de48d-7bd4-49a2-85ba-f5dfb02d7be4", "indicator--8f413d24-e53f-455c-881d-6c1a1aae4636", "indicator--5400c92c-c34e-4baa-a85c-13dcfeb6d9a2", "indicator--3c9729cd-b59a-4db4-a022-10e206f4f960", "indicator--8cab9121-56b9-49a3-83bb-21c2ef6ceed8", "indicator--89be5ad5-7ced-4113-823f-b155a204a135", "indicator--7591db17-ace1-4d45-98f3-6d8ecd58207c", "indicator--01470ab7-eaff-4a03-9fda-2419c60359b8", "indicator--2482ab71-3387-4dc7-b35d-f41e31563f62", "indicator--e103cacd-076e-499a-a221-ffc45b256c80", "indicator--f280a908-0f0b-4ec6-896e-8bbe8464cecb", "indicator--dee7af58-5bad-45bb-8542-6387790575c1", "indicator--77977c1e-26a4-43c1-a7ae-1baca07ce77d", "indicator--3028a79e-2f87-42e9-9260-513df7c8fe06", "indicator--0ebb6a70-3f33-4368-8c5c-9dc93824a6db", "indicator--461d8f6a-3f76-4441-ad27-3a1dbe71cc06", "indicator--f917da4b-5327-4b0f-991b-9f85394209bf", "indicator--d43299c1-df7c-4c92-baf3-a916869b20fb", "indicator--d23d1ad5-9714-4bde-8584-c181a31018c8", "indicator--ac4b92cd-9e97-41d5-bfe7-1141aa098bc0", "indicator--59fed765-385a-4b22-bd77-213e21ab6cb1", "indicator--c09e5fa6-738f-4dc9-a865-24df39dfd4f2", "indicator--2492355f-9e9d-4953-9a90-e3b0b3c9e833", "indicator--62f87695-f704-4e54-b63f-72a38dd9874b", "indicator--10cfe7d1-b85a-4983-88a4-3cee9eaf9cb5", "indicator--75fb52e0-4d9c-4060-a9c8-37e39d02881e", "indicator--ce81541d-2edb-473b-87a2-dfe660975ef2", "indicator--a103e60c-6e0d-47b1-aea1-8a5244785683", "indicator--15ab049c-8ef1-4148-abcd-fe5315da6224", "indicator--94829347-8ac9-4d44-95c9-43011df88702", "indicator--a6d3aea0-237b-4e45-b218-86687915ef3a", "indicator--e30b2739-f136-488d-9c7b-088809ec5596", "indicator--7be3a238-bca7-4449-99e4-5334a5a0e52f", "indicator--6c9ad5e7-28a0-45b5-a2da-92dfbfe3a2ae", "indicator--94f62a10-2ef4-45b1-897b-ed9c0c1e954f", "indicator--113fa90e-6927-4d83-bc23-b3b7448bfe5e", "indicator--4c290273-784a-4190-96cf-054245f68455", "indicator--a2abe8c7-e39d-4770-ba12-eaa6258ce3f0", "indicator--1b44e251-1a97-4ee7-8f17-ea7d8b6e9f4d", "indicator--301ea9c2-b95c-4379-85bc-cfa865d51fe6", "indicator--f576d503-b279-4ef5-9352-29c043117ec2", "indicator--77f41e5a-32bd-4e9a-86a4-356f4d15c030", "indicator--4a5f3caa-d9d2-4c4d-bc9d-35727d4b731a", "indicator--3d928ddb-823a-45fd-90ef-ee5286f138ee", "indicator--148ec25c-3e07-4cab-aa35-65ec14a7f165", "indicator--2399e830-af4c-46c1-88f5-0d32ad527ee2", "indicator--5a45e546-74c6-4535-8684-e556fe8708cd", "indicator--3aadcfa9-b7cb-49c9-8fb2-0908149b5496", "indicator--01b147cb-a17c-4465-9325-bc369af7cb6d", "indicator--39499bb8-a30e-4571-9dea-ddc17e6bf5d3", "indicator--582a6ad5-06d7-44af-aa25-f8e60b2e27b4", "indicator--c3bceceb-7219-4b24-99b0-515904791d30", "indicator--b0a34c8f-5a3b-4fa6-9567-4769dcabf406", "indicator--7538fcd2-c67d-4536-9222-1b0c63ca59f2", "indicator--ac7a8b15-a7bc-4d4f-b715-823c7f79cd5c", "indicator--9c32fdb0-cb8d-4787-8693-3c4703d8a4d3", "indicator--39ca05c2-b6e4-4e1c-ae97-cf9b2d164f9b", "indicator--788bb80d-4193-4b9a-80a9-80f65ebf0440", "indicator--a5e46fec-3def-4679-aaa9-7c227af6872e", "indicator--57008ca9-2165-4d66-ad9c-2e39db9f3a6e", "indicator--d0afa875-f74a-4d1e-a30a-d5dee2fc1053", "indicator--c92997b5-8433-4318-8063-c110a62b9c3e", "indicator--9d3f7aeb-c3ea-4267-a98c-1772055567d1", "indicator--d6e49d57-b2f1-439c-8f5b-f04dcfe6bee3", "indicator--e1a23e0f-0410-493b-ab66-efb56923a1b6", "indicator--abf8c861-bd26-4a7a-8d29-f0e570bb805f", "indicator--4fd6dedd-8bf8-401c-bebd-c545d677d01d", "indicator--db280aaf-f3b7-4acd-bfb0-afa3ab0f37fe", "indicator--9757174b-abec-4ceb-b08a-4edbb301ecb8", "indicator--d4458f8c-dc68-44e6-bdad-2fe013c7d9a3", "indicator--46b72019-ce79-4087-a563-8a9e2a859780", "indicator--082ff954-4394-477b-852f-4066b3cfa259", "indicator--3bd4a2c2-48d0-4eae-bade-abada54629d0", "indicator--e32824ce-91c0-48fa-9ac2-7a1189e3296a", "indicator--47ee54e2-f989-4369-90ee-902336dd029d", "indicator--14850ce2-53b9-4241-8171-7daf6d06e8af", "indicator--cb4031df-f0ae-4924-a8b5-f78c09030816", "indicator--2ad963fa-4466-4914-b580-7f7463a0ce5b", "indicator--2298be06-a9ed-4bd5-ad8e-74aa752ba72c", "indicator--dc8a37b4-20fc-4bc1-97ec-daa4b790ba4b", "indicator--eb206624-383d-4742-9917-31251b06c13a", "indicator--598ef574-eece-445f-b357-b33fb8a48176", "indicator--f87fab32-66f3-48d4-b764-a1ce546313c2", "indicator--ff417671-1034-4881-a4ad-f0ec3832e797", "indicator--567101e9-f6eb-45fd-ba4b-8e840d969626", "indicator--5226948c-f1c8-4c44-8fd3-dc7f112197a9", "indicator--4fddf3f9-df11-4bd9-985b-fbf35249b778", "indicator--019f99a2-592a-48f1-8c4b-60ec9fd0d97a", "indicator--f2087dfe-7aec-4cdd-95fc-f31860e0631e", "indicator--005f6d98-7249-438d-ade2-824ebaceb812", "indicator--007cd391-0073-4e73-a563-cb988fe05c1e", "indicator--e4b337aa-1b25-4654-a25c-130c23d010f6", "indicator--a43ced57-f265-4ba0-9017-004df79c9d23", "indicator--0f910fd1-0cce-4a11-9f36-3ad7f9b4d1e8", "indicator--58c72d14-83a5-425d-85d7-7ec5c9843a8f", "indicator--cd32e5ab-098b-414c-9646-c45074bf63fb", "indicator--e72d87a2-ec44-45c2-bce7-ca18b1e31ef7", "indicator--7fbfb17f-107b-4955-829f-798bedda4fd4", "indicator--67367e34-03eb-4d36-851c-d752d27416dd", "indicator--1bb71ffb-7e02-4c91-8624-55970363e576", "indicator--e491392f-c8a9-4538-b822-a3a3270efb83", "indicator--5120ed3e-5544-4098-a011-c01fb470d17e", "indicator--58b27b62-1796-4a13-93b5-dbcd310f68a1", "indicator--949af46f-5718-4b3a-af74-8a53e7b8cfe2", "indicator--74220ff5-50d8-45f8-98b5-1e15f76fa938", "indicator--188559d2-53f7-43a9-97ff-987b3c01e2b0", "indicator--ac5652f9-9c8f-4458-9731-3bb1b622d01e", "indicator--074904dd-aa41-424c-9ff9-f4f23c85e886", "indicator--d1c45b99-af5c-4204-9971-e7c75e6e4e62", "indicator--c41ee733-1f74-47b5-b462-0ac6b70f3466", "indicator--edef0ff2-4cba-4703-9585-32ea51e967ea", "indicator--be69df1d-1aa1-4a61-ad3a-200028c543f2", "indicator--8b1d06eb-44da-469c-97c7-94d819998cba", "indicator--2eb60ea6-ab85-45bc-9bfd-735b9fb4c6e1", "indicator--f694dbb1-100a-4702-a7e4-7c626366fd04", "indicator--c261195e-70a4-431c-9166-6eaf1ab60497", "indicator--018383a1-9173-4841-815d-12432a45d1cf", "indicator--b48f7387-66c0-4574-ba72-274293490310", "indicator--9cd7218d-2e48-43df-82f5-b56560d0b125", "indicator--2f9d87ae-33f5-41ef-a5d5-fbd60db0a1c0", "indicator--37792c8d-3d18-48b6-a2a1-0f797d6029fc", "indicator--7132e1f6-8415-4de5-a98a-d201e99c250c", "indicator--1d645022-bcd8-42f0-bbe7-c0556a56dfd5", "indicator--5a4803be-5764-49c6-915d-04d2d9d937ff", "indicator--dad97db1-9d2b-4031-824c-b5dcbdc6d5b8", "indicator--e0a62840-dae2-4bc9-8648-807af1b7f44f", "indicator--031fc9c2-568c-4047-b999-91f6865b24a0", "indicator--9a5effe2-5dab-4d3a-914a-fd10a875cfdf", "indicator--58d9751b-8ceb-4c12-bd78-3bc4e9de6785", "indicator--0a1bc2da-9e56-4d5c-bfd6-c9d5b3e0a8cd", "indicator--fce8c9d0-8a75-4f31-a05f-f607616adb02", "indicator--4929b296-c3ba-4028-b515-21db1e19ee4f", "indicator--3119312f-bc4b-4114-b943-01181203fd42", "indicator--d6e72f37-ea73-49ec-8967-0fd2f45b2f09", "indicator--beb69e85-3b8f-45c6-9e6c-45cbd1c1ce99", "indicator--babfbda7-26df-4207-a5ae-ea2ce29cd057", "indicator--c3858b3f-5654-4a5b-8b76-ceef92707ad5", "indicator--b615da7c-755b-49dd-a4f2-f140f9a64dff", "indicator--fedfaad4-6472-45ca-b3d0-c260e85d7a58", "indicator--c0d431f3-ac8f-4b0d-8f22-2c605acc7555", "indicator--62360212-55c5-43a5-93d0-59183c1989bb", "indicator--f68f15ef-3353-440d-9c9b-fee607b1c461", "indicator--8ff63370-9ef9-48ea-8344-702aa0af1e98", "indicator--0e1d19f5-6fdb-4746-b87f-92030bf214e2", "indicator--c9f07ad9-d7d7-47df-bbf6-d92f404580f1", "indicator--af532505-6a6d-4c4b-b3b4-e17e27626282", "indicator--1353e6d0-eafe-4b4a-9827-b065a4e482c0", "indicator--f4408fed-fcd1-4497-b98f-3006853c4598", "indicator--d0f4a914-69cc-40a2-86fa-ca8c18701524", "indicator--f2831d44-a510-492b-88b4-d4f96e704299", "indicator--268df80e-0680-4643-a5cb-695ba22e5605", "indicator--2c8b87fb-e117-4e87-ba2f-59ac29827479", "indicator--d0f88725-161f-40ad-8f77-fdefc5083748", "indicator--4edc604f-094a-4b35-9880-0b13d2383703", "indicator--4dd754df-bcd1-43f4-8fe6-f8819fcdc0a1", "indicator--3a93bb1c-cdd4-4561-a5e2-759da7fa6080", "indicator--02803155-8729-4ee4-9a9d-4ec7be906c28", "indicator--5c84328a-19ce-4b9b-b8e1-9f967f8eed45", "indicator--c55d1dd3-c9f3-44ff-b7d1-7e7a77773ec8", "indicator--64f64851-3acb-4dae-9d6b-161054d79d26", "indicator--07f1929a-36df-4b68-b0fd-afac09680267", "indicator--a34e7ff4-7e5b-4de7-8d57-24ddf4877005", "indicator--dfd61302-26f8-4806-94b8-9ee94037839f", "indicator--eddae222-f413-468d-b69f-5ba1058a4451", "indicator--d59a5726-677a-4230-a5f4-47f904a0ef80", "indicator--91cd0969-e910-4514-a540-a44a66ed7506", "relationship--fcbbaa99-fc7a-4ca3-aa33-23336d7a876e", "indicator--4a855330-5e21-40e2-87e3-1d6844a3e0ce", "indicator--6b786ce4-62b3-43b2-baea-130a5c367379", "indicator--65a6c8c3-88fc-4635-9809-ad05c451d464", "indicator--b70e6063-ba49-4111-9632-8f514e5676ec", "indicator--f70a7b98-bb60-431b-bd38-381b67c7a07b", "indicator--2badff1b-c7ae-4c26-b298-d434187428c5", "indicator--4e815767-8b0f-4538-b1ca-5ba3d2156488", "indicator--c9df90fa-5664-40aa-b5ee-e7576512dfca", "indicator--2f556c4d-fbd9-472c-8552-54bd82a4bf3c", "indicator--75bf442e-6b53-4ee7-b5be-35917fb10b51", "indicator--bb37972b-af9e-438d-ae8f-69c675cf6669", "indicator--8083fb3b-895c-4efd-8176-106ae25f1c97", "indicator--c37497a0-c0aa-432d-a106-19bfb59efb90", "indicator--3bd4e440-4be1-44a5-bc3b-b971d497cb44", "indicator--9ca884e8-d7e8-4bb3-a362-7d6f3395697c", "indicator--a4890051-2fd5-4eb2-96fc-ca6c41353920", "indicator--a0640796-0490-4289-ae8c-a9579381dd1c", "indicator--179c8ef9-7a49-40b8-8447-eefbb3447efa", "indicator--91bc9d5f-68e2-4ddb-b24e-de7b83b638c3", "indicator--76342270-b900-42c4-b73d-2a6ac9b2a960", "indicator--270927ab-26cb-43f1-bb61-6aabff3f9f6e", "indicator--bb2e85c3-99cf-49ba-9c8a-a077961b3338", "indicator--5fd76f27-53f8-4c87-aff8-8c5d391a43f7", "indicator--b5b3034a-11bd-4665-b08f-aa7255d8fd98", "indicator--568c79de-f3a4-401f-b730-6f4023e987d3", "indicator--75372360-a4c2-458f-86f3-c981d519e225", "indicator--5fb30cdf-aa2b-4024-9e00-93d81fa38ef1", "indicator--a786c30c-929e-49bf-bd06-8d21931b3c9c", "indicator--bf59df05-c44e-45f7-9147-32944061874c", "indicator--e53611c0-4e78-4d59-aca8-d80d7d2a49ac", "indicator--c93783ec-7107-422c-9aff-8c30b231c9cf", "indicator--be52e3c9-2916-43f5-ab55-0e78bbad2d2b", "indicator--74d271af-26ea-43b4-ab20-7c7f7bfefacf", "indicator--4bc72941-9cfe-4913-9d89-f7acababcfa0", "indicator--63ecd907-f812-4dc4-836f-5d05fc844c24", "indicator--e87eda92-1a61-4779-a36f-0cb76a939a86", "indicator--be557038-6942-4c09-81ea-955cb0bb7ba7", "indicator--1331297a-95f8-4a5d-98b8-1ea36d4a07a5", "indicator--46e960e0-2096-4d1c-b699-0fe9c8f45ca7", "indicator--2a28196a-42d1-44e3-9d86-3776e9258b42", "indicator--f5955750-62e9-41eb-8304-cb5a17342081", "indicator--380f1397-2797-4b72-a1b7-fac05b35e45f", "indicator--35ba445b-2576-4052-941d-d3b538d580d5", "indicator--dddde2d9-d8d1-4dfc-9540-a23abe334983", "indicator--7b0bb7f2-302f-47a9-aef2-3ef4a4cb8ef8", "indicator--0616493c-cb8b-4044-8c44-51b197575fdc", "indicator--0479f047-74b2-485d-9db9-ab7059d2c3df", "indicator--f2085040-a32f-4742-a301-f4ebc5ee845f", "indicator--4fe96f30-ae41-4078-9eea-d783f4be2204", "indicator--b5163d6f-5a91-459e-990f-a49c4fcf63a6", "indicator--f30def6f-e237-4adf-b356-6d7cfdb4fd5c", "indicator--c7e06e37-4c05-48b3-bf2a-44158586007a", "indicator--f38983f5-59bc-45d4-8e36-6eb3433a189b", "indicator--99d23713-ff0d-4d85-8cb9-ae8b4e0a0ae0", "indicator--67e83913-99ad-486b-9ba0-0dea091b9dc9", "indicator--fab84598-ebc0-4699-be37-020786521301", "indicator--f5aafd4b-1e98-4d0e-a70a-e6ca4a92db99", "indicator--ec0679d1-b89a-4156-adce-270a776d8322", "indicator--f90f6359-0595-4d7a-9077-6ac1de9d3699", "sighting--1c779ce2-91da-45b7-af81-d289a8b5acf0", "sighting--c5e9046a-d828-492f-bca9-088d7720293f", "sighting--93cea6f7-f506-4668-8bb9-5547d56225d3", "sighting--1c51d0a8-f232-4aa1-a7f1-bd2a841c2c18", "sighting--2771321b-bf69-4e24-8aea-14536f1b6e26", "sighting--5e21ea54-7f9b-4c6c-b0ee-6a868c058db1", "sighting--34e65edd-a817-4501-84c9-c7f76f7158d9", "sighting--0aa42484-22e1-4fb1-983d-8e8907fff671", "sighting--678ccd52-f798-44ec-9bdb-632792221f53", "sighting--07df62cf-92d2-43a5-8ee7-c90a91f37c1d", "sighting--5aad31dd-9582-4e57-911b-61bd1b770f62", "sighting--e4927e91-1912-4c66-8b76-3ef57f88b43a", "sighting--940cf50f-b88f-4a35-ba78-06fa5ccdeefe", "sighting--489ed39c-2a4c-4df8-a5fd-77b89a1d4218", "sighting--78d7d44c-2491-40e7-8dc0-3354db55624d", "sighting--9b07880b-8e4e-4502-bbdd-781975a08523", "sighting--0346d998-d1da-4b12-b957-72648baa9e5e", "sighting--7dedb238-2c3c-40e7-aa5d-e39e48d0c276", "sighting--e18a17f7-90ad-4f03-9c2c-32edb30f8fc4", "sighting--3f4f22eb-b2a9-4a58-9b7e-10923509159c", "sighting--9cb91a62-bd2f-436c-8063-3ce5e1193346", "sighting--5ba760b7-a221-437d-b2f5-92d1306bbcdc", "sighting--142d2f34-e0cb-4c65-a6eb-f4f9fde21968", "sighting--039f70f6-245b-47a1-a657-dba12908e20f", "sighting--91ab5103-f823-46d5-830f-2ebca023b9b7", "sighting--efee288f-da77-43f9-ae40-eaea64be2699", "sighting--11e854dc-89ce-479d-bdef-60460bf89d0b", "sighting--2d19ec4f-b3c9-4baf-a513-a5758f538adf", "sighting--df3938ce-4a80-4f72-b03d-c86ee442c377", "sighting--a15fa5dd-9724-4d86-9103-743efd0ab8b0", "sighting--5823245f-e2cf-4745-af54-37946d75ae03", "sighting--68fb3385-8f55-4182-a2ae-8d4a6dbdb869", "sighting--35d0ef20-81f3-4562-aee0-9e428996f071", "sighting--3491169f-b643-4fc0-a963-ac8696a74c69", "sighting--031a3a18-5cd0-4c4b-92e6-82c3aef1553d", "sighting--701c3a63-9d8c-4713-bd43-f7a419bef72e", "sighting--67aaf309-9988-436f-bb7f-6b7f7c2d241f", "sighting--421b3825-12ad-4064-8b3f-39d420c65242", "sighting--f2cf3120-1efe-4042-9526-02576475ebde", "sighting--ec9395de-61f4-4f14-8464-a0a50ea43f9b", "sighting--7def0c52-8a0a-4212-9e88-505eff63c23a", "sighting--d46fc967-18a2-47ad-b900-d0df9bc6e565", "sighting--c4424c3f-1a64-4015-9f53-7d58e6cfcf45", "sighting--e03cd8c6-06b2-49b4-ab13-eaaf8d1681a5", "sighting--9cf2ddf1-f707-46a7-80b3-4b2a907e3871", "sighting--f2b8f937-0e8b-49b7-99f4-b32be2900a2e", "sighting--5c0f0a89-bba8-4f70-a707-51eac62fef4b", "sighting--5f79febb-9946-4343-9384-189a8000bab6", "sighting--8633dc55-6054-4211-b2cd-1d4c12fe6094", "sighting--8853a9d3-68cd-4a4f-9563-74f5f9b9d403", "sighting--ab4c0195-d0d7-402f-98c6-adb00bd1a5c4", "sighting--58dd848e-e9bf-40e9-ada2-9a73d54f64a6", "sighting--056670c0-0c42-4546-a034-3256780851f5", "sighting--52e54319-8d52-48ed-ac73-0ce225cadfd1", "sighting--891b4b22-72dc-485f-803c-da5b1cc283f8", "sighting--78589234-3002-4c3e-b1ae-281f12fdfbb9", "sighting--2e84adda-a81d-4843-9c20-4eb176fd4146", "sighting--eebab528-5e1b-484d-87a7-72bcd6c27cca", "sighting--fedbee0c-720f-4d64-bf68-3058de814aff", "sighting--381e32a8-47aa-480f-acc4-b83eb9ea0548", "sighting--7ab4bbe3-5ba5-4979-a020-c8517170cb15", "sighting--cbf441de-d3e7-4931-822d-96940891bdc2", "sighting--c037936b-dc66-4185-97ab-ff1c34054176", "sighting--58fa24aa-29e1-4b79-a163-abe5275ead2b", "sighting--3b5c1ee2-49fc-4729-ad4e-1573cafdaf5c", "sighting--a4f86a3a-e950-41de-987a-0b8f7bdfea85", "sighting--de297947-2924-4db8-ae0f-38e70b0fba8e", "sighting--479ba20e-3f63-4ba9-a30e-7e25c23fb8f1", "sighting--31fcbe9b-69bb-4687-b246-24687eed3ba5", "sighting--f2c0fadf-9a68-4124-ba35-d0f0818b589a", "sighting--c5334f94-0506-4f07-8531-347f7d255c9f", "sighting--9671022e-2a84-415e-bc5f-a863e6673d12", "sighting--82c44811-22b7-4448-a737-c9ae9b6e2f81", "sighting--c95a7641-7c27-4575-a39f-df8d9af51d54", "sighting--461b2c14-e040-4c5b-881c-41bfa6e49c25", "sighting--0439babf-070e-4421-b60b-b5058ed318ce", "sighting--d3fa1f4b-87c6-48f0-b287-22d6067ff49c", "sighting--435ba039-efb5-49e0-8dfd-55ab84dbb436", "sighting--bc2079ba-acda-4eb5-b218-4c4f5ace6cbb", "sighting--7b970f84-59ca-40b5-b373-8d23219830ed", "sighting--a60e8b6b-995f-4e41-a98c-afd85cb91cb9", "sighting--240ec875-176a-42a0-b7ef-61e3c1c3d01a", "sighting--4011efbf-6659-40a5-9490-bdf8c71c982d", "sighting--542793b4-75de-4c53-ad82-7d517524f867", "sighting--79c5eefc-7d54-434f-af48-6009bd501096", "sighting--04c1c6ef-0b7f-4136-af44-cae852858b0b", "sighting--4375f85d-60a0-456c-8d14-672437ddac4e", "sighting--7f036c34-c5aa-4cc1-b1d0-d86f45488670", "sighting--55d8ce7a-96fb-4631-9b3c-26efe356bd3e", "sighting--107b178b-83a9-475e-a0c5-eadf0bac185f", "sighting--7677beb2-d038-4270-a00e-dff8ebb3ace4", "sighting--1981eaed-2079-4c44-9ba1-611bb7cd9ab6", "sighting--1782dba7-8877-4b9e-b282-af5426e9d38e", "sighting--de0be6fc-69a8-4a30-82aa-d3c3da1bcfd1", "sighting--42d055a4-6aaa-4085-827e-f3e0b09f7aab", "sighting--abdf6d2f-f5e8-4b9e-943d-0d47bf635a06", "sighting--888f7920-6b5b-4fb4-867e-2f2514391991", "sighting--78178ce5-432b-4ace-9a00-d990be5cfaba", "sighting--e3fb8653-e801-46a3-9716-61736b7666cb", "sighting--f8259656-f68f-4358-9627-79862f1415d8", "sighting--3846287a-4862-467d-ae8a-10262c2533bb", "sighting--df882acd-7c06-4431-850f-bd8e88b7f45f", "sighting--7f4339e0-175d-463d-b452-70d545177064", "sighting--731f1b79-562f-4644-ba6e-d2cd7d77b109", "sighting--5903f141-db72-43de-8a3f-6075d3c6811d", "sighting--3cff3bed-e9b5-4dcb-89e5-6e650ade1367", "sighting--4d09aee1-9935-454c-95b9-7a710eddf730", "sighting--43d6ecd8-d5ea-4b8a-bb4a-f077322029ae", "sighting--5ba9e640-a437-4697-90e5-40f7ef341ef3", "sighting--430719ae-7f2d-46e3-b8b9-cab45d564f8c", "sighting--bf2346ef-b524-45e8-83c2-4db20ae94f3b", "sighting--698c9120-96c1-4bda-ac48-3d5161c07ee7", "sighting--6c0a251b-8061-4068-9c45-5a2a7b17c467", "sighting--f23a0352-85a6-43f4-aece-269965480298", "sighting--66f50a01-c32f-4020-94a2-2ca3ca6e6d3c", "sighting--16103399-f622-43e4-b83b-6d785ed43590", "sighting--c017f939-d2d9-46bc-8efe-68cfba3b440c", "sighting--80c39572-82a4-4a9c-9ed0-6730cdd78085", "sighting--e8348c7a-30f5-4d27-a9ed-ab7a4160e5f2", "sighting--eae70edf-0d30-460d-876d-167a2dcf1355", "sighting--4193acd9-619e-48a3-a315-9fde171370db", "sighting--5efd0a29-3e73-488c-ae87-3e5659973d57", "sighting--34ed2ec4-0864-413a-a696-1c3408790d11", "sighting--7bff145e-b1b8-4ada-8f33-8c905463367d", "sighting--ee9a2a0b-9a61-4614-8057-edfe94de4dea", "sighting--0f9111f4-ff87-4090-aedf-c7416a42c8f8", "sighting--ad19dd82-63fe-498e-b5ef-24643b1b7fe1", "sighting--8b32c1a8-1847-4a5d-950f-803c0014d811", "sighting--4666dbe1-9000-49b0-bd92-0f0d8593b609", "sighting--c6c1291c-a0a1-4f94-a117-fb8dfb182276", "sighting--bab00415-92be-4e65-9734-2941232f5f6d", "sighting--425bcd77-8358-427d-8352-cc2c188e1b4a", "sighting--a497760a-f0bd-45a0-8e61-491ba4aa3c51", "sighting--7822dd35-05e2-40de-a2c2-9e757c3d4ac1", "sighting--f2e94d0a-fb74-46a8-a710-4511efe2018b", "sighting--6c4fedfb-d4fd-4d6c-a843-31ac8de4ebfb", "sighting--53630aba-fa94-477e-8092-e6ec01a2a6c1", "sighting--0b017a66-3d52-45be-9e41-62d18f5faaa0", "sighting--6f169288-12cb-4348-aa67-f81294a75291", "sighting--8dbf740a-15e6-43fe-bf7c-3a90f53c6f46", "sighting--ae9ca3c5-754e-4074-bb7f-ca8f383f95bf", "sighting--8c15b447-c5c0-4565-9c8e-28798148642f", "sighting--732c44ba-e20f-431e-b833-1c3319317373", "sighting--0db1066d-67af-4069-a496-fa8f054174f8", "sighting--c4d8fbd7-d410-40bb-bd5c-0c19639b61e0", "sighting--74c33b2f-1af1-4caa-a1c7-5085b43467c8", "sighting--d6c97a7d-ab09-44e3-92e3-de928a7e99f7", "sighting--4ccc4d42-e2c2-4b4c-be6d-7414705c673a", "sighting--28221b89-0ed2-4cc6-a7d4-17176b30a913", "sighting--118e5f71-27d9-4f2e-b4c4-529e75c03657", "sighting--8c433839-6dc9-42c8-ac07-30eed500d462", "sighting--75d734df-4535-4866-b72f-1e1452771354", "sighting--5b552fef-90e1-44ff-8de0-1b08a5a2e509", "sighting--2466f3cb-04d9-4eca-8312-51c83d4f4898", "sighting--914c1e76-289a-4231-8c7e-53102b8db1c6", "sighting--561be183-f06b-4e7a-a520-c42a79773aee", "sighting--7b1c4f73-cce3-4ac8-96b3-ca9f095bc919", "sighting--23a9a562-64a1-4594-aa28-96a82cbb5ea4", "sighting--8463b1df-2702-4d77-b6e9-59959a562c3e", "sighting--10a88d45-5246-479a-af55-55dd5373b7f4", "sighting--dc0f22ee-ef48-460f-99ca-ef6bcf808640", "sighting--2aeabb85-58d7-47ec-9c75-48d73e3bcf80", "sighting--368cd4ac-9315-4683-8c0c-1e806aac14a9", "sighting--c1d7563c-aaf9-4845-acad-7ac4d42e6bb8", "sighting--83c206d2-9851-456e-8aaf-644c3a00b067", "sighting--a8e42495-a362-4924-8a47-e772883d6a4b", "sighting--bac5ed09-ad3a-418a-8677-98ed0b587a23", "sighting--9803c9f6-0596-4c2e-a10b-907017b9e101", "sighting--ccd6dd7d-d9d2-4bb6-aeb9-1b3eceeed357", "sighting--182d0198-4cde-4df3-b551-1dd0d92b427d", "sighting--89d87ffc-0316-474a-8f33-466455ee1af7", "sighting--baa30b38-d44b-40ac-882a-b1f373e8691a", "sighting--cc660a43-c965-4df8-bebd-a24d134c33c7", "sighting--cb68f8dc-3e88-4ecd-8348-9bbc8fe74f4e", "sighting--4cfd9bff-bc2d-4714-8f65-24b5ce222fe2", "sighting--37083993-e15a-4832-b57a-1f44761a3132", "sighting--48ee4854-bf90-452f-8c62-d8e644b85d5e", "sighting--8756a5e4-f32b-4b6e-8250-01543acf7064", "sighting--25bf5961-624b-4bf6-bcd9-7162338ddedc", "sighting--ee92e0dd-401b-4a45-a7e8-e2e3f5d29102", "sighting--2550e258-7a2c-4caf-9684-2e7fd6149ac8", "sighting--6d2fb977-2d42-48a8-9ff1-8555c76e13fb", "sighting--037545a2-f540-4d07-9844-05e06441bc5b", "sighting--24b3017f-e93d-44b0-aa3a-e482f99d23dc", "sighting--71ab9587-544d-4bfa-a1d3-ea06e3087aa3", "sighting--918021fd-676f-40d0-ab73-04a774476072", "sighting--0c23f82e-ba49-40b3-b741-9f1a70610031", "sighting--0cbee6ea-a53d-4a25-bdcf-6e4958e9d332", "sighting--b6152a4c-0b93-4634-9d24-3adfa7c13b4c", "sighting--70c23a9f-ded4-4f87-a4e1-f02991cde344", "sighting--03001e0e-0d47-48ee-a2af-3884bf9ea53d", "sighting--b568a7f5-c114-4230-9a93-b2816fca9512", "sighting--74e686c0-da41-4ad2-b440-d9854a0b0928", "sighting--c6dffb2a-b49e-4d37-a676-862648648793", "sighting--509a042a-baae-40ca-8511-e1058d2ee2d9", "sighting--39492a09-8f44-423b-802a-d48aad04b9fe", "sighting--9eed94a1-7ec3-4fbc-8625-b7c54bdbee94", "sighting--bdcb64d5-a295-4321-b280-20c4ee5aa1d9", "sighting--5e3130b2-6b1e-4210-9d9b-902d4215177b", "sighting--642377e3-22f0-4b46-ad09-acb2ebe48549", "sighting--646215e2-cf93-4d40-a02a-a6604c382ecc", "sighting--59c4e5c3-61e0-4e45-87b3-456509f02a80", "sighting--8222ddb5-a920-41f9-9fb2-a33d22d90a2d", "sighting--ee06717d-e794-4037-b623-7abc5f0631ae", "sighting--a2b9f149-15d8-4643-b481-318d1917b1f5", "sighting--838678d6-133b-4cdd-a34b-9765705076d4", "sighting--b1472c5d-d975-44f4-870f-36ec5d75afac", "sighting--e8349381-14c3-43ee-b588-289009e3b438", "sighting--ec56f28d-c70d-49c4-aa0c-9f95775c44e4", "sighting--4a567ba9-aaf6-41e0-822d-b4b35deb1502", "sighting--eb731c00-b7fe-4bce-a946-a2b42b1b517b", "sighting--c358c684-ec82-43c1-90d2-958131d60747", "sighting--5999f94b-96ba-40a5-8acf-9b567965e413", "sighting--0c615b21-fae7-4cc9-8209-575bc2292b1d", "sighting--addaa307-8ce7-472a-8c34-eb8fc1331484", "sighting--2ef4181e-3ab0-4ae6-8815-33ed4bad07c3", "sighting--9ad0264a-d9a3-494a-af6a-b4bfe6581011", "sighting--6ad1beab-af4c-4528-8d82-e8338df62bf1", "sighting--fee35966-58e7-49f4-bedc-045dc77e04d9", "sighting--2cb6b846-cfb3-4abe-8034-c2516f01481c", "sighting--d4fc01b8-3d7c-4cf2-9345-058b9bd1cabe", "sighting--bc886366-ee5e-41f9-9bf9-7bc4a019b88d", "sighting--d17b9f90-0d47-417e-90ce-0e09ae0d3ce0", "sighting--6d5df077-6986-43d5-bb0e-a4604f3f93da", "sighting--89b50187-e202-45da-ad5d-07516b9674d0", "sighting--eac4a0cb-b75f-4c11-bd5c-0b732f6a8afa", "sighting--4c2bd01f-83fe-4da3-af5a-60c7c60a7370", "sighting--5ea18ca3-2190-43f7-9071-7597f31aebb1", "sighting--4ada93a3-7ee0-4119-88a7-45bf5195094f", "sighting--fdeb1d57-0b5c-405f-99ea-82e4c6a0abe1", "sighting--f41ce247-72aa-4da7-9480-ce8ca2775ff9", "sighting--713d117d-097b-4587-8644-fe3d7394710c", "sighting--8c8f8a1b-f5fc-4ebb-8486-9059f12f0ea6", "sighting--7680e055-57a0-4e8f-99d3-1b36a2b2cdcd", "sighting--1c2171fd-8ef8-44ff-8272-3e825f730517", "sighting--644987e7-cc12-40d3-b862-3085db5f4823", "sighting--49ff3b0a-6714-40d4-8768-5b2275cd7c79", "sighting--b07159b4-e134-4353-a34f-cd0b6aa243b0", "sighting--74091f89-6a15-4896-b293-4dfe2af37e3c", "sighting--17ae2cb2-08a0-431d-8f4e-140cd6fa72b7", "sighting--a89034f7-c343-4ecb-bf1c-8a533e70fb08", "sighting--923b79c1-1cad-4ee8-ba7c-22e76847a5f6", "sighting--79ad62f5-a763-4e4a-a08e-285ab419db3f", "sighting--36d0537a-5142-485c-9ce8-8a5bd3790b79", "sighting--377f2381-9238-4897-a91d-fbef71da1207", "sighting--4227ad2a-db06-4eb6-951c-ac35835e63dc", "sighting--b492ba3d-a80c-4ebc-88f8-92a3aa8077d2", "sighting--171d850a-b6b2-4894-84be-d79d6b596de3", "sighting--fa8ac755-3c7c-4195-b00b-6d194c638f30", "sighting--b102de56-afd4-42a3-8916-844f90798a9e", "sighting--506f76a8-96c0-4aed-b1a8-7861a6617fbd", "sighting--9d6fdc9c-89bd-4bdc-a3b9-20bd853037da", "sighting--7e2e64d2-db19-4946-8e24-79ce6314a809", "sighting--fec60f44-d392-481c-95e9-a2f38ed51754", "sighting--79610305-16d9-4816-b2cf-3bc42c47093f", "sighting--3bc8f8e3-7f8e-428c-a0c1-75ce0aa8766c", "sighting--699a64ba-b131-47f1-b4d3-9e4cec9218bc", "sighting--f846dc0e-6631-4c67-a4c5-b37e12c4c139", "sighting--934cd60a-b8f2-4078-bae7-81b7d3472e82", "sighting--c309929e-0f5f-40ee-8d1a-cfe50aedb372", "sighting--935b67e3-7ca8-4fa4-a6e2-acf1bc0844bc", "sighting--20711efd-f1ee-4629-9719-1d8e7cdfec03", "sighting--8400f30e-26df-455b-b3a0-b59d8a7a1381", "sighting--7530a677-0216-4d11-9baf-5ca0d3824872", "sighting--4dd9bd77-004a-434c-9f91-133571897216", "sighting--35d2aed0-4bbc-4a4e-97bc-d01c6fa160a9", "sighting--b1fad89e-9615-49d4-98eb-9efc818b539f", "sighting--71a77b44-06de-45be-a1c9-de8cb274ad79", "sighting--1664fe23-e2bf-4e34-a5c1-8421990d2ae0", "sighting--a0f8d510-23f4-4285-bc1d-4a353549dee8", "sighting--b01b8623-4127-4d2e-be96-3462fcf27428", "sighting--ee94253b-665e-4a18-a869-4c9fc57c128e", "sighting--4464c4c1-bbcd-4f3f-8bca-6a266187d867", "sighting--69f5ecf1-62d7-4c60-8595-57e4cecae350", "sighting--994e1c6b-0cfc-4f38-8021-6fe52a497ac8", "sighting--d9a3d80a-ea60-4961-b899-480a100fed0a", "sighting--7a3f7a8a-65f8-43d0-ba25-442b3d626ac0", "sighting--9ad1d341-2fc5-40e2-9fab-39224d610add", "sighting--5403730a-e217-49d7-b283-21510ef016f1", "sighting--2066dfd4-a2f9-468c-b786-4100419040aa", "sighting--4bea9328-7391-41e9-9d9c-8c1f6bc8f264", "sighting--511b0ea7-6310-461e-8dfa-97e612fb89ba", "sighting--ecb4d533-0bb4-41d2-be09-c952e85d725d", "sighting--9ae3ec33-01bb-4c2d-9f8c-bef56aa6facd", "sighting--c95e9a07-5a6a-4216-96a8-583452174199", "sighting--c9b753e1-cfe4-48a3-9ac8-f42d922067f3", "sighting--e241c1d7-4a44-433b-9dbe-1345a2d3cca6", "sighting--ca29f2cb-93c3-44b8-81c6-e0a377b20fe2", "sighting--1ff00f6c-dab7-45e2-be81-33e7e362d8e3", "sighting--0077000b-f108-4811-a166-90b9c1d5667c", "sighting--4d92776e-f821-4d59-8908-fdcbb92ccba7", "sighting--b081b2a9-03f6-4abf-bd55-ea0033e9df72", "sighting--5c603a36-d910-452d-bb6d-1f14a9a0420f", "sighting--9036042a-f6f9-4994-8402-41c02d000ed6", "sighting--80f28531-b311-42c9-bb66-6cc720c4f360", "sighting--b43be4ec-568d-4138-b37c-0dde22f3c504", "sighting--380a5d08-43c4-4daf-981b-47899dbc1ac2", "sighting--84e17ab3-c5f2-464e-a75e-e1d7d54e5c08", "sighting--a4b6d90a-e993-43d2-9972-ce7e7c160140", "sighting--8e7928f4-5397-4197-9853-734208a01f57", "sighting--32fbe847-8a60-4999-90d2-67e71b5cca5e", "sighting--c6a75c80-ea74-4c44-8746-e6525feee2ac", "sighting--06eeff6b-c045-431b-8b7e-e201b12a53ae", "sighting--6a0b8c69-1ec6-4929-a673-1b4f063ae95e", "sighting--94fa1141-55ec-4b22-b235-648a1992f02b", "sighting--0baa8493-aea5-4b22-abf0-8b2f70ecf179", "sighting--30b87585-7f8f-4ba4-b4f4-4aec8d5de753", "sighting--84ffe2eb-aa2c-4ef9-9a2e-19efaf4cf7fe", "sighting--65b0cd3b-931d-488c-9628-25c3f7a7ce74", "sighting--c37bafc1-70b2-49ac-9427-747d07fb2778", "sighting--516861bd-dadd-4dda-9bcb-ba434b98ae22", "sighting--836b7e04-afcd-4cbc-8d52-b50c5cf6ed68", "sighting--5e259386-9ff7-4bc0-92d1-141d016042e4", "sighting--4190d130-b921-4722-9097-a1a172360e53", "sighting--fb45861d-1b17-410e-98df-8998fa35ab4e", "sighting--23e0b6a7-ea09-4f9c-abe4-1902ade1a302", "sighting--f319637e-77d5-466b-8faa-5ba089a34855", "sighting--5853df11-7bb9-464e-b217-1e2e7e449741", "sighting--1b2a733f-fd35-4457-9e55-9e37feb478e7", "sighting--bc5ea957-4fda-4894-8dc6-9bd08a9a63af", "sighting--6399f02e-6e8e-4908-88c8-b118656dbc75", "sighting--c14adc89-268b-4954-ab61-cdd2104d8bc9", "sighting--2fc81b12-8ed9-4537-a7f7-3673797477f4", "sighting--19b78cda-0fb0-4372-9b36-19c378c9c7a7", "sighting--0ace6330-7b7d-45d8-8b60-3b9faf9864e5", "sighting--4729a006-6541-4622-bcf1-f6515780ff92", "sighting--ae98a0e8-29fe-4160-a86b-90a1973e839d", "sighting--1f693ae3-7987-4d00-821b-c710e3dd606a", "sighting--dbabbf55-5264-486d-aa08-566c2b5f3839", "sighting--37b07696-c8a1-46ff-8f4c-30bbe5f1b901", "sighting--6276cd53-2745-45e3-9663-032ce20bacc7", "sighting--883dd52c-219c-4605-968f-86dce798ad4a", "sighting--2cf81528-14d2-474a-9c01-e6ba247cc681", "sighting--2c3d0971-2561-4569-9618-84ccf0a29413", "sighting--be1dc87e-548e-4e08-b168-27585915086d", "sighting--6e019903-440d-4304-89bf-ffa100318397", "sighting--d6ae44af-1305-4a6c-a034-b4202bbd9525", "sighting--86acb384-775b-4efd-8801-d9c3cd92d4a7", "sighting--203b6bce-55d9-4049-9150-30d82d6c2c42", "sighting--3bc510c3-06c3-45f0-8589-155551b08e31", "sighting--9d520e33-f62f-4238-9544-c9245f651f11", "sighting--e8320a4c-346d-4151-b158-2fe2ec25bdb9", "sighting--37d210bc-d4da-4298-9576-10cadabe8eb9", "sighting--33f6c958-4b95-443a-a635-b67b289c5bd2", "sighting--4c4e3579-38ad-4f95-908c-cf2a106831bc", "sighting--dae9051e-60e0-4d0a-a014-e04d5ed651af", "sighting--0748d3ea-d62f-4f59-b4db-132c841cc13c", "sighting--ed05b361-2ef2-4daf-b5a3-14b5e52952cb", "sighting--929dacd5-6a05-4ba1-9740-7a89e602e7d9", "sighting--54c9f480-a910-4f73-b60f-7a22f718a853", "sighting--340f11bf-f898-4f3e-9c80-fd835ad8492f", "sighting--0280c735-3c4a-418e-95fe-c4d39c91db16", "sighting--34d37a4a-ab0c-465d-9ee7-b98b13f3ad15", "sighting--84622dc4-2967-40fd-8f9f-58f49e8a1807", "sighting--58a69ac1-2812-46f8-a18e-5910df036de9", "sighting--64a2a398-8d6b-4b2d-b95e-ceb3ee785af5", "sighting--cb016f73-e055-4ec5-a0a9-a1a3d8fe916b", "sighting--61630958-75fb-40fb-839c-a84c8b180a2a", "sighting--f0a29c79-653f-4eb4-b067-e414181af7b2", "sighting--a0bf4b22-78af-4c6f-8ca2-827fd2e3a1d2", "sighting--379051ea-5d17-48fe-a48d-c06459210d41", "sighting--c03b13bd-dd05-4d3c-b123-25f8a908e729", "sighting--30419169-2c0f-4a33-bfdc-30bdb60bdc66", "sighting--476367ed-d21c-4a5e-89ed-f71fa11e8fdf", "sighting--5b101483-4480-456b-b7e2-9d42f3662014", "sighting--56e2a7f7-9ece-4368-9561-ba1084654cf0", "sighting--1a9b8582-c014-4c93-a2d9-cc467a5581bd", "sighting--490bb3e5-4a86-4416-b61c-2fd6c90aeff1", "sighting--bcd3cf2f-49c4-4adc-83f9-8b0536d01878", "sighting--e06d2e84-888e-46c1-8565-b8b84cb09d1e", "sighting--37405e51-2a3d-4535-8685-a60be9c0944d", "sighting--e532fc45-8042-4a14-bdd6-71cf8525ef00", "sighting--f3dd2044-070d-49f1-bb50-ad5e404c794b", "sighting--3963e7a1-edb8-465e-9ca5-23acebb4c087", "sighting--9b70d4d5-501a-4ac6-bd5d-861bf5fd78e7", "sighting--2484433f-6285-4f62-9e5c-f2c44a449b1e", "sighting--60b994b8-68c1-46c3-8b65-c60a86a398ba", "sighting--169f114d-2f38-4ac5-a938-c10cf4e9da90", "sighting--ca8ccafc-08df-4506-94ae-79ce39b4f4ee", "sighting--e01218ab-51db-4878-9fd4-65e01149560a", "sighting--8984d319-f3fc-4874-ae18-b8589c6601ea", "sighting--ca315d6c-5f23-4029-bfc7-70bbc7d1a19e", "sighting--5d0a27a2-8690-4fba-b652-cb4c8c556560", "sighting--7056b6eb-fd87-48da-92d1-88d6e108b51a", "sighting--ed5bf0ba-cdba-43b1-839a-219886b7f1a3", "sighting--08f6b415-91cd-4ef6-9d92-14fa958cb253", "sighting--d0979047-e9bb-4958-853d-57ef60ec302e", "sighting--c9c71e6c-f4cc-45fc-8325-3f13fb155f11", "sighting--9225fecf-3928-45e8-beb2-a648ec930afa", "sighting--5c630f0e-fbcb-4123-b720-0031209b51d8", "sighting--72b48e87-c90b-4918-b9fa-3983b6a64623", "sighting--d02d3ebb-9245-40e0-a76b-f657ddd62ab0", "sighting--75af418b-17a0-4865-9611-6ddc5f9a54d5", "sighting--7446f91a-3392-421f-abdc-fd25b524f8c8", "sighting--18cbc62a-0ade-416f-94f0-a8abde789329", "sighting--e35f28e9-d9c7-40fc-bde4-5c314958fd01", "sighting--e40169d6-2937-44ce-89d6-6590d49485ce", "sighting--7e998310-9772-4a18-ba74-1eca73a99bc8", "sighting--e6bd9fdd-218a-41da-a3df-4b471c94b3c4", "sighting--13ab6961-7498-4c74-8322-f2ec8b7af890", "sighting--d2b6c25b-fe4c-450f-9fb5-9b8d82f6956f", "sighting--fcadc962-c125-4114-a3a9-ae1e3a7e3abb", "sighting--a66f467f-6790-46e5-8bc5-6d8ae029ac63", "sighting--85165a3a-e75e-4280-bea6-07082e9e2cff", "sighting--0f1be555-0681-4789-b58e-121f2d6a7815", "sighting--14bf84a9-32b7-4318-8d64-85efc87cafa5", "sighting--30bc6113-707b-4d93-b6c7-bb988b1c7e5d", "sighting--e34d6229-8fcb-486c-915c-f7d6f0a9feba", "sighting--ace17838-d711-4ae9-8321-abe21d345178", "sighting--9ede4f5f-51ef-4f13-a681-b2a33b4393c1", "sighting--78d8ebf7-0c18-4f39-aaed-704187dcb933", "sighting--06b97d1c-c756-41b1-a440-11880eec374d", "sighting--e2d60119-857d-4447-a0e5-a6c05d835158", "sighting--31b471fa-5e84-4da6-b9a0-1153b29ec807", "sighting--6c9b5d82-a2b2-432c-bbcb-d4fff66eee83", "sighting--0b1246d7-9a49-44a8-8f2d-72e388afcb85", "sighting--7246897b-11db-475f-8eea-f4966587f283", "sighting--e970adb3-d595-49b4-8b32-bc878ebfd809", "sighting--5725f067-7cf6-4c75-a7ff-cbe20c14e5a5", "sighting--88616f07-97d3-4f67-a05b-f6162fc9fdc5", "sighting--ca0e6490-4f94-49b3-84cb-9fffa53e7a0d", "sighting--17ba060c-1906-4d2a-8f4c-273f43b85b8f", "sighting--593504ab-0866-4110-aa30-802b9db85e2a", "sighting--d242358a-14b5-42f6-bea6-0b08b23fae5b", "sighting--b7fe7871-a00e-4439-84b8-f09efe987f89", "sighting--d270c25d-eec6-413e-a24b-3c50565f746f", "sighting--d88c54ba-f2aa-4571-879c-67d65b444f2d", "sighting--54ac9b02-93d6-4eeb-a77e-880f9ada2b47", "sighting--b0527676-5195-4861-b296-3ca06c4ba792", "sighting--b3de1611-6b7e-454d-84b1-5ee7494752ae", "sighting--dac47574-ad03-453a-91cc-60c378a46897", "sighting--e46b263f-49db-4a9d-a000-de6e085c4c70", "sighting--2c017a22-888a-4eb4-acfc-2f6d1b5a7005", "sighting--799db74c-aefe-49a7-a333-4a97d015df9b", "sighting--ac5d008d-6df0-48fc-9b43-52fc48b1c57c", "sighting--4e3908fe-c3f5-4f9d-8aa6-b0eb204c0710", "sighting--6ec2bd1e-4310-4723-894a-4f5ea788ada2", "sighting--3e97ecb5-a3fb-4be1-ae36-fa0fcf548d77", "sighting--d8023372-e1ff-4d94-aa40-b96dd650fc8c", "sighting--da8ed741-5db4-446e-b315-d18f57f218ba", "sighting--7df599b8-d013-4c27-92d4-bf30fd9c5b3d", "sighting--a489ecd6-2d1e-4ee6-93f2-91221c72d3fe", "sighting--cf85f3e1-c5a8-45c9-b962-913a9d1ef59b", "sighting--1e163138-d61a-4196-a648-554f117516f9", "sighting--25d8d9de-bfa5-40b0-b5d7-d61aae1077e6", "sighting--cb587d9b-b1e7-4224-a49e-af83e12a0edf", "sighting--29a94501-2ff9-4149-ae07-76943daeea3c", "sighting--9885a7c3-5d48-4842-89cb-1deb4275a748", "sighting--bffa1b34-6ce3-4a10-af40-ef9220881e48", "sighting--281220cd-c790-4c48-97ef-9982e96886b0", "sighting--3494598d-f7d7-41de-bf93-5b93100c6779", "sighting--5f9eff5a-2cf2-4ef2-b8b1-b7663e4a8a6e", "sighting--5f0f1876-7157-4463-89b8-4187f4f0911f", "sighting--2eb10922-3a28-434c-b325-cb8587651d15", "sighting--474dbbdc-b686-4433-a206-f2b294110ce7", "sighting--d3dbd589-edb3-438e-ba64-43061cb25c81", "sighting--e24ee9c4-9edc-458e-bd55-7632c4d4d477", "sighting--a47fa9d6-98bf-484b-a3cc-9421d5289caf", "sighting--8690d267-c459-4925-8665-4e3e619f469d", "sighting--41174e3e-3277-4d63-97f7-5d456a397824", "sighting--600e38b3-f4e0-4e5e-a9b7-cd305b741c77", "sighting--86899222-8794-41a3-9d42-78adad36db21", "sighting--b36c33f1-84cd-4c1e-a38e-4013c839da3f", "sighting--2bbc47b2-e2c8-444b-b09d-704a7ecbb2ca", "sighting--f029d649-b5fd-4d0e-9b04-b1caec940736", "sighting--2a38fdb8-889a-49f2-846b-9c5bd5e3e9b2", "sighting--5a81dd3f-5d52-4bf6-9889-eee9bf71b33d", "sighting--df722791-7a63-4b94-8832-e4bc41635bc9", "sighting--d5f9f527-f6d3-4f00-8bd4-fec78ee47efb", "sighting--cbc157d5-6df5-4be5-b4bf-00fbb304e7cf", "sighting--6c569b00-6a93-44d9-8ea6-c97da6faee5d", "sighting--422372f2-d755-49e9-b5fa-1dc2a27d62e3", "sighting--9cfeba11-134c-4b7d-a4c8-0fb77be2175a", "sighting--43909c9c-09ea-4518-9c07-780aea5092e6", "sighting--0c089515-47b2-4979-bd16-42eb224b4bf0", "sighting--1d443846-1566-4234-bd32-fb7f3f12b625", "sighting--8f4f8aa3-9467-4de5-bf74-ed23aea36a97", "sighting--57affcc2-bd3b-4e23-b79b-6d8be528e268", "sighting--1073cae9-21fd-497d-9d40-ecd88d006184", "sighting--1ba0be4c-0c4e-4e06-acd8-6ab88caf3bef", "sighting--ad13aac7-68b4-4db9-aac7-0b6b5e954415", "sighting--bf7009dc-15f5-44f9-8acc-25fb98803e00", "sighting--b6b60626-263c-4855-baa2-9e77afc27b68", "sighting--e7568beb-e7ca-41f0-8686-4919004fa35e", "sighting--47d81edc-b414-400c-ac00-16634f5943aa", "sighting--00444b2e-0517-464c-b0ad-5c3746edb826", "sighting--275b86d2-ba12-4f66-8d4a-20ee1a1661e4", "sighting--3957cd22-bf37-453b-b55d-4f6f7a200126", "sighting--e568fa7b-4509-4243-8ef6-2c294027a2a9", "sighting--6f0dbba9-7230-4d23-b61b-dad0776c3972", "sighting--4e55f510-6503-43a8-bc99-41dfc3cd5258", "sighting--b5b394f3-2a41-4ca4-9015-2f9be17dbbe3", "sighting--479635fb-2331-4077-97e9-278fe2f13f3d", "sighting--35503e94-acbb-4521-a3a6-43862e2821c9", "sighting--11074e13-3ecd-4524-be59-7a9f1a5607f4", "sighting--6169c469-9a53-44cd-b030-a1d1dc3a9698", "sighting--f2900c2f-ef3d-48c8-b77f-82213c93dc01", "sighting--60e510f6-a49c-4571-a399-b13cb6cf0872", "sighting--df3db610-7ff7-4c62-9a40-432c6724a3cb", "sighting--00560f75-0be8-41c7-8ee1-649738340db3", "sighting--5f2fc66b-a53e-4d2f-bc9f-2cd7f0096e0c", "sighting--cb50ab8e-c564-4000-bbbd-3472e00b828f", "sighting--07566657-23ef-492e-be51-d36a062a3b5c", "sighting--2a32941a-313e-47e9-8439-f20278fcde63", "sighting--d1d0e10d-5e38-41ac-b30b-a908c601e5ad", "sighting--86499eda-3878-4be6-b637-09fa0eea6bb9", "sighting--c28c90aa-6bcd-441b-822d-5bad2e4c0504", "sighting--864abe25-8afa-4499-952f-46cd6ece8082", "sighting--d491a2f5-94e5-4330-8afb-15a45f876963", "sighting--4495d29e-a517-41c6-bde7-6d26c93d0141", "sighting--5ffba1d1-e93e-4248-b29d-67663754295b", "sighting--b19c893e-d885-4fa2-9d90-14ee06a89836", "sighting--22a3a620-4d0f-4e35-aa65-40f14f31c39b", "sighting--b5b34c5c-2f63-4a2a-830a-c75bce5d6228", "sighting--124a8e0b-fdc0-4de7-9c80-83c3bd4191a4", "sighting--d1b8a6e9-c645-43ae-b628-1325e777dcf0", "sighting--d892b33d-2fd0-4215-9048-dd8ede5e0f00", "sighting--63540eaf-23ea-437f-a0f8-a6b8418fb3f2", "sighting--4e4ba4f6-dd23-49d6-8574-a05c24575488", "sighting--21cc26ac-9651-40ee-90d7-a04eaf8dda45", "sighting--5a3f3226-b18e-4890-8693-c896dfec61b0", "sighting--cd3856c1-fa0b-4abc-8769-fddab179588d", "sighting--c46b7bdc-077e-4f99-9237-f6f9b10360cd", "sighting--33b3902b-a598-469e-9ed9-5a24186af8da", "sighting--1412fff2-300f-4a32-b7c6-107c44db8ea4", "sighting--c2ab4f98-2321-4340-9a52-7e4d876558a9", "sighting--4ce39d95-02e9-4500-ad8c-0c5a3bf716d0", "sighting--b736ade8-cbab-4bf7-8ffa-ab3861072c39", "sighting--91bcdbb9-28e0-4aad-a3ff-faa10014c6ed", "sighting--62b3560b-e5db-4957-baa1-de750b9a9bd2", "sighting--915f1e30-c9f7-4148-a7b8-b119ca2f3935", "sighting--b0192a3c-c4c1-4a58-9046-70229930edca", "sighting--6f75c3a3-cef6-4cb9-bb24-9b9e7a471921", "sighting--20c5dfd5-8391-4dee-8d00-7610022474ae", "sighting--68966ed4-2496-49ad-84c7-39f795e47bd3", "sighting--7633106c-2ee7-409e-8300-dcfb42687509", "sighting--3fd3929d-ed49-4c93-868e-57b1cb93efae", "sighting--fdfb85c1-0805-4bb0-bb54-933eaa9de984", "sighting--3082a219-808d-4777-afc2-a5d5d3abed54", "sighting--0cfa9fd6-e681-4e61-a6d8-0b5ab1a99a6a", "sighting--54a80873-f6e9-49dd-9a83-b58c8afa2ffa", "sighting--8ba31d97-7066-40d0-96a5-4b788ec3366f", "sighting--d1bf6aed-5f28-4c11-aa14-d711260cdaa5", "sighting--bb7f54f7-cd60-421d-9d47-0e7107525b9b", "sighting--6a4b84ca-dc6c-492f-8272-c53dff97f26f", "sighting--1d708020-f4c7-4c94-80f2-95e83e605418", "sighting--1f853f27-c34c-4f2d-9448-61694d696a3c", "sighting--7578860a-f682-4adb-80d0-4454a4954e84", "sighting--3366e611-c148-4bc9-95dd-d23d64badb32", "sighting--70672caa-66c8-4152-afb8-33d1f8d2d278", "sighting--cd587fb1-b7c0-4302-9522-149f71c1d6a9", "sighting--c43355d3-5563-45a4-b510-9751de733520", "sighting--b2355375-acf3-4469-8a77-f812b63aeff1", "sighting--b7403aa0-a70a-4d8d-b26c-bf7dbdd9b08f", "sighting--f347bc18-2d31-480a-89d1-36aa8de6e163", "sighting--46aefb85-e0b5-498e-8474-6af49d624eb0", "sighting--b20332a0-1ded-4fba-9666-5d1d8035a1d3", "sighting--28521d8e-d50e-4600-86b7-2dc1e616b643", "sighting--c09443d3-9057-46f1-8549-94f1f9610301", "sighting--44f271e3-c698-4a6c-bf9e-544e3aa649dd", "sighting--703e1bfd-891e-45d6-ab26-fb440d8768f3", "sighting--4b289cc3-459b-40ae-948a-d3a29a8bbbac", "sighting--84635df3-5560-4bc5-8d88-dea6ef1c0c59", "sighting--23ff1274-3e56-4607-bbf4-9d8d4824a99e", "sighting--9ea7e36f-cb06-49d9-9fa4-849bf414ee72", "sighting--9ae17127-0f63-4fdf-ac01-d81f419b9aeb", "sighting--e8250ab0-370a-402b-b73d-b62365e2f4b4", "sighting--3cbde867-619f-487d-bd8a-13e898d7c34f", "sighting--4e1c8191-f781-4f9c-8aed-676c7e11c4f4", "sighting--15ebacd9-b9ef-4dab-8f19-3a602a9bd18b", "sighting--25f442bc-1a21-4668-92f5-5726ac46d117", "sighting--bb35ed4d-e5bd-423c-aa6e-3526346bd56c", "sighting--4c627193-1f15-4027-b5d8-98f4efa2ac0d", "sighting--90d5ef43-3df6-478b-a76b-83a3effe81a3", "sighting--8f5cab05-0780-417f-ab1a-d1c9999219b6", "sighting--36939552-e009-440b-813b-f8e94bd1897a", "sighting--6e51092d-eb99-43ed-bcca-4ebacca4ed5e", "sighting--c358c28b-2125-4a63-96c1-eea4bb35291e", "sighting--c09f6b04-8e87-466c-9da3-44b972b86ee7", "sighting--f0cb069a-501c-4264-ba18-c5bcc9921781", "sighting--2f0a13b5-03bf-4d21-8f16-a32510293fc4", "sighting--9f87b484-14b1-4962-879a-45f14d578823", "sighting--30fcdaff-53d4-4804-8a3d-832ed31064c8", "sighting--0890f1a7-89cb-4c0d-8664-5a7d811b3e53", "sighting--082a4719-05c1-4d73-85fc-ff91ad6d5c33", "sighting--a799a727-faa3-48d3-84fa-300254f1afe2", "sighting--7c393b1e-7a4d-4de0-a11d-e959a847ebd3", "sighting--fe2c13fb-e9d6-4cea-a403-f27e11d666bb", "sighting--7292f174-f14b-49ce-9190-5f6bf93bea44", "sighting--23d0dcc3-b0e7-48ea-b972-35e611a100d0", "sighting--84700d43-0b49-4333-96ea-15d40ff4df77", "sighting--fedefb47-f7da-485e-b3b0-1b8a20a5a963", "sighting--b027cd3e-8f4c-44e0-af1b-00b1b29e5a1e", "sighting--2742328c-fdec-4485-8300-9bc025a24f4c", "sighting--0fefca93-a603-4f2c-93ca-8c32b5232146", "sighting--9a71a1bb-e02a-492d-b63b-eb51297c89c6", "sighting--9abbdd0b-48b0-4d9e-8e64-52bdace48ccc", "sighting--7fcf7428-a092-4de4-9015-f35f1b7e6b07", "sighting--cde6b728-c2da-4b52-b954-f383120bf77f", "sighting--f5aab2ae-b2b9-46a2-aa42-3bc198f4249d", "sighting--27055aa5-2fee-4114-8494-bc6503343bed", "sighting--1e424b20-361d-409b-95a6-80fb93b1a896", "sighting--08e33e98-a5f4-43f4-b795-855b4e31bce7", "sighting--00c05fb9-db4f-4cf8-80dd-5086fcc8f817", "sighting--187fb4e3-0689-48f9-8a7a-e336a5d4a315", "sighting--8fd32833-cdc1-4b1a-aa20-446824c141cd", "sighting--d66e270a-5f34-4e34-b1cb-73e7793f25cb", "sighting--fc68bc1c-9f35-4a8e-af13-f67b60dc1136", "sighting--3f94911b-1680-4071-a982-6e464864c89c", "sighting--0cd20b35-1250-4598-a06f-503d807ddc5d", "sighting--687cf1fa-6a71-4aba-88e4-d4c4bb9e3fd3", "sighting--3b2891b6-3e4f-4c56-912d-e2478bf21445", "sighting--7e82ea8f-9650-41fc-a4af-cd2791663a0e", "sighting--0988ddcf-9e83-4a3b-9773-b19e0a80e44e", "sighting--66bbac59-d1f3-490c-ba07-6a98216c530f", "sighting--aae0e38e-6030-4b1a-9fa2-715ce6fc1ea7", "sighting--3ae5580a-74ea-4ed4-a68d-c04eabf61675", "sighting--f176dbf6-a0ae-4d35-a697-919e36a5af61", "sighting--d4cb09f6-6f3c-406a-96ab-2a7456990397", "sighting--f7f1fe31-2860-47b0-9e64-d42bb488dfce", "sighting--32d00dff-a1fd-46f0-a1d3-df0e3a062cdc", "sighting--c2c59830-f817-4ad5-ad0e-2c708b5f2437", "sighting--c4a48da2-9319-4857-add6-d5332283c8dd", "sighting--dfbff971-94e7-4c8b-af9b-ea5d6cc0bcb4", "sighting--a8236ded-a6a8-43de-83bf-49267d610e59", "sighting--5c582edc-f91e-43fb-996f-7099de82ac15", "sighting--5b886d79-dbc9-4f30-8f4f-0fc7b8570e5c", "sighting--b24b1cd8-941c-457a-86f1-e8a214dbf549", "sighting--c1851652-70e7-40c7-9423-3d329a39e424", "sighting--2dd7f88f-8ecc-468b-80b7-cda6c56314c3", "sighting--c782096b-a28e-45fe-ada4-2f8dac256e3c", "sighting--22e742ee-3f82-4749-a2b4-0b802d1a33d2", "sighting--45c20e19-7420-4261-9444-9f43f2234ecf", "sighting--f01032e1-5961-4897-aaa4-170aa0b01ffb", "sighting--898a858d-9024-4975-9703-174c018e7ff2", "sighting--1b73c4bf-c14d-419e-ae01-5118811ebf0d", "sighting--12cc89d7-c040-414d-a8c7-a9ed6561ac38", "sighting--0249b7e0-8b95-4359-bd78-2fc1d347c593", "sighting--fb06edbf-a73b-4bd3-a2bc-df598cf4f470", "sighting--ebe63029-f414-4018-9cc3-e47a25b079f3", "sighting--82992800-b8db-445d-b21b-53f5e2e15ddb", "sighting--d9a44c15-1e7d-4443-a12d-582d4a122d05", "sighting--df3526ee-867c-4f8c-be17-141b1a80bc53", "sighting--cd1dadde-3cca-43d0-9dd2-b9ea65360f63", "sighting--ca1aa9b7-e8fe-42b8-bace-37c66165c4c5", "sighting--94267377-6534-43b5-94e6-99235153823e", "sighting--5922b922-14a9-4302-88db-f95a41e15013", "sighting--e2de95e4-b919-47c7-8ed5-ad46991f0545", "sighting--9e7c0f13-3d5b-4608-9588-ce116e2a7edb", "sighting--3a01b3c3-8191-49c9-86a4-e40515215d72", "sighting--ae4a0c28-671d-48e0-9340-a3a4768b88fb", "sighting--d0d442d4-14bb-41ac-8d3c-7ca4456f9659", "sighting--d74c4fa3-b175-4ee9-844c-54cee9522c10", "sighting--1acf3566-89c2-4b6e-a21a-af3deea201ed", "sighting--feb122b1-d824-470a-8a90-a2decf3e076e", "sighting--4ed61d80-b86a-4faf-af07-81e244e28da6", "sighting--5f6323e7-6b44-4ba3-9236-5b07196b497d", "sighting--9b8abd03-8c52-4c86-9176-2e3bc730f707", "sighting--1f672089-28b5-426b-8f9f-769cf55f4d35", "sighting--1e22b71b-0921-4939-8838-e4d280bc9125", "sighting--e97da7bc-a898-4f67-99a7-6b8b2867e428", "sighting--fa29154c-fe7f-4b91-8d4f-856bf0fbac73", "sighting--79c3fbb2-f014-4ce0-a8ad-44f4994b3e80", "sighting--0f2dc6a4-2607-4d69-89e7-98ce72a4ef70", "sighting--f364e385-093b-4033-986d-d0eb95d151c6", "sighting--75ae8d7c-a9a7-4b80-ab56-56ddadedc5e1", "sighting--553750dd-d690-4e4b-88f8-622d9ccbdd22", "sighting--09d24c88-19d0-4240-9d22-8e6fe6e4d62d", "sighting--46883bfa-2821-4daf-9d0b-0b3049f79fab", "sighting--91b4060c-6cb8-4590-871d-23ea294040e0", "sighting--ff5063dd-8006-4b9d-b983-9e1282ac841e", "sighting--9ca042ac-57bd-4a8b-98ff-2888856856f3", "sighting--db704666-2e65-4434-aa0a-919a2d51cb9c", "sighting--749c1cd1-ef98-4bad-9f39-974cd65026a7", "sighting--9c373c98-166f-47bb-b7a7-974b08b793ac", "sighting--109603e8-79ac-4eba-8fe7-d5a45cf9b8ac", "sighting--828efa14-5416-444a-be4a-c5e0b470e8fc", "sighting--0308bf63-e5c5-4594-82dd-77f445d8dc2e", "sighting--7f123bf5-74af-4d94-b5b6-69be15e7cf36", "sighting--d32deacf-5457-44f3-89f6-1b5848a6c25c", "sighting--ca584bb7-c573-42dc-a7d9-ea4e396cff1d", "sighting--7aa2c9be-7bf5-405b-b2e6-5c5f218375b8", "sighting--32e5001b-87ef-484e-8b7c-79a0cd1375ea", "sighting--c0393d98-ced6-4e22-b870-a2fd865755a6", "sighting--1091053f-174a-4f85-88b5-86674c6ba495", "sighting--fa6f4dde-cfe0-45ba-88b6-ed26af869744", "sighting--02b20f7d-3ae0-4e9c-a1fe-b55dc936b5c5", "sighting--6d637ab2-112b-4c4f-8d71-49fdf4392b81", "sighting--10059500-38e4-4c0d-a669-6e2bc484ac83", "sighting--cf2ef47c-b6c7-4849-a56f-24e17bbac8e0", "sighting--810c8113-e462-4b65-afa9-5931e715800c", "sighting--35907b42-d6af-4887-882b-a09d9fc7a0b7", "sighting--6c7b6b1c-7424-43eb-b899-eb2799bd1600", "sighting--bd7d0516-fc39-4281-ba72-c5a8df77df8d", "sighting--ced2e24e-ce9f-4035-851d-1d7b4afcda99", "sighting--7d30f0d6-f672-454f-9726-f04a60e83d35", "sighting--5d848ac1-8826-4703-8ca3-514b719f46e5", "sighting--6352938f-ebd1-4a65-890d-5982212962e5", "sighting--993e112c-56e7-4aa1-9d31-dffe0b55400f", "sighting--34fffc70-695a-4b84-ad23-05d988b992cf", "sighting--33dad93d-5649-4f54-bb80-1ee7ff13d065", "sighting--ca46caa3-799b-4546-9cd6-7bead5d6d076", "sighting--49336a18-69a6-4d92-8d4f-1f49c4b151bd", "sighting--f02557f8-91dd-459f-b4d3-82254cf73220", "sighting--34f995f6-2457-416b-9e85-a5eac01a375b", "sighting--1744e927-6aa4-43df-9af9-3f7e4bec285e", "sighting--8d4adca1-1d2f-4f94-94e1-60f9cf264dd4", "sighting--50036f7e-c202-4092-ba9b-af07fa7659e0", "sighting--ace74b6d-2650-4ca8-a724-8ba14633b149", "sighting--4b460a7e-b79e-4300-8219-8037b4bc1ff8", "sighting--1052bdc8-0798-4cda-806b-c2a72aaee08c", "sighting--24e9ec47-0b7d-44c3-866b-a7d1f786a189", "sighting--0e57f72f-6e32-49d9-a367-bdd41cb545db", "sighting--4c6d109f-3036-4efb-bec1-91e25f164702", "sighting--38b6605b-b2fc-41a5-b608-c40ac787bccc", "sighting--529aa5c8-7550-44dc-992a-708b1cfa432f", "sighting--c5054a96-05b1-439d-a8c5-9fc1fe7e4c63", "sighting--a23b0d1b-2afe-4a76-bdeb-cc85dfa943e3", "sighting--7b8bf525-708e-489a-8ba5-1b56323f9920", "sighting--01cdebc6-0d28-4628-a5c0-e4d32951e5f7", "sighting--60e77edb-3c99-41d5-a036-a3fdbcbd4c5b", "sighting--f2d52f20-f4ea-4c32-bbb0-8b0fa66ee9fc", "sighting--cd92ad16-8fbb-42a4-9057-e823e484f916", "sighting--49008870-3111-4680-a9a0-33fc3b3872c2", "sighting--97bbb7a8-6872-466e-a8d7-a9d52c67be7f", "sighting--874d4f19-0b47-439e-bf29-22105f74a0bf", "sighting--8e981b64-28e9-4fc6-87f0-2de25a9d223c", "sighting--861e2e89-b170-42a4-8866-03e896127872", "sighting--9b0c328b-070d-4057-8460-5c3035f3c2c9", "sighting--ef56cda5-1e73-4f36-9b14-175bea839fc5", "sighting--08d8216f-7040-4e50-8f11-2d1047c0b784", "sighting--8d05021d-4233-4589-b839-5c0bdaf9c2e1", "sighting--4972d1c6-58c0-4081-9434-e7f574e047d7", "sighting--e987cdde-5b61-4ddd-906f-9d22210491dc", "sighting--4ced99eb-ca38-4e66-9e3f-183009e834a1", "sighting--2d513906-9697-42c3-92a3-60dcf9737d10", "sighting--f400a4af-a06e-4203-98f3-a147437d496f", "sighting--65ce8d13-fd36-4676-b16b-6fe55953df8c", "sighting--4434c607-c190-4d54-a4da-b06839987746", "sighting--b10d7db7-2a5e-4d2b-ab23-f09e168bcdf7", "sighting--68ae6af0-5dfa-4887-9ba5-debd1ec8d2ca", "sighting--7faa08d1-5fc2-4a29-96e5-fbfc5c4e8fca", "sighting--8b1faa24-7d94-40c9-b1c8-81757bdd3354", "sighting--ae20ff85-2469-44be-babd-a91268405eec", "sighting--67d39465-52a6-4426-8276-43e7214bda56", "sighting--90af7ad4-a0e7-4013-81ff-31eda9bdebee", "sighting--b1407c53-4c6d-4f3a-9978-71fc3950ff1a", "sighting--45c2de6f-8b98-4d9b-83af-f34c0ec53a9e", "sighting--64fad40f-3ad4-47cc-a711-7c61e27fa99d", "sighting--11f350d3-d666-42e4-9a93-aa33a9c54928", "sighting--fd9b4fd6-b0cd-4ac6-9208-380c7449a323", "sighting--49305070-713a-4823-89eb-dcd5bb5b7431", "sighting--bf6988ae-8aa0-4ef2-add8-b1ee03eb10b8", "sighting--ea0ff1b9-2ff8-4407-b40e-28d7579328d2", "sighting--1cf902fa-d03f-46d0-bdd6-7fea54cd72a0", "sighting--d7608534-f690-4db1-ad7d-fbb0beb05f8b", "sighting--00e3a125-05eb-486b-88ff-ef72d2633f34", "sighting--b3ebe121-68c3-495d-9804-703c92ddbbf4", "sighting--9d70e2c5-d77b-4242-be82-52a8dc8ebe54", "sighting--d0d6bd26-b770-4e89-9ce4-cf1b0d72a74c", "sighting--2b8f86aa-cbcf-47a1-b6e7-32b0b17a39fc", "sighting--c082c357-d717-4fa2-8732-8dea4888b5d8", "sighting--7df18c7c-e754-4ac7-8b96-87117c08d55e", "sighting--06d46c4f-8ad9-48f4-873c-7419fb72fc3b", "sighting--7eae1bc2-dd09-4d0e-a6a2-5cafbcc62525", "sighting--1ab6916f-4654-45f5-a60b-e19aa13d554c", "sighting--c703e41a-bae2-4ba1-883d-e2593841e458", "sighting--7ebd062c-1605-4889-9d30-49ede33bfedd", "sighting--4a928153-269d-45a9-a316-ac4c2ec01f71", "sighting--32aa8264-1b10-4d48-b5e9-2c7cb840a3fd", "sighting--9a0f7b36-d2b4-454f-864c-84d3de0cfc67", "sighting--a30f918b-ff28-438b-81fd-05102a2d3ceb", "sighting--b22113de-b464-41da-82bd-679ac3c8c095", "sighting--d0a09fe2-dd85-490e-9860-049d6d4e658c", "sighting--0c0a36c3-0242-42d1-ae5f-5ea3e8fea299", "sighting--6b37dbe2-f484-4aba-9c90-96d771653deb", "sighting--fab49857-00b1-4871-aa43-3b04be680efc", "sighting--5fef3d9c-b8e6-47d2-8406-221be9a47675", "sighting--8694f2ab-6573-4599-816a-34aa19ed14c7", "sighting--f367d6e8-aabc-4c0f-a65b-2062f9d7805c", "sighting--73747f2e-3a56-4eb2-94d4-d8b6fc03f9ec", "sighting--e6ae83dd-fb94-42a9-a3ea-bc81313cf4ad", "sighting--5831dc48-9548-413a-a712-f49e70dea454", "sighting--ec15c7c5-15e9-4063-865d-cba79e1e538b", "sighting--f9ad20e7-11cc-4ba0-b5d4-320691175aa5", "sighting--1f92a9a3-b84d-4813-81f8-05941bd8f2f8", "sighting--0222ce59-3f9c-4a20-9856-83a85bb26a9f", "sighting--3ce1405c-a113-42ce-b4b3-71e49b8c7235", "sighting--ade1fea1-0d25-40e6-87d1-3bdbb33f578f", "sighting--24f685e7-29fd-4ff4-8050-92aacc960460", "sighting--d1e13fbe-25b1-41db-93e2-1e796ecd379d", "sighting--de0923e5-4cb9-475b-86ee-95015b2e53bd", "sighting--ae834b81-533a-459b-ad03-d490277c01e9", "sighting--d27d85ea-5f72-414d-a883-e89df8eff419", "sighting--1fb3066d-3ca4-49ec-b3cc-ad16c6866f3f", "sighting--f23fcb69-1511-4b26-8c3d-00f389972500", "sighting--5e75096a-e663-44e8-87ee-cb2f9b5a7a25", "sighting--66075be4-0e22-4709-a2da-7bb195b8da7a", "sighting--6fa0c8e2-ba23-40a0-b77e-654645fd3248", "sighting--1e77fbcf-48e1-4376-97ab-abc41528105e", "sighting--2151f02e-813b-48b2-ab3f-1d3ce827bd19", "sighting--40e00c4c-93e1-480f-8149-0206c690d3cf", "sighting--fb4e71b7-24d2-4685-bde0-3eaf228a3b40", "sighting--159394f5-31c7-4c96-a087-94582015665b", "sighting--5b643c36-477b-4faf-b02c-ad81a1a976c2", "sighting--e3eb34b4-a17b-49d2-89b2-2dd20bb7eeec", "sighting--96b8b504-e2cb-4af1-ac65-9628303e5b8e", "sighting--cf866f55-8eae-4730-aab5-13f9c35c8406", "sighting--fc7bd426-4aed-4804-af23-01760344054a", "sighting--ccc60e61-c3f8-4593-9d47-bf2f67bb3ceb", "sighting--2bdfc1c4-bb58-4b77-8e79-6bb634991170", "sighting--d51edfdf-f7e3-4f04-b741-936cb86e318f", "sighting--aa438fad-7218-44e9-8558-d97654d28d4e", "sighting--b5fca1d4-196c-4f6f-bdb8-7a650ef5a268", "sighting--b87b2988-e844-4d12-8b94-d50e2e0e0815", "sighting--8d2c9c6d-e788-4caa-bf98-3458d91c6b87", "sighting--3cfc6fa8-384d-4978-baa8-bae2b965099e", "sighting--4b46a71e-ed7e-4f36-b3ee-c89b65d9318f", "sighting--4b192b89-aae2-456e-b122-13a0bc143d1c", "sighting--42695eac-5959-4f8f-9d96-7d5961d204d6", "sighting--601762c5-3ebd-40aa-b3b9-a85b1ce577ee", "sighting--e8ccc78b-fe13-4adb-aceb-c04ff4cfdc32", "sighting--75153b6a-421d-4730-a53f-7c47ea32a187", "sighting--085b0f6a-d968-4527-8ec3-cf512f7c75b1", "sighting--839565aa-fd3d-4637-8482-be36cec46122", "sighting--5496d581-0701-4a77-a898-13aab5aa639a", "sighting--a4df82fa-cfd3-4e0f-8a98-03235b49cb8d", "sighting--434ebc8f-113d-4ee9-98d2-d6afd7104b0e", "sighting--9748238d-d177-4cbf-b7cd-9f08c7c5ab3c", "sighting--d25c2a4d-f55e-4e77-8f9f-8f5f70f4957c", "sighting--09638540-8464-4668-9126-0df630aadee1", "sighting--9318d5a2-43f5-4c05-8217-939319681b26", "sighting--d0fee6d6-c02a-4c02-a996-f9b71282bb5b", "sighting--d27b3483-a138-4872-a2d9-29dd95371bb4", "sighting--aec20942-2e4c-4e78-8638-4d64caf88dfe", "sighting--dc0cf773-8b41-4b94-8bbb-96f7cc6ebc9b", "sighting--159c2b3d-418e-41d3-9df6-80c519865712", "sighting--b0555ea6-9419-4b3a-a8a0-cd57a004a926", "sighting--c2393520-6468-4ea9-bc4c-f52ebf5056f5", "sighting--9d68074e-ba1e-43f0-89cd-bb772cb3c45a", "sighting--76823573-608a-4dc3-bc7e-5d320b06409b", "sighting--869c94bf-8456-453d-aa7a-14e299230beb", "sighting--db05154e-369b-4160-a9d7-14000c406197", "sighting--4efd5e94-0571-44ac-b399-f403005dfb4b", "sighting--2b228cb4-8c75-41aa-b198-b5122f8f305f", "sighting--26bc2393-33b6-4cde-8fe2-3f972893967e", "sighting--29d720a7-64c6-4809-8f82-5eeb333f077a", "sighting--192bf271-abd6-4063-878d-d47fad966127", "sighting--9f907cdd-428e-4cfd-8ed7-ecd016bf7bd5", "sighting--1be587d2-c850-440e-befd-9af89d6bf1c6", "sighting--09bae933-6f70-4c29-b2ee-39fd3a39c806", "sighting--b9f63893-21d1-40ea-b11b-6139ed692ef1", "sighting--f7b0efa2-021c-40a4-8864-e155de7af32f", "sighting--caead9c5-950b-47e7-a516-24e2e6935937", "sighting--a34cbe8e-9f5d-4140-a2e7-e7af3897da08", "sighting--13a793e8-e32b-4ae1-984a-cfe9dc306879", "sighting--779e53b5-fcc2-4aeb-82d5-da9abbf685e9", "sighting--699f7470-33be-41ef-af4c-215bc411e8dc", "sighting--c88b1bbd-ab3f-4cd6-8a4b-7d0aab720683", "sighting--0ce68375-f1a3-464c-8b99-53ae9f23df42", "sighting--74433a60-75ce-41f0-b455-3f07df8d9e77", "sighting--7b790866-82fa-403f-a9da-d87a9f5ec088", "sighting--4f625639-7d80-4383-838d-d479f419e878", "sighting--b6000c23-3073-44b0-9e99-58debab97873", "sighting--47785dac-0574-4cc1-b73f-26cec7d5c452", "sighting--e4cf57f9-3412-4fee-8107-37fafa285c81", "sighting--72c4e201-3fe7-4d5b-bd91-1b0aa871131f", "sighting--e56399d2-1e8b-44c7-b1e0-68812fa32b27", "sighting--e399a751-2eb5-45f4-aa5d-c463a18ddb62", "sighting--2bf02573-a672-426b-826d-576ccb06519c", "sighting--effc5649-5f02-4751-8f8f-72acc850be3e", "sighting--2b350b7c-2858-42eb-a61a-58260112487f", "sighting--1dc97cc5-dbaf-49e8-95b1-4cf4d4c4e5a3", "sighting--0fbd5827-bfc0-4271-b3ef-127f2f90f80d", "sighting--dcde6677-c83d-4576-9441-d466faa49c50", "sighting--3d1f8d6b-eafb-4f6d-aa39-fb5ae1f30658", "sighting--eb85945d-aa10-47ea-9386-dc91afd07464", "sighting--8981ec15-4db2-4e9a-a562-cb918684b201", "sighting--194f066f-1ca9-44ed-961a-d0d8c4f96a72", "sighting--0598e6f6-bd38-4e3e-b81c-0c515e901c89", "sighting--2ef4ae44-47d9-4779-9487-ac333b9d7eac", "sighting--672761ba-896d-4672-89a2-b935a0fbb06c", "sighting--9b6d45a4-5ea7-4c7d-994c-8c6774d1ebe1", "sighting--563f744f-b918-46a2-b06d-01191599dbc9", "sighting--b5385fd0-9670-4ef0-b568-721df7157719", "sighting--331d5b86-9838-4561-b6b7-45dc17bf75b6", "sighting--694ad71f-f168-48ff-9dd8-8b7f6057c200", "sighting--5eadac96-8740-420d-a43a-44fd7ecc2591", "sighting--e0f811a3-c6fc-4d28-8deb-f762c9174958", "sighting--25191197-2fb9-4486-a283-3b2eeaf01a94", "sighting--8c7aa1f1-4c36-4c0b-b3bc-fb8ef063adea", "sighting--b057c090-896d-4774-ad5b-13c5496cb3f7", "sighting--87ce82c0-8e40-4481-b19d-10cb46d81ab5", "sighting--a2d22eb3-4287-4d8c-b05d-1d1bf9a0b897", "sighting--0e0f2b94-15ac-4b67-bd76-1b8bb433af68", "sighting--41ac8f20-4515-4d76-b53d-d0b71e03ce42", "sighting--b3ed5b00-4c6d-4747-8f6f-6059f247e060", "sighting--48807ed5-e410-4e34-9b8a-db8334f6475c", "sighting--7e8e98eb-7f14-49e8-9a4b-39fff45f943d", "sighting--2eabfd3d-974a-496e-b635-e3496457fc4b", "sighting--2f840186-f5f4-4bbb-a0d9-bf4225c09603", "sighting--7b4748c0-88cf-4023-8fd8-cdadb40c46a3", "sighting--9c31dd6d-b95c-491d-9ea0-75c5189f7e44", "sighting--fe250012-36ec-45af-8b40-7667409ad89e", "sighting--5b8b430e-d1bd-40b2-8806-2c2358e9f981", "sighting--4d8c75a0-c039-4480-a634-3c42a8bf6416", "sighting--3d334e0e-ed86-4f21-964c-9241373f4416", "sighting--edf6e4f7-b27f-4a0d-a6f4-997456bb069e", "sighting--9371b264-c785-480f-ba33-b5cbc92d761e", "sighting--90cc234a-c7a8-4548-9514-840f23003a34", "sighting--4fce4b58-1049-412d-bbd4-5c92a601d08d", "sighting--c2ffaa42-95c4-4374-ace5-74bd300a6bb0", "sighting--ea05b028-b068-4417-99c7-9fdc571945e1", "sighting--f0a96971-a0f4-4ba9-9124-e7e1d905e47a", "sighting--df75fe3e-7f54-4fd5-b985-1e1b1975691f", "sighting--900257c7-34b7-4fb9-95ff-20050f868d89", "sighting--97412609-aea8-4821-bcb6-e559117c2845", "sighting--153b80bc-bd9a-4ac6-8353-4e4608062aff", "sighting--8dddd9c1-0266-410b-9f39-6f640c3bb3e2", "sighting--e23f871a-4fe4-49b7-868c-820bc129db44", "sighting--9002d1dd-f877-4c50-ac8c-826eaea85040", "sighting--ba18cd14-036a-4595-b6ec-03d55b61735f", "sighting--905966a7-46e5-44d4-aa7a-088e813549ba", "sighting--1677d046-e3ca-4dfc-a9bb-5b31cf36d9d4", "sighting--eab1c075-d5be-4bad-b494-2d948d31932a", "sighting--40a42912-442a-4575-bf1c-f4377a5780ab", "sighting--c3be7d08-7714-4c39-a35f-582931d3adac", "sighting--0e74ec3e-f353-4e3b-85b5-713040c34471", "sighting--eac72dcf-f12b-4027-8ce5-d7ee3da9f367", "sighting--931651a2-65b1-4202-8494-4701eec49385", "sighting--a71e999a-2647-4792-9d97-e8517193f272", "sighting--5a46932c-359e-4ffd-8a2b-4d32de9ef9af", "sighting--eadb93da-f247-4766-ab76-38fbe9f5e96b", "sighting--24b8082d-d931-4504-84f6-aaedaa0491e1", "sighting--aa9b78cd-42f3-480c-b4cc-6d549bc24b9f", "sighting--92689cca-cf69-4de9-a017-692a4a781e46", "sighting--43b72e6c-1a00-4f72-b628-0b2468c1dd48", "sighting--59300c6c-1b1d-4a8b-8e70-7aa0f6dfb0d7", "sighting--068b9cf9-3093-417f-a291-0b5c12fb8633", "sighting--39e1bc9e-7984-4e4b-aa03-40663b1861e0", "sighting--c0bfa8b1-9358-418e-b2a3-08463eef1877", "sighting--f88158fb-0fb3-4018-ac3d-968620ec2629", "sighting--8118e500-b227-4ac8-a1b3-26eb947e16f8", "sighting--6f98ca71-a984-4286-8c5d-6d17d034dbb7", "sighting--e2316808-aad0-4b1e-9c1e-2b5be734a68d", "sighting--2f667617-984c-43a2-a984-23402e9fa010", "sighting--059eaeef-92e9-4a47-acf8-f8cfbf9de624", "sighting--069efa24-df13-4ed1-87f1-e0e0cbd48806", "sighting--43fec487-8e60-45c3-a2a8-30c5d1b48ea7", "sighting--efb1f5ce-e6b2-4991-b87d-adc3f2c73a8a", "sighting--fa5d3695-4421-427e-a3b7-6e2913dd465f", "sighting--f6059f8b-3cc6-48c1-a299-00be8279517d", "sighting--6b30239f-faa3-48e1-9141-ea90c2503f88", "sighting--a7db2e41-7d3f-4db3-a91e-2fc2b0b908a4", "sighting--a65ba60a-2ad8-400e-9349-447e8821635a", "sighting--96c47803-baad-4950-a7b3-f902a3947204", "sighting--c53e68be-ad12-4c52-b5f6-422ca9aa6873", "sighting--a75f9f0d-907d-42cc-9470-811011523321", "sighting--7ea5945b-c216-454f-bb3c-cd31d360ec76", "sighting--7d8f19c8-3d5c-40da-8226-55dd16ee9aff", "sighting--09aef682-00fb-447f-b4df-5944696e3785", "sighting--a2a0fd94-d1f3-4075-bc16-0e507a967a37", "sighting--2b245363-12b5-4f85-a78e-7c602bde49fe", "sighting--3495299b-ef89-4bf1-b6b0-61834cd8f8bf", "sighting--4152a0a8-f3c9-46af-8cc5-37223fa674be", "sighting--c66321e3-f114-4630-8c87-bcd835fbc6c3", "sighting--6aac0b24-11ee-4e51-b645-f86c71a06752", "sighting--5409e124-0be1-46fa-86a1-96a34b8fb254", "sighting--2ead9ae5-5bcf-4310-9d30-04633e32a3b3", "sighting--a6565319-81ba-4edb-9185-ed8cd9fe8f2b", "sighting--d6926156-2b58-4d08-aa19-a38273d4b6e9", "sighting--7dc0236c-da71-40fa-97f5-e59395e41a8c", "sighting--1e0d751a-6456-4a17-954a-fc69e5acb42f", "sighting--18037cd6-b9c3-44c6-b817-fad1b7360ec0", "sighting--1c8d8354-6272-4648-b0c3-12b484ff47de", "sighting--7d863393-bad6-4709-9133-574fdfb7203c", "sighting--cf4b8d75-0b85-4668-917d-a24d4f98ca3d", "sighting--56bdd9b3-1862-4880-ab50-7477efc13259", "sighting--277e61f8-bd45-4777-9efa-5b498f98f8d5", "sighting--e7dd0be1-f25e-49c4-99ba-98c09054fa1d", "sighting--39f9885f-c679-4882-b1e4-003211d9b9ec", "sighting--be5231b1-577d-4f16-a605-1cd5d9cb7e00", "sighting--d0f6413e-6efb-47e0-b322-99446d99a3b4", "sighting--f996e89a-a24c-4f54-87cf-e56b2116abf6", "sighting--76116010-c6bd-45d4-947f-de15cf9ef2fd", "sighting--4a99b140-e29e-4ca4-91c6-1aaa08edc35f", "sighting--4301de13-a4e0-4956-b432-f8ba9f96e704", "sighting--c9a294ac-e35e-429b-a45a-5a2143c647dd", "sighting--5321f6ce-2288-414a-9c97-7f9070e06243", "sighting--16873c5e-68ff-4d2e-b273-f53748a9aa45", "sighting--81e7a5ba-408b-48a5-b1f4-9f662c69ea6a", "sighting--c8aca6cd-c988-4989-8fe5-8ab18b44919b", "sighting--8637197d-2ab9-494f-b18f-f59fe0227244", "sighting--9d7de624-2c19-4236-bcd5-2d133c3f14ea", "sighting--12f08dd8-0a1e-4327-8608-50f98daf2699", "sighting--47767945-5175-451c-af4b-f82479356b4d", "sighting--23512f86-6f3e-402e-bf48-5ea144fa5944", "sighting--86ad9f81-df9c-4a86-b447-9ee87317347c", "sighting--901b72fe-1c2b-4bad-b337-d62064dc57b4", "sighting--0e06fcc7-f8d1-44fc-b8db-651435378302", "sighting--244c9f79-7878-451a-acb7-bc0d306d69a9", "sighting--23fcb862-a395-4d35-a154-d5142a5f118e", "sighting--bf3a1f05-1ce5-484b-8105-6dddcad3b3b5", "sighting--d775bea6-c631-4fc7-b091-3660ea87616e", "sighting--6f8c8ce1-6459-47c3-a43e-5a7678d6a09c", "sighting--86955abd-45c7-4456-8da8-a22b9d59f5f4", "sighting--15b53c7c-6f53-4004-a503-d58bfce7f8f3", "sighting--2a72960a-30f6-4226-8429-6bf3dff48fd9", "sighting--04089a2d-f98a-43cf-9d2b-42cc4acaf5b2", "sighting--529cd0cc-5716-43d9-9f1a-575d5c8e7506", "sighting--f07eec81-f732-48a7-834b-afa8d712ec74", "sighting--7235b47e-a4a8-44e6-acdb-f87944985cb5", "sighting--cc047b42-bb2f-4e90-beea-f4542b97ef5f", "sighting--de4f1f2e-1ce0-4e62-9b59-0efb9af959ba", "sighting--db842a7c-64e7-4db0-a40a-250b1c6e9754", "sighting--2c0cba2c-34df-4d4e-a530-7bd4268568d2", "sighting--ab8f165f-c2f2-4e5d-b397-af0532c44130", "sighting--f69a4ef5-1775-445f-879c-8292b31f2fea", "sighting--165b4d73-6d05-4cff-9dc5-587cbdb36452", "sighting--6572423a-94a9-43af-864f-5bdb4245cd8a", "sighting--bb06e5b1-4388-4d76-96dd-49fbc1107b5f", "sighting--3da0c3c7-0ead-41b9-9805-42f0a6e09183", "sighting--2a91b3b6-34bb-4353-aedf-7a08dcb535a0", "sighting--b6918332-36b4-46c5-b255-01fc62b30496", "sighting--9d01748d-89e8-4784-9390-9e2e75ba29a1", "sighting--d585c4ae-4540-4353-a136-985667c2e208", "sighting--695590cd-ba4e-4b73-a0bb-977d41a6f76a", "sighting--e30fd060-a19a-4907-8913-e86b38497eac", "sighting--52495712-e69c-4fd4-aa4c-d70753a8e6a8", "sighting--589e8688-f548-4d59-adf9-ac8f1687416d", "sighting--74457f00-04d9-4d98-a7d4-85587c8c4947", "sighting--f7982988-4611-489a-8b6a-08f921edbf60", "sighting--a461da67-d361-4466-9c33-105ff61e259d", "sighting--0de6c805-e783-4e41-bec1-a21bcef434c0", "sighting--d3753c0a-4b3c-4be4-ab90-6ce7024c0700", "sighting--e583acfc-707c-41b0-9a12-a25a542408a6", "sighting--94b9b679-4429-49fe-8e23-fbd6d83d5840", "sighting--2e71f112-9f25-43b3-b46c-f2ec9767f528", "sighting--1e4f36ec-e591-4bb4-b364-2b8ff05d0729", "sighting--04682c46-2a3b-4096-a8f5-bd4386944662", "sighting--df2d8dda-4261-4bc4-ad2c-91ed948aa9cb", "sighting--1a6b2e24-f00d-4abb-8b1a-438bc4c633bc", "sighting--ac954122-aff6-4e6b-997c-cfa395a8f614", "sighting--f36b1287-7ac1-478a-8a8e-81e8335eb647", "sighting--8fdd4df8-7ad4-4dee-8811-f7c8d564b6fc", "sighting--462e5cef-3514-4db8-80e4-efc59fb63c37", "sighting--7cc72510-2317-4d09-82b9-a966311dd824", "sighting--73a31233-e07a-4129-a76c-b90eedae4c65", "sighting--f65c01eb-88d4-4da2-8caf-2fc2bb0560ec", "sighting--f388c620-7d97-4f4d-9951-19d9c7a35320", "sighting--90326609-e127-4211-a08e-13abf3ea0ac8", "sighting--d92ef0c6-9254-41e1-9e4b-0bbed1ec34f7", "sighting--7082a24a-816d-42b0-89ab-1aa6c7c7fb11", "sighting--a8e9e5fa-3c43-488f-90ed-7e1e82d6bb28", "sighting--dd8f0c76-b426-481e-955c-64471ff5a113", "sighting--17ec0bdb-92f3-473e-b5a7-21d97064cbb6", "sighting--11d6f72b-da2e-483f-9ac7-9ec5b9aba2f3", "sighting--e664dbd5-092d-4c8f-bbe6-08289bcfdb3f", "sighting--af960329-94e5-4552-8868-8254fcb7d76e", "sighting--b7e1585a-681b-46c4-b665-abc0189199f5", "sighting--3025bbc5-021e-4a60-8e87-6c8da8d9971e", "sighting--4f6c28be-af62-404b-aaae-03f8a773bf45", "sighting--22764c13-6328-42de-9691-1cb0ce79e779", "sighting--49e05642-2789-4132-8479-eb951a03894c", "sighting--e01b0b33-ebae-421d-9d1b-86bd610dd094", "sighting--7a4b3e24-2e26-4859-9f8c-564f0bbdcb00", "sighting--83ad8a3e-9737-43c4-ae40-33ac4dc0e2da", "sighting--1a49799e-ba1a-464d-a553-fb66942881ed", "sighting--5947f956-5140-4fa6-b6a9-8f5a94f950a2", "sighting--6c962f02-bacf-49ab-96ca-525cf2564921", "sighting--307df910-0d55-4fc5-a228-915d974cb8f8", "sighting--9bf5eacb-b918-48ba-b537-62d98ebda0e0", "sighting--25b59396-10ad-4b49-b8ea-97c8b1fcda17", "sighting--b7bad5b8-e7ee-4e22-97a1-4f8bf7d0d7d5", "sighting--9a7e3eee-b8e7-4278-806b-9a88a6bef99b", "sighting--9747c4b3-c4ce-4df9-8ea0-766b126f5ae8", "sighting--5fd1bba4-e3c7-461d-9f43-1e180cb38556", "sighting--b6219b64-1203-45f0-b8d4-875b158a7cf0", "sighting--a268e84b-6280-43bb-a349-9dd98b9636ca", "sighting--f8b0a5f7-6d53-4c4b-b0f1-bb3ec428efcc", "sighting--10aed5a0-57b5-4162-8574-ae7f83a4064e", "sighting--c8f44c58-1ecd-4f2b-8af5-a64189d0fd17", "sighting--f0f306b1-0de4-4510-adb7-485bbe5995fd", "sighting--c7629754-7ba0-4b45-a6c5-fef894e59398", "sighting--ee5c8859-ca3c-4e60-9dd9-a5814c5ecbda", "sighting--66b3f326-b04b-4743-8d76-e4bb8f178e29", "sighting--0f3fff92-ef64-454e-a66e-7643dc8543dd", "sighting--46a2e29d-4d4b-4746-a2b3-b0287e046337", "sighting--9f19f23a-70ab-406e-8ad7-d7aaad0fe353", "sighting--531c544b-cf54-4ad7-8826-7b1c2fb8d58e", "sighting--cf7d4fc7-19b1-4802-bbfc-bc8d7edaeaf0", "sighting--a3b45ff3-4076-4dc0-9c82-4554ed2afaf5", "sighting--60b5f008-bbea-4f69-a96b-21109f77fe4c", "sighting--20fdb965-d426-4f01-9874-edcb646a4e4a", "sighting--80d93602-c4d5-4256-871d-1cae18cc30e8", "sighting--4fc17f23-a7cd-48b7-945b-28f1b3d53136", "sighting--ce662e98-f336-48ca-a67b-e37520aa4236", "sighting--6cdb8dba-2896-4456-9e07-8205f36c6356", "sighting--16e853cf-77b8-41cb-b8fc-ba0e694acb40", "sighting--78e58a49-6da7-48b8-ade5-86a1e3e6b45b", "sighting--530ac1c7-d94f-46e6-b0c6-6debbf551c6b", "sighting--a4fe93af-7179-49d9-8981-9f684b7d664e", "sighting--9e922bac-ba72-4b21-a267-084ae7ae5596", "sighting--95c8669e-f59f-44bf-9f1a-822d04f8d171", "sighting--2dd5c845-6549-4ba7-89a2-27185d46ed03", "sighting--d8e2b95c-35ec-420d-9918-add2ad6e45ef", "sighting--9e499934-5f3c-4245-8fc9-029211b71450", "sighting--fc2e48ce-da0d-4444-a21d-b6154020331b", "sighting--7a5955bf-47c9-49fe-a099-af4ddc7c7129", "sighting--b24ece26-2226-46f7-bcac-ec1cf21f9f5c", "sighting--3608903a-df86-49bd-9ac9-08281d4bc039", "sighting--7184bf31-f21e-42c7-9860-adcf6e687229", "sighting--81a84e96-29c9-4303-8497-6a9f60d58b11", "sighting--f56468f9-3ba7-49eb-b8d9-a4c6bc61cf35", "sighting--5b4d978d-2991-4e80-97bb-d3e6c55317e7", "sighting--6435bb44-1d81-4178-b65e-608060201141", "sighting--2f0b3425-9339-4069-80be-04371a595d54", "sighting--61828636-9b8b-4cb3-8d5d-2cc59fe1fc76", "sighting--77fed15b-3342-439b-9e7e-35579840280f", "sighting--02540c3f-bc89-40e1-8d53-8415ced217fa", "sighting--adf16fdc-d38b-4517-8500-61baaddb019e", "sighting--88a0f9ac-2a91-47ec-bc83-74519e0d44eb", "sighting--31f98837-d521-46b7-ae58-a18e6850a81c", "sighting--4ccea9df-04ec-45c1-a02e-91fcff42a8e1", "sighting--5c45717e-7a60-428b-8611-eff4297fad5b", "sighting--0c6c335a-3758-4282-a6b9-ffefa3b62625", "sighting--1a5d5904-3182-4580-937d-a24036e4c9d9", "sighting--a393b20b-3b33-4a85-a4e5-32804abd635e", "sighting--fc445f6b-1a4f-4248-9368-5a3f28d31549", "sighting--96f03438-cc8e-49fc-b8a7-20757b9152d9", "sighting--b18c8efe-3fc5-4123-9575-3119a0c40ba1", "sighting--63463bb9-1cb7-45bc-972f-01bcbb53ff44", "sighting--445798d2-40d9-4f3d-8a71-4ef808cc751a", "sighting--ec64adce-741e-43a5-a1c5-006eca89b9b7", "sighting--8ca7c69b-af18-4eb4-b02e-61286e6d25c1", "sighting--dba3b072-ff55-4fc1-804c-9746b9cb49ca", "sighting--53cc77b7-1ff3-4088-9397-140b50156b9d", "sighting--689bcfa3-a53e-4498-96c3-2820484f0536", "sighting--e20f46ea-083f-4479-9cf7-7049c5a91ad4", "sighting--bd58e137-75ae-4c7e-a636-2bab43d12efc", "sighting--c88a9249-1575-4c19-aad7-23c29ffeab58", "sighting--e4bffcf4-7b4e-4b03-891a-f958d38847bd", "sighting--79b3e73c-96d5-4e0d-919b-783479e390a4", "sighting--8034822a-2e49-4011-81cc-201b2349d91e", "sighting--d26eed36-a046-48f9-8044-d55715a5b2ba", "sighting--741a1471-c28e-4104-aaa4-1c48555a11a8", "sighting--b9565462-3810-4e27-925a-355b7e1788dd", "sighting--4775cd42-c4bd-4506-b488-4155cb0e0692", "sighting--8212fd20-c08f-4848-ae8c-a4bf5efe0108", "sighting--dda21755-1c12-41d4-873c-fe3e0700525f", "sighting--307f98de-bf4a-4a77-9da7-2a5aeb53f811", "sighting--8da25f74-e8bb-4a21-b013-86ce06ab176d", "sighting--f06615d6-b1a4-4a3b-8202-808c93ad0af6", "sighting--61a876f5-7299-436c-87de-3292f1c8db5a", "sighting--ba107b41-1c3b-47be-a81c-dd9984264167", "sighting--5710cdd4-777a-4931-a321-552dc3df0a20", "sighting--1bc21950-8e84-4e91-8704-16e0f1c317bf", "sighting--0493f89d-b8c0-41f6-bc7f-cdf9b3b992e5", "sighting--d3c7bbf0-7430-4691-9b43-f0f5562cd339", "sighting--b231d8ea-cd45-43df-969f-a811e0db2f1e", "sighting--d2fea516-c982-408a-97d0-64f3f538e528", "sighting--15411a2b-e5bc-436c-8bb0-3a43b6588489", "sighting--058fb9e5-d041-47a0-af3e-8936cffcd678", "sighting--3b8a40e8-ad05-4193-a876-dfd9f5450a80", "sighting--4cf14311-727d-4640-bd35-2b1c902cd4db", "sighting--a338fd94-8257-4df2-ab0c-01063c5a95b6", "sighting--fc91ea74-d3d3-4263-ab1a-4e736cfce204", "sighting--0c8c111e-2820-463b-9af9-2695f671fcd0", "sighting--9ecb9e0a-1d55-4159-9a05-8e2892c2922d", "sighting--7fb9dc41-b07b-4fea-9ca7-6e1c90215234", "sighting--34a8d61a-af5f-44e9-9ed4-72eb558be35b", "sighting--3cc75e56-18e4-4028-ae4d-428ee30a5363", "sighting--b0f33140-d8f7-4b90-a3bc-114284739c2a", "sighting--3f658d48-f783-409d-a358-f0a60afbe91f", "sighting--ddacd345-6a8a-497b-b728-17f571d2f589", "sighting--0f3da349-faed-4ef3-98a8-6403b25a354e", "sighting--5d32950b-a798-4c86-900c-dddaa416dda9", "sighting--5d1397e9-f93b-4048-92bc-aeb46357a4bb", "sighting--d68d3763-8332-4896-9b65-53f7e99aeb30", "sighting--43693ff3-c759-4a00-893a-623ec37d9e77", "sighting--55ef3ccf-fb8e-49c8-96ae-8d5dc355088b", "sighting--d0e7cb82-27a0-4fb6-b1ed-f160be2d6246", "sighting--7248a461-3199-480a-a21a-9a66a06635a4", "sighting--9a4de2be-f095-4bc0-9190-9b9803172ef9", "sighting--8518ad3a-14a8-48de-af48-ebb75f431574", "sighting--35c325be-9683-4f45-b3e5-bf9f6e1cbe5e", "sighting--4db0b246-edcb-4350-b247-57c6889106a5", "sighting--b192b144-091a-48da-a596-b374166e96a3", "sighting--2deb59a1-3d3e-4831-9f30-7b90c5d5188a", "sighting--5add0b15-8271-4d95-a70d-51b88b922386", "sighting--dec837a3-5a76-4fae-8d36-b2d26d0c5468", "sighting--f6d38b71-9294-41ca-ace9-a5dcb18a33f7", "sighting--0d4c88e9-7409-4e2e-9ff4-154af2967824", "sighting--e361cc8e-8cfc-4229-8a6b-01219fbbfc5d", "sighting--78a6a9c9-3bcb-4e39-b568-f6a53c599385", "sighting--35b57e2e-36ef-4ecf-91e3-56872232fe88", "sighting--20c06875-d3a4-414e-a0c0-b13911fd16bf", "sighting--2aeb57ac-83b9-40cc-b6f2-05263e6fa7ca", "sighting--8b6b0ac8-bbbc-4fb3-9239-5890c0c11a29", "sighting--9a6893d9-cdd3-4be0-bd34-e734512f8e02", "sighting--2482748b-4afc-4a58-82bd-b0e571d7df60", "sighting--e5066f55-3b98-4aae-b1ea-0463521acfba", "sighting--e45e1e5b-5230-435e-bd60-9fba80a1e994", "sighting--525cffd4-dea7-451a-913b-5eace70acf19", "sighting--f36fa8d7-a28c-4027-a649-dae43d260ba9", "sighting--951276a5-13c1-4840-9f72-a70a37fe7507", "sighting--e63727ea-38ff-4a2e-91f9-bf2978400221", "sighting--63fdd277-ac0b-43b8-b20f-8964b2914ca2", "sighting--7903c030-8e67-42c1-a366-5805b098dfaf", "sighting--ee13ee32-801d-4faf-9813-517174e4b1fd", "sighting--5b318796-3e32-4094-8a02-77eeccfe9503", "sighting--e13203e9-3bf5-498b-bc6a-1942111afcf9", "sighting--dc1f322a-aafa-4793-a16a-e0db21889747", "sighting--1240b836-3d51-4da5-a27a-32462467b082", "sighting--c00fc910-387a-40c9-af0a-75e3d1983136", "sighting--a6932bcb-3d28-4cc8-ae6d-982676189c13", "sighting--f93258de-e3e6-4602-b328-01f9cd6efccd", "sighting--eee1cdaf-51ef-43e7-a9f6-9eb04517dc57", "sighting--993f6654-d8e3-4d32-9b4c-3c8bfb6c6838", "sighting--a141fa95-f221-4c72-833b-29513af80ffc", "sighting--ab31bde8-be4f-42d1-ada3-335ff2e58930", "sighting--b027d409-8c69-42ca-b178-5015d2514e2c", "sighting--ef35fe9d-2c66-4321-b2e7-b44c4db78e16", "sighting--a79de0af-fc05-4a78-b084-d2d5b7a65fe8", "sighting--9636fc49-c0ce-4e32-bd95-1bed8be8266d", "sighting--f6acbc89-804c-408c-9842-1c38d7064d40", "sighting--a8b8a460-8262-4b37-aadb-e5d0a57f2226", "sighting--00ca1e5f-398b-4436-8b25-0d368ec803c1", "sighting--472643f2-e7d6-446b-8755-0e9cde48cabc", "sighting--5f7844c6-e2ad-4262-b5bb-c07887159e00", "sighting--24f873a9-993d-4687-b10a-a327e65a8a57", "sighting--bc04318a-4a8f-414f-b7bf-75080e178f4e", "sighting--42be9a58-af11-47d3-875f-da6f326744fd", "sighting--34ba0c4c-8f00-464d-afb7-f4ea2e761a0d", "sighting--d9e8a4fc-73a9-434b-9b75-f4c7802ccd45", "sighting--aebdb60d-dc2a-4fcc-ae3a-988b2742694e", "sighting--8590da62-612b-4e6c-8ecf-725ced35a0fa", "sighting--8443a697-b6d4-44e5-bc34-12df562a13e8", "sighting--da78f83a-6a5b-4a51-93f9-75b6409751a4", "sighting--76ecadd1-67f7-4e2a-9c1c-11647d1b234f", "sighting--d6cac7db-9117-4e1b-be0d-d42c89daaed8", "sighting--a4a2ad99-c368-493f-8d64-d39259c26fa5", "sighting--540c8e82-160e-488b-b6af-846344fb25e0", "sighting--3a5fa87d-5059-498e-98f7-f507c4e3723a", "sighting--58a50fc6-40f7-4a19-b448-e03cb80e7e23", "sighting--1454f189-b999-4c9f-b7c1-b1c17f2816ba", "sighting--c8f23b26-548f-4d6f-8a22-623dcecc7fdb", "sighting--833f3f9a-e523-4ca1-ac72-0878f535a245", "sighting--c0b7369f-1371-4084-8067-2ac02f007fa4", "sighting--d00c97a7-d99f-4b1e-9ed9-d6698f270242", "sighting--7cf7860f-614c-4401-a7f3-990fbfb2ab2c", "sighting--3e26e7ac-b09a-4cee-9cdd-0bb130cea063", "sighting--77b6d7f9-ee5c-4de6-b76d-073b817c9bd8", "sighting--2b50d8f3-8fa1-4ef7-ac04-151c1a851561", "sighting--66082e6e-df73-42b3-a084-e4dd4094ca85", "sighting--d30e7e1e-caa6-42f7-9ae3-6001e0f74d9f", "sighting--8182105d-dfb5-468c-bf42-124811a2842e", "sighting--81b517db-9cdc-4c1b-bd2b-bb4f07f0a5dd", "sighting--9ac3e8bb-7d55-4b20-9d35-dc882d6971bd", "sighting--dfa39181-c925-4341-a554-ba099564a5b5", "sighting--0b3e2708-ebb0-4b14-82f7-a950bf56bf13", "sighting--df24d69c-e02c-475d-81da-121fa3a6d4fe", "sighting--821a5aae-b9ca-41c9-bc12-b765f02c11e0", "sighting--c10c1a94-93fb-4036-9ad1-5712f45f528c", "sighting--dbd43c03-0b58-4cd0-b678-5e72dc61d375", "sighting--d25d3b80-3b83-45c2-93a6-df63d678756f", "sighting--68fc97d7-fd74-42f2-8e08-0c84464768db", "sighting--af81b5ab-6d18-4847-bc2f-874871851d39", "sighting--fd0d3621-53d8-43cf-83d4-67c851f88c49", "sighting--de3e0d17-01d0-4d1a-bc5c-bbb6240d3c0e", "sighting--957e74b8-330d-4d75-9270-2d94e666c7f6", "sighting--161250fb-6b4d-45e8-961c-b84f3bae1587", "sighting--41f8b5f0-c1cd-4d5b-9a4d-62009f49c98b", "sighting--7d15cb47-4d6b-4834-997b-2ec6bc4f59b9", "sighting--b69800b9-001e-46cd-aa99-1248e9e2b007", "sighting--be660402-b3cb-4291-ba1c-2b8eac5a0c39", "sighting--4e33a7e7-36b6-4900-a336-63c547eb223c", "sighting--0b726772-2499-4dca-b38c-368120d4db36", "sighting--082bbafc-2cbf-4ba8-afba-5d2f7563178d", "sighting--6ab40275-4fac-4c58-a5c0-05ae0c38685c", "sighting--d3bb1706-438f-4ea6-9f5e-80a3e28ba3e1", "sighting--dcc6601e-f375-4a8a-a3fe-64df5465db8f", "sighting--4b4bde7b-f894-4df6-9f23-d944a9052bbb", "sighting--50ed7ab5-babc-482b-a98a-b071f3f898f8", "sighting--ebd364a2-3822-4e8a-8692-d41871b115b9", "sighting--69e5e903-ba52-40f1-9d73-4ee56df9cb89", "sighting--413bb83f-6b93-4a38-aae9-6dabc07ae385", "sighting--34bcb9c0-5782-4d78-ba12-6e2d7ac4db2f", "sighting--c171a8a2-111d-403c-a66b-843a9ddcd445", "sighting--beb6942f-0f85-410e-abad-41af78293279", "sighting--4110c94e-a9f7-45e8-867a-768972c8ba4a", "sighting--0dc0313a-1c64-493b-be14-15137acd48b4", "sighting--573d89ae-1006-497d-b969-694d558ba5f0", "sighting--bc1c12dc-e56b-489d-9414-50aedb65d18d", "sighting--30e6dc38-159d-453d-b33c-fa38bb6f64d8", "sighting--15a7f277-b542-4418-9bf5-f0970c932ef6", "sighting--f928bf38-f9f4-43e7-b791-b92173520234", "sighting--5f1d60ce-346e-4895-8469-90426403fa82", "sighting--eb16cc14-ebc6-4fab-9e0f-578ed4d51017", "sighting--d5c43cd8-826c-48b5-8b25-0c6b467f0161", "sighting--9db09dff-08fd-4f68-8a19-39658d85df5e", "sighting--7a2b18bd-51e7-4985-924f-0e9c3bce97ce", "sighting--5719b719-b3d5-443d-afd6-c187aca3d164", "sighting--11d1a360-5876-4a12-9520-19b8c4a26cf9", "sighting--f936746f-34d1-446f-9b02-49ba8fed9a66", "sighting--0cc8b083-aaeb-4efe-a1dc-2e2669cbaa2a", "sighting--0207bcb5-ab84-41bd-ade2-7647e718700e", "sighting--6a30f569-beb9-49f0-87da-216d9c53aec7", "sighting--22a97bb9-17dd-4b82-9774-fde4d9b74c08", "sighting--4ab32f1f-9e1f-434d-ad97-7c93216a710c", "sighting--85133def-c23b-47ab-ba6f-5e100a8210c4", "sighting--90fd0257-d0ef-49d8-9c21-5ee67e3227ff", "sighting--51c1cd1e-e523-44bb-9fed-36923aba18cc", "sighting--9f6e18eb-3af3-4e25-a167-1a3b8b7507ef", "sighting--5415c6b5-c04e-4781-86ec-2b0781eb217d", "sighting--9bc3eacd-8732-4d91-bdf9-cc8702104ec1", "sighting--0c52f442-6455-491b-86a5-0abf3e3fbd7c", "sighting--eef47c45-08b5-4173-b387-8741c99741e2", "sighting--3b8ab1f0-5c03-41e5-90c6-b7997b7348f3", "sighting--73e31443-d47f-4697-8121-36b2378e4b1d", "sighting--6bc22c53-4e9e-4063-b780-5a6377868812", "sighting--0b29c526-c103-4aff-80b1-fef0a049c538", "sighting--72015187-8006-4973-878c-753e8cd0c4df", "sighting--490ac036-d5d1-4765-a1ba-8f0e9b2fb5e5", "sighting--c9668b6e-1ce6-4f2f-b399-a24440159557", "sighting--d9bb2dc9-1358-4bc4-81d6-108ca74fb888", "sighting--bfd7bb81-7910-4aa7-bbb4-a8f5efeeaf12", "sighting--edeabe62-e669-4c67-8c4c-d70293974d4b", "sighting--65fe72ba-db47-4c45-9db7-ae90175423b0", "sighting--c82ed132-5da6-4076-8383-22d8e4e929d3", "sighting--9d3e2415-be32-48db-87d0-9a888264dd12", "sighting--e904fcd1-38c6-43f3-aa4c-b9e7334c3d5b", "sighting--8a5ab86b-49a4-4ea6-ab34-2d47ebe808da", "sighting--995deac1-fb33-45a8-bb5e-b5ee7e05e66c", "sighting--9e07c2ff-388d-41a4-9673-01d2f534b266", "sighting--9b538894-4d95-43f1-b056-be5a1ac6dacd", "sighting--59e8a846-1215-4a02-984b-b08780fcb563", "sighting--67b988d7-ced1-451b-b3ef-707878388961", "sighting--768cb6ab-6875-4ab5-b3c2-411d2260f507", "sighting--57ace1a4-a1db-4c50-bfea-fb18afe96542", "sighting--e84a9094-7255-4185-a39e-3e22e6c3655e", "sighting--2e8a1f0e-a0d1-4ce1-9437-ff218e466315", "sighting--e6341dee-28b3-4fa2-93a9-7c3784d4282d", "sighting--5510cb0d-b6a2-48c7-a6b4-b56ecd3531b7", "sighting--0b5ebb06-6c4f-49ec-b375-22af0ab7cc27", "sighting--1e2e78f6-50f0-432a-8ce8-bb32dc512b80", "sighting--45d793ad-1e18-4901-8da3-1b59117a737a", "sighting--cea5cfe3-5e14-466c-9ae4-e88a43822abd", "sighting--891e752e-e0a8-4f47-bb72-b8d4238d18f0", "sighting--ec14d030-aeb3-4bcc-8930-02c284d7842a", "sighting--57189f99-c94c-4173-afbd-542487ec9272", "sighting--d4a62827-7975-4a0f-882b-016ea3feb967", "sighting--bdee7bf8-ec18-4a79-9f36-00ec0395628c", "sighting--2c0de149-35d7-4cbc-b11b-81b9b913ac53", "sighting--95aace5a-0151-4d80-8fa9-9b569fe33697", "sighting--c5a33b10-5781-4187-b2ea-208183d306fb", "sighting--df456be3-02f9-4a17-89dc-8ce196b955d4", "sighting--ad177c76-7421-43bc-aa5d-894b02d117c0", "sighting--86355b49-914d-4862-94fe-69b937bb76e1", "sighting--ff3abd75-3d01-463c-aaf8-241f18d66363", "sighting--9ed8444c-9cd3-4848-a95f-6d10addae130", "sighting--2071fb8e-9b03-403a-92b5-6c06648fbaf5", "sighting--ed914879-d721-4889-b38f-aeaa02152390", "sighting--782594b6-26c4-40c8-b8d1-fb53e64836c3", "sighting--bd6cc10c-9ef4-41ec-9a18-70b5d176201c", "sighting--9f767978-7990-4bb9-a2d6-a1ff99331fe1", "sighting--9fff2961-2601-4c2e-b319-7157010a16e1", "sighting--73a4b908-ce84-4faa-a334-f6a3b4c7b091", "sighting--641a3c86-ff38-4d72-b184-4798d28f76a4", "sighting--cc90133f-ccc8-4886-a7ae-12ab4314314b", "sighting--e844dc1b-835a-4ce8-a6ec-23ddaf32237a", "sighting--ab2a3533-1fd5-41e0-a66e-5aafdbc35aaa", "sighting--3c50f31a-aeac-4cf9-ab56-305e14b30dd4", "sighting--73c93e3c-414d-4615-81d7-bed8ba3c8d45", "sighting--168ea39a-1eae-4070-bd04-969259cf3f8d", "sighting--0c907f6b-4939-4d60-b84f-70e5a1ce2fe2", "sighting--b0533080-6eac-4908-aeb8-861a6a044b5e", "sighting--8f93a5c9-08f9-4925-837b-7f64c274e50d", "sighting--4c279586-019e-45ee-8593-96bebb5cedc6", "sighting--c610923b-4e20-43cc-988d-e8970a38572c", "sighting--b8f2d0e3-272a-4b64-947f-8d2411686461", "sighting--0764ff20-bb7f-4d7b-b670-3ece18a9ffcf", "sighting--5d9b5303-b643-4693-860b-179ab41a60cd", "sighting--2e51528a-8a77-468f-ad49-209d9c5f13b5", "sighting--d8b170d8-f141-4895-a9ee-dd314aa16cd8", "sighting--aa3230dc-89f6-4902-a7cc-539b3df04fcd", "sighting--f07cd921-b7c9-45af-b98f-977824ebf4d4", "sighting--5d33db5c-e126-4439-9d9a-a562379e3ac0", "sighting--56740b7a-1735-4afd-9e4e-08e01a066ffa", "sighting--fafd2969-a90e-440e-9812-bbc982931dab", "sighting--0d1c3533-0ff8-4fec-b3f5-729253db1274", "sighting--2a3781e7-262e-4328-8aa1-7fc997a35c3f", "sighting--d99382a8-bad8-46b8-89dd-fac8e160a895", "sighting--85cede6c-c4f1-4e3b-a4e5-8c3458df9f4b", "sighting--4cfe0d33-3110-40f7-a0a9-b5ca409be06a", "sighting--919749a2-3fb9-45d5-9bf6-a76809394edd", "sighting--0d275b53-a05d-4ded-bf0e-3277600e69a5", "sighting--e7c62607-afed-48f3-a252-b66ce7deaf2a", "sighting--adaf2289-bb96-4867-966f-909c31849725", "sighting--d4abafb1-2423-4acf-9b03-926a332d6d6d", "sighting--dff8ae1b-a721-4727-939f-33db827f354f", "sighting--1076c421-dc3b-4e17-9cb8-5f05ccaca075", "sighting--80d172fe-676e-4ebf-a816-ba87bc229cc4", "sighting--ce066d1b-49cd-4c6e-a436-b0e585032519", "sighting--4199064a-f821-47a2-ab57-1549c4142605", "sighting--3ff8ba25-8399-4235-a2c0-7950e03357a9", "sighting--30b8d5bf-a3c4-409a-862a-664770a056dc", "sighting--e5a668cf-4e3b-4c92-bddf-6dd36323eef7", "sighting--005ed749-3bd2-44ac-b3d5-3d42b29668bf", "sighting--3f98a6b4-ab5a-4466-a913-a890f93178c5", "sighting--13bbfddf-303b-46c5-b61f-f69139c9624f", "sighting--2ada7524-2225-47c5-88dc-c1591bc9bc83", "sighting--f7a1f547-e9af-48de-8ca8-b73cfa2e433e", "sighting--0376c0fb-2169-4dee-906a-abdaabff3a03", "sighting--94f54b97-579c-4ae7-87eb-1af31c53715f", "sighting--3e4af68e-058c-4125-ab0d-e0748a2a0b03", "sighting--c7529262-38fa-4960-8a5b-46fa2be2ab5d", "sighting--7b23d7cb-19c4-48f7-b81e-ae5f4438d4e6", "sighting--68dfac76-110c-4995-b5de-bedd7ac6cf08", "sighting--af3ff4b4-4066-4b4a-9bb5-132fdc31183a", "sighting--45d992d6-3725-44f3-b89d-4cbc309cee2d", "sighting--b72d7618-b16b-4739-98db-9ef3ee361d95", "sighting--9ae05d3e-d739-423e-a85b-9b6c4dd76ffa", "sighting--144b40f8-6b49-4026-bb07-d46e08d2e158", "sighting--61825a73-109b-4f83-8a98-aaec636b9a06", "sighting--712ccfaf-19cf-4639-8e19-374077ce3eed", "sighting--798233f5-cccc-4e7a-8720-c260609fe206", "sighting--d1e0cedd-4df5-48b0-906a-1974f372016d", "sighting--65b953a3-263a-4161-8308-85d59bb4e151", "sighting--e20c7519-fc51-45fe-ad5a-fd3b3e53a63d", "sighting--57ba551e-3218-41de-b342-04b13de170e2", "sighting--bd32ae33-a524-4332-953e-383b95a5fc99", "sighting--5f02d488-4c0d-4fc2-aeb1-6411435c8f44", "sighting--f3271363-bcb9-4880-b277-db8c3722b1f9", "sighting--a05521c8-dadd-4f43-aa10-d73b53997b97", "sighting--c2acb3a9-0c7a-410d-affc-c33145ffc43e", "sighting--34bddddf-746c-4d94-95ae-ea7cb994fd30", "sighting--e5db9114-ab4a-4545-9cc0-6933e3d3f2a1", "sighting--e32b6e9f-532b-42e9-964a-7ecd6ccde882", "sighting--8121d91c-ad12-408b-9fe1-d465a79c6209", "sighting--874082f5-d356-4081-9b68-13c65c49cf2d", "sighting--9dc20cc2-c681-4025-ba32-2befdd73cb3a", "sighting--158354e5-e450-4a95-a46c-671de4b27567", "sighting--338b1fe7-b579-4ae1-9768-7e553502799d", "sighting--88b1aaba-e3e5-46bc-aaa0-6926891c1198", "sighting--b1c20c41-e6a3-4e82-88fe-600b105dd02d", "sighting--f5c8804a-88b4-4c1f-a4d1-fec26523dcfb", "sighting--d4ef792a-996d-4f67-9d1b-5b253a5470b5", "sighting--917c1894-1ebf-40f8-9fdc-147451774b01", "sighting--a4077c81-e042-490b-89e0-d53e7801db2d", "sighting--ac607d6b-3829-436d-8b14-88ea0840d143", "sighting--2c4e40e7-993b-4ed4-9bb4-8ff6bc5bba34", "sighting--e60b6c12-a754-44fe-bb28-3d75bfcec257", "sighting--b713bd91-1de4-4e12-9f22-1bed234914bb", "sighting--14137ecd-3353-45c4-b6f3-81be94039339", "sighting--235b911f-c2ee-434d-bd87-c5ac7fb378e6", "sighting--fb26cdc1-292c-45e4-8672-c0091b915fb5", "sighting--06e498fc-efe4-4989-b2ea-bf300e23cb42", "sighting--415cb825-7c1c-4ba9-9add-3ec19c6af404", "sighting--0925b3a2-c086-46e1-8a6f-69234260165d", "sighting--56010ed6-879a-461c-902d-92de5781b59e", "sighting--90d5f55a-c422-422d-9c4d-e533a2f9b661", "sighting--5e8c84d0-c6cc-4b91-aace-ff665263754f", "sighting--5b6e3735-729b-4079-ae39-0eef3bf1f68b", "sighting--52523b15-3157-40a9-a484-cbb06a52a723", "sighting--eb634c49-3fd7-4b96-81ae-42931bbaf618", "sighting--015f4a72-3ff6-4235-8861-952413c6c783", "sighting--43dd222f-cef4-4999-8624-066954169723", "sighting--8774eae2-3ea9-41d2-872d-d66965acbe32", "sighting--8641e928-f67d-4588-bd20-6a0087cf2889", "sighting--a3475208-dc10-4e49-b60b-2e282c0a5e3a", "sighting--59a1350a-cda2-43ef-8c15-305c0222f766", "sighting--d5bc5ab2-8227-49db-bbe1-179a806d6eba", "sighting--7dd88a03-a558-41fd-b5d4-47d4cf6f7015", "sighting--a43b64be-c31f-4d9d-a5d3-c0c7283a0e32", "sighting--3e0cebfe-4f84-481d-9678-c52f953260f2", "sighting--64bb94f8-da43-41e7-8677-9c641ae09c73", "sighting--e8a177b2-7735-4b95-9f91-36987d07f266", "sighting--ae297515-cbf1-4925-88e4-a37384348e30", "sighting--0aa68cb0-18ce-45f1-a479-83a12f2309b9", "sighting--6329f862-ecff-4ceb-b988-188c0e22b895", "sighting--2c9835a5-1206-48d6-8f4a-8693e1f6d600", "sighting--b82e39a4-bffa-453b-b20a-f6c22005398e", "sighting--040f6a54-4b87-48c5-bd2b-e1457f0f31a4", "sighting--2c359991-52ef-40f2-a1bc-833b29f4a937", "sighting--cf698170-20f7-4159-adc4-28b21ba99485", "sighting--511c3db1-793b-4f67-880a-82941c1bca09", "sighting--1633da08-1817-49d7-9136-93d9a324c6e2", "sighting--4ddb02c7-c032-41f8-aed1-f9b1f1b82f5f", "sighting--ba8b6de1-e142-4e21-95c0-5e1a00ecbeb7", "sighting--652fe3a1-0951-47e6-8cda-895564094d72", "sighting--60a342d3-662b-4441-98c4-193cb32c2b2e", "sighting--3d7e40d5-5426-46f7-86c4-fe98b25ce109", "sighting--9f482a1d-8f84-4c54-b540-591d87f9cff5", "sighting--702e08f0-d5e1-458d-94de-ec6fcd70b52d", "sighting--5a0ab55c-d984-4c0a-82dc-008e5ba89a1e", "sighting--0f1c82ae-1d55-470b-b2c7-b6d59244283c", "sighting--016e1b6e-6d2d-4dc9-964b-7273e548064b", "sighting--4c84d652-090f-499c-bb7c-4a745475ae97", "sighting--ae669d9b-3790-4148-ad9e-59144a9e28ce", "sighting--d85c888d-23eb-4a1f-9c66-d176ca4c9bf6", "sighting--1e62609b-eef0-4f55-ada9-90fb90772a55", "sighting--a621da86-cacb-4252-96cf-85a80232e7cc", "sighting--574382be-f19a-4e69-8e18-31e0e8e940b7", "sighting--d0fe1036-e9ed-4772-95ba-34c09fe054a5", "sighting--bc449713-54fe-4725-876b-846352f88f82", "sighting--ebf49194-9941-42a3-bd9a-5d829860e263", "sighting--854baa1f-fe9f-4567-9c92-29f43478fc73", "sighting--68787b6b-4e34-476d-9e8e-3041d115db58", "sighting--7ca1011e-6f01-4ce3-9894-80f10dcd94cf", "sighting--f233cf00-6613-4a48-b170-7a1637dcdd73", "sighting--aecd3c73-2c4c-4cbe-a7e0-1652877da5e1", "sighting--54aa18c0-9df9-4b3b-a147-9d5a688057b1", "sighting--e90c067a-dbee-4d83-9b53-d1f92aa3e881", "sighting--c751166b-8ef1-459f-b5e3-c0d73d43613d", "sighting--21e1c0a5-fda0-4671-81fe-66a5616fbf0f", "sighting--aae6a9e3-ca19-4018-a8e1-4bd296ddf233", "sighting--6d89767a-679d-4037-87a1-be4fdfbae585", "sighting--4f2327d9-f31d-4616-a1fd-d9e13ae542a6", "sighting--6dc3cfc0-5929-4364-8357-d6703c02a46b", "sighting--519c881b-9fe7-49c9-aa9b-11f0348dc9be", "sighting--c9ceae71-8567-483b-82cc-504821863841", "sighting--9c5aaf28-8d6d-4db4-82ad-e42633f637ca", "sighting--9945661d-810f-46e7-8cae-f40e23a18675", "sighting--a7e7d163-477a-47dc-8bcf-4f97124a512a", "sighting--bf71b155-5d29-4bbd-b67d-18c3a39275cc", "sighting--b368263e-823c-469e-9c56-e897102270f6", "sighting--ec87581d-3a7d-4243-b034-1af607b5f825", "sighting--b7674e1a-1421-4287-8cf1-a69d251e13fc", "sighting--157b6333-dbb7-4944-a631-cbbf3778b017", "sighting--12534ca2-7c57-42bd-af5d-d384bc1ad1cd", "sighting--ebba71a1-bb26-47ed-af24-dbb654b9a98d", "sighting--3c84397d-ec7a-4316-ac4c-396503f16bbe", "sighting--8a463464-6703-4837-aa16-cffe10e98a8e", "sighting--10b718e3-6b95-4fde-aa1b-f6646854ac90", "sighting--24fdf481-4059-467f-b469-70c0f7aaca21", "sighting--3988b4fb-f148-46e3-840c-ee595ac3580f", "sighting--a6caad3c-7c37-462c-b6e3-7ec035c77a34", "sighting--2fb51a63-8875-4b3c-bdcc-9c89707660bb", "sighting--12904724-4a68-4e08-9a35-d67661531b2a", "sighting--c05e221c-c7c6-4a99-9402-e6210917f8b7", "sighting--7ec51653-8a9c-4c36-8c70-8a89e1dd7d22", "sighting--637bf73e-1a38-4e57-b8c7-c84b28a3899e", "sighting--2593cee4-3bb6-467b-8491-f8d486c42864", "sighting--36b6e815-3df3-41ef-9056-75c9eea3dda6", "sighting--803712f5-0399-40a8-89d1-a958de413490", "sighting--64a4c1d6-2abe-4144-882e-977c278fd5c9", "sighting--d384fcb5-b73e-45c1-b352-fa1844f9a6cf", "sighting--13a89e04-509c-4a96-add5-2f88332f1e25", "sighting--e6badaaa-de7e-488e-9616-6448c23725f0", "sighting--a05fbe8a-7038-4cdd-9741-5ed6a0990b5b", "sighting--83b80994-52b3-4800-8707-79531e207643", "sighting--f3c92bfb-c6aa-4a27-bbd0-4a4f3b578dfe", "sighting--921642a8-c301-4a6d-a8ad-30a307bbee9c", "sighting--b13e9eb2-8db2-4006-a70d-19be3150345f", "sighting--f093b91b-254b-43c5-a67b-adb6391ea3f9", "sighting--5c462eed-dcba-4853-ae9a-9c670f80e77e", "sighting--89a72f88-b38c-4ba5-af6f-e655489dc67a", "sighting--2457bd60-1f7f-437f-a52f-64e12fcbafe9", "sighting--67594d70-44af-476a-bd7f-7e732932f0ef", "sighting--c929c069-b9db-4726-a600-29b861847a79", "sighting--1d414676-2932-4741-b6bd-b5e4dd3a9971", "sighting--85ff81ca-1382-4cd2-b296-94ca0ac44b9e", "sighting--941a1b97-9d50-4ce0-9b8c-a2ebf9585171", "sighting--4c0b1562-7bd8-444a-865e-19ac2ed773ab", "sighting--e1c29fb0-ebc5-448c-926b-c8ff684d3d78", "sighting--6e839dfa-49ce-42a3-a14a-c9af70f19721", "sighting--e4889c17-d529-4348-8f95-cd919780b31b", "sighting--3ae63bc0-aa3b-4df7-9eb7-6477407cfdba", "sighting--3dd2a012-8e75-4917-b8db-391d6b91570e", "sighting--fb24d61a-a69d-48f8-8394-526bcb2210f8", "sighting--dbc6bdac-336c-40de-8177-f5a00ae65c41", "sighting--c10dfb97-02b4-446c-bab4-11d5fb63e0dc", "sighting--4b1227b1-89f1-4bfb-82f5-2d71d7c5251b", "sighting--3ee7ce8c-7537-4fa5-a81f-fc293fb8d9c0", "sighting--4436e5fb-ef75-4a65-9e13-616960ae31b0", "sighting--7d46f0b5-2edf-42cd-85c4-3fffbae41f68", "sighting--9bbf970e-50fb-4c96-8fd9-0ccb94e08356", "sighting--1203b532-13bd-4f0f-9737-de1ae6032406", "sighting--dd9848ed-d47a-4544-bd9e-12eba84b5dfe", "sighting--33ffe50f-a8b1-4e6c-8e13-947b5b0061d0", "sighting--6e51021b-27aa-4ef3-909c-8ec970dbee9e", "sighting--5384da1c-ab09-48ee-aee5-cf7e83c501ff", "sighting--84b9e990-58f8-4eb8-9f93-4ce8543ca17d", "sighting--dcbbee67-e465-43dd-a8bc-9367fa39be48", "sighting--7448730d-a18e-4cd4-946a-dc975e176b3a", "sighting--eebc077a-dc23-475c-84c5-cc5968d4cf15", "sighting--ea832176-8c3b-4d34-906e-f16711f03545", "sighting--a21871da-af8e-476f-9a6c-f8eb242e1243", "sighting--8c3bc4c0-2f08-4a62-8509-d1aeb6ee7c92", "sighting--1f0b67f0-54b7-4755-9e12-b26ab9c8da6d", "sighting--ff3c23fe-ec74-467e-80ee-5b7396e76095", "sighting--d192ea91-89fe-4277-a51d-7029301eee0a", "sighting--69d6eb7c-7680-4eaa-b2dd-efcb07fec655", "sighting--3a14add9-9fe2-4a50-82a8-5d977f183738", "sighting--7fcc63ba-0656-48cf-9dd1-323be9f524d4", "sighting--2fa00333-a54c-438d-884a-01d104531b3a", "sighting--e2c182dc-9a14-469b-a136-809af25f0174", "sighting--ed4ab4b6-a4d6-4693-85af-9971ba1c0277", "sighting--66b19061-c420-4fa4-929d-69237bed88c4", "sighting--34b0f42c-c104-41bf-9419-2135ad679157", "sighting--758bea30-03d2-419a-8bae-30e1af800e56", "sighting--6fb6b840-d059-4331-abd8-db27643a272d", "sighting--60fbdcb3-24df-4bb2-ab5a-65e7d25497ad", "sighting--46418df5-9527-4cfb-ad08-939117937876", "sighting--a78ece79-420c-4af7-a085-2466c6e97c9d", "sighting--476af532-c7be-4ad5-9a44-28d5a39a706e", "sighting--fe02e88c-745f-42e9-b828-9b131c0872a1", "sighting--a09f4090-f5a4-4aaf-8d3d-db6c01f54c5e", "sighting--b0634a24-7b76-475a-afb9-eac8763599e8", "sighting--b8025726-937f-4f9a-b2b3-dbec317b8b63", "sighting--f5c4aac0-b1bc-4592-b840-56ea6f877e3a", "sighting--ec518496-5783-4a02-8092-bb5329d898f3", "sighting--e5031eba-2c33-4b12-b817-3df9b28bdfae", "sighting--a92d6659-8ab5-4174-bfe5-9d8f21946a37", "sighting--f15ed80e-732c-4a15-b457-7d503eb27c36", "sighting--b7251916-e468-42d2-859c-bc45143a1d75", "sighting--37239806-3243-42e5-a0a2-0e5ad853ce23", "sighting--d036eae1-d455-4679-b195-1de6e41388f9", "sighting--810ca1e9-d546-4196-81e5-b1465713eeb8", "sighting--3b2d942a-b5ca-47eb-b4bd-07d8b7a8a17e", "sighting--c292f446-bdf2-4edf-8266-309c78c10d7a", "sighting--7e420a8b-2430-4cd1-8f65-0689fa357461", "sighting--9a021cb5-6e71-44ad-a391-683e28d29f90", "sighting--2760b595-32d9-4c05-9977-17c94f254a72", "sighting--01385430-bcf1-4820-9563-70854dd458ac", "sighting--d67303a0-807c-4d68-b33c-3f553b033773", "sighting--3e094182-4cb2-4615-9944-e460adee2eac", "sighting--48be6a55-610e-423c-b8a9-eb715f92697d", "sighting--c36f9937-b586-4bda-8d50-6d8b04fb1344", "sighting--9e721fb3-fee9-4cd6-8666-a1bf7f3df18f", "sighting--d2f1f996-9dd7-4c5f-a5c7-ac0638559faf", "sighting--308539d4-02e4-4bcf-b578-4870ad41c11c", "sighting--ae053449-9e5f-4587-bb9e-705559f66abd", "sighting--df835710-7927-4cc5-92d8-3b04d015462f", "sighting--1b0a8bac-2d69-4b48-9235-141143c44032", "sighting--e3ebbfb3-f265-493b-843f-214a48055517", "sighting--38b96687-db58-4931-9315-aeda09ce620b", "sighting--035145f8-e52f-4691-b259-d5d24b15035f", "sighting--6cc51aa8-4301-45f4-b38c-c531f6c692fd", "sighting--7e7a838e-b166-4da6-bc5d-831b4e9957ad", "sighting--0c9810c8-02e8-41a0-9af2-f9f8301b0f4d", "sighting--9afb3330-3fa0-47d1-beb1-e30239acb3b8", "sighting--bf6362a2-615f-467a-8c80-2122cd566bd6", "sighting--a8268cf4-67b9-4d58-8c46-9e9f45c5bd67", "sighting--28bde02e-b80e-48f8-a634-36bf95ebecc6", "sighting--1e30c927-30d6-4f06-89c6-3123c14fee6e", "sighting--9a34ea18-9ba9-4a4c-9c7e-3cc799929b55", "sighting--524776fb-1dfc-4b60-aa4e-875842d4dce3", "sighting--b00f13d3-cea7-4397-a977-cddcb2d6ad7a", "sighting--005e65dd-37f8-4e49-9673-05c16257865f", "sighting--85e76c30-f0d2-4a01-bdee-529e78619760", "sighting--68188240-342f-4a56-9657-74e22f4a1de7", "sighting--85f4fcf6-e136-4abc-aaaa-a3dd10639de4", "sighting--4bedfc17-3f39-4c49-9388-c6a8db83d82a", "sighting--34f0f125-88a8-44e1-b0fd-bdcd43c9553a", "sighting--4307469b-ea2b-4fdc-bba9-aef57f923845", "sighting--81da58a5-3899-4819-aada-6168033b0b65", "sighting--f598bbcd-f11d-41fe-9e41-ce8fcc3b3182", "sighting--ec38335e-7362-46e6-9e57-3551d829d4d0", "sighting--f28ff95e-a97d-4845-a261-8e5a1935ea92", "sighting--062246b4-c270-4507-844b-9e640b19fa87", "sighting--ba1446aa-3dd9-4505-8817-bd83f9a94dbd", "sighting--a30566e0-2539-4dcf-8d46-f8b64f12a58c", "sighting--8a5548e0-d6e1-435a-a948-a97d1b416f19", "sighting--6cf0177e-b15f-4e43-a315-c114401d9933", "sighting--bfd54b2e-34c3-4030-9b22-0994ee9c1d0f", "sighting--9f4f2d9a-0ea9-4106-9426-77fd4fe9d655", "sighting--1b3d4ccf-6942-40d3-a1e4-115e9ded37f8", "sighting--82cb5591-fe5d-44d7-9f5d-bb339422e900", "sighting--a4199af4-f85e-4bdb-9c1d-d36efc668c21", "sighting--763e2f13-6b56-41e0-a6c2-a1728a97624e", "sighting--a86c3d68-1139-4bee-a899-4a0754b91867", "sighting--93942776-a801-418a-b9ca-fc7e2535f051", "sighting--3daef952-f495-480a-b6cf-b9b3517489c0", "sighting--6f68dd16-012e-49c2-8fea-84e7f6acb5f3", "sighting--a48594b9-7a7d-48ea-a2c4-6b7fa52c591d", "sighting--5bb778d8-e43e-48e9-9eda-f339561d96ed", "sighting--52868093-ba5f-4bc7-bd7b-e411b5ebe20e", "sighting--4385de56-65d7-4dbc-9deb-047c0cc2c590", "sighting--049d0559-6138-4f92-b174-6611eae23948", "sighting--5264038e-f880-4cf9-b94b-13efc19412fb", "sighting--d03c1029-4544-4d7e-a6a7-0bce86c4ab7e", "sighting--8225fda9-a026-4a2d-b7f4-6b1ae149085c", "sighting--2e06e129-6705-4cf4-835f-2b4bb8d51af0", "sighting--d781c87a-bae4-40bc-9f64-233cf62d0d0b", "sighting--897c0e4a-db56-4a61-ba16-73f3086e5c9f", "sighting--96ef31c4-7941-43a7-9ad5-b1c0f904a55f", "sighting--07fe63e4-5339-487d-ac7e-62c4e19073c9", "sighting--e86faf50-4ed7-498f-a1a5-516be7373de8", "sighting--798ed2bf-67a3-454c-bc98-4942167ac4ac", "sighting--9564e3a9-656a-4179-9ef3-fef73042153d", "sighting--c8e39b60-bf9b-46ea-88b9-b2fe5dc35872", "sighting--37e59ba0-23f2-42c2-9028-740334c944b1", "sighting--00c76745-f905-43a0-90a3-0db831daa66f", "sighting--e7bec40a-db46-497e-9afc-6c2d2f1f1304", "sighting--e535cf5c-a862-4818-b72f-0f3469c5fdec", "sighting--75f9458f-b0d2-4c71-a29a-a1f6624a89df", "sighting--a1fce767-ac47-464a-babb-5e5602ef93f3", "sighting--9890685e-7719-4a8e-ac3e-2901463ea2c0", "sighting--4c7eddbd-8422-4cbe-8396-38eb5d36a232", "sighting--0d4538a8-1540-4406-b4e5-d416ebba1c0b", "sighting--508c1933-6657-440c-9b52-d099c4e4eb3a", "sighting--3c0c91c6-a491-4d7d-b834-040b482fe700", "sighting--aca523ce-a0dd-4f80-82b0-69336d11db25", "sighting--02b5f2fe-c714-4503-802b-c3f37300c5cd", "sighting--66b241ac-67cd-4660-9213-0332135f91de", "sighting--dacbe782-851e-4830-a0ed-1ba7e8ea38fe", "sighting--5899ccd0-860c-4ef8-b814-ca14dd0ecc64", "sighting--c894c773-2da2-4c0a-9c6d-cece4267136a", "sighting--518fcdcb-7f2e-48ca-b46e-19508c9688e8", "sighting--471be914-95ba-4012-881c-c167a2d0bec5", "sighting--af4eaa8c-6d5a-48f0-b09d-6914b47b03aa", "sighting--e723357b-666e-4c8a-acdc-f5c35e1323c8", "sighting--7d4d7b6b-844d-448e-84be-54573ab5ebd3", "sighting--676cfc46-411b-4f23-a62e-1be5c2f3453e", "sighting--0f7221b3-628f-43ca-94da-29b54df04f2b", "sighting--ad65e70f-aaf7-4159-ab0c-1b3e860ab8e9", "sighting--9d0002b7-b04e-4a5f-945c-2a7584ae85ee", "sighting--615f9dda-383c-46fc-aa74-8bfeb2b9196f", "sighting--6fd1edee-d50c-4f53-bd5f-8de4a83e266b", "sighting--acd8fa11-dd9b-4827-af27-54eeecaf631c", "sighting--11c80f53-aefa-4451-8e24-7b05e8beaf65", "sighting--88c0bfb4-a465-4ad1-8b97-bca4aaa4d1e3", "sighting--442c5a9f-3346-4554-84d1-f41cea015200", "sighting--112e2081-bbf1-4740-a514-8717e7695262", "sighting--08d86da4-9893-45f1-a40a-43f9e07dfbed", "sighting--c58d528a-bb12-43b0-9a19-99f10198424c", "sighting--4293ee31-4c49-409c-9d0e-728edaf6b070", "sighting--539a6a90-3cd2-4166-958b-ed9ffd87de47", "sighting--a2e6e49e-6509-4dbb-96e0-723fcdf8ec80", "sighting--324b46b1-bd4a-4e45-8164-14159117a393", "sighting--0b5b0090-e265-4e0d-a2ae-c383671c0f89", "sighting--016827c5-d0d8-434f-930f-0d7d5df040ee", "sighting--6e156bf1-421c-4029-824c-c883bd14fec4", "sighting--6825f6f8-3c8e-4769-b8d0-5dd3f93ac6a2", "sighting--29234864-7558-492d-9866-f0adf61f6ae4", "sighting--3a1613db-72c1-4a48-a41b-1d0b61ed9436", "sighting--89e3da99-ee10-46d9-b9d0-ad9c27971475", "sighting--36ac7a15-c281-436e-92eb-4ef7aa59fda5", "sighting--1c1d7bff-d4ea-4212-ab98-c1d127fd1131", "sighting--40af23d2-54c4-4482-bd14-b586ac984044", "sighting--00acaa19-f4c3-44d0-b88a-b854eec20c3a", "sighting--72f655be-bc15-4def-949e-d1cd0e5eb42b", "sighting--a2d24b85-9d70-4d2a-8e1f-0b3f0314d9ce", "sighting--5836a827-9191-4369-83f0-04acf61e2eca", "sighting--62336cf1-d622-4fca-8eff-081abca8762b", "sighting--7d5374ae-b47c-4625-9abc-ec316d0e6c6e", "sighting--54e5beeb-1ea7-4697-87aa-d576f7b74e7a", "sighting--92b27b13-1731-48ec-89a5-ef630feacaed", "sighting--d796a943-8319-4dde-8aa7-570c80c02df1", "sighting--5575b18a-b198-40af-bb8f-83f12a0e5559", "sighting--48dc5cf6-3bfc-4916-b51f-66f6875b1de0", "sighting--43010992-31f7-437f-b828-fe67c9192c37", "sighting--ef52db51-72da-4b7c-8caf-fb6c19f0abce", "sighting--61d6047c-fcc3-4df6-b00d-6ae3685263c8", "sighting--3a0a334c-258f-423d-89bf-364c861f1e68", "sighting--53b80a51-276f-4d2a-b805-30569686944b", "sighting--486020c6-1a0a-4f86-8752-5b256d5b31db", "sighting--62b31841-0dea-46ec-baf7-00ac0cd04b90", "sighting--2199e4ef-75ee-49b7-9013-8aa329be08b4", "sighting--7c3cdc6d-b8eb-4f2c-8b15-1b49183979d8", "sighting--0e3e2bf1-25aa-4fa2-b55d-1c6f62b9c87d", "sighting--01d27bc1-aeef-42ea-839b-5760c819b45a", "sighting--fd447df2-244d-4e56-856d-9802b2729110", "sighting--3014ae65-80d9-4243-a7d7-1b3b86ab0d2d", "sighting--007b5b4a-1766-4e24-9dc5-f38e1c1ba920", "sighting--a3b6cbd2-bd53-4b6e-902d-df4a3e5eca40", "sighting--87d2a722-c7d6-4573-bce9-4b5977495437", "sighting--b8af11c5-c983-4170-bd59-cdb6b29155c9", "sighting--8b9fb65a-80fd-43b4-b44c-40a069cd0a6f", "sighting--6d3e8805-e68d-4d38-9f63-680de3d9bd49", "sighting--1126e39f-45b2-4044-9648-f82c974d9235", "sighting--f04234fa-0a05-4e7d-a1cb-fb651ab024dd", "sighting--6f32f720-eb8c-419b-a71f-fabe195dda37", "sighting--7d0e5b22-2af2-4c99-aaa0-5b2fafd09d4a", "sighting--8563ecb3-3507-48b3-999c-83699889842e", "sighting--3f0c98a9-d920-45ef-9ac0-29bed00dadee", "sighting--946ccce5-5d65-449e-b996-04076ad8e9aa", "sighting--e36fd2ca-4a1e-4063-a624-edcd0a402b02", "sighting--d775fec9-c687-438a-8bdd-5148ff880225", "sighting--9a251af6-09bc-48e6-ac56-6f2dc4842ede", "sighting--48f3c6f0-21e0-430f-880c-499e3da8e154", "sighting--57bfc602-f61c-4d56-8f12-a2f53b982fba", "sighting--6a1d88c6-fb8d-40b1-915a-9778d7d087fb", "sighting--067d4fbb-c449-4b41-96fd-8353ffdd0bcb", "sighting--bb508a90-0006-49d8-afc1-f76ecd62b35c", "sighting--f96fdea7-2140-4ce7-9726-fc132741363d", "sighting--1b44dc22-a390-4ee0-9569-271d1102267b", "sighting--bfd0d158-a84f-47d4-9f9d-8be7de3023bc", "sighting--b124f197-acc2-476a-b32a-ab1cb92c935f", "sighting--1f94ee48-31db-49f8-80f9-f5d6bcfb87e3", "sighting--4a2ce3c0-3d94-480d-bb35-4b8efcc0e4e9", "sighting--3a88ed45-ded9-493d-8b1c-bfe4006b8d42", "sighting--e732f6b1-d3b8-4a66-974a-a26ad7621e58", "sighting--def4a6e9-c383-4b21-8e98-e7650e431038", "sighting--9f54cabc-52f4-47f5-beff-7ef634130468", "sighting--2e74276e-ebe2-408a-b1d5-d448816d9c48", "sighting--3ce83f4f-0618-44a1-849f-996c173c5059", "sighting--5295e324-b077-454d-b92a-9c6f1af49997", "sighting--e19a5a56-b6d0-478e-9c0a-378e3762820b", "sighting--1c9b8a9a-57ac-4013-b9c0-ce8370bed242", "sighting--0246e69d-676b-4eda-b0e1-b3ea597d4c34", "sighting--5c2671b8-c731-42f6-b431-a19735924343", "sighting--01709d6f-8e8e-4cd0-9f43-626c1c6517bf", "sighting--937fbd6f-bf5f-4c49-bc4a-c86f420c19de", "sighting--e1fa50dd-2b1e-4d72-ad41-fdc3e28cee14", "sighting--7cc3995b-88d5-4598-9633-660902ba45ce", "sighting--7faa73b5-43a8-4755-bc39-1bebc1591a86", "sighting--bd5fca6e-17ef-4788-aae1-33f1525514db", "sighting--0afcc6d0-a165-47fe-af76-2da0d3ab1b45", "sighting--68359cfc-fa5b-4ba4-9d0c-c4a44c19ff9a", "sighting--98ac1a2a-b875-4c62-b09d-84a61b521a41", "sighting--63e3fe6c-384c-4cee-9efc-17738289aadb", "sighting--aa7ae853-9bab-4720-b6a3-6226957de0b5", "sighting--56f5a3d7-496d-4402-8a3f-4ba68c6f3f1d", "sighting--f1194f15-509f-4595-9a68-a31b8848318b", "sighting--4fca4253-6271-4fce-9945-9edf1e3b8d89", "sighting--465bf8ad-4b4a-436b-b738-8e58b4eed286", "sighting--3a01394a-0b2b-4ab9-9045-a234fba55525", "sighting--ffde7330-5bd3-4768-9184-20222d7f2b03", "sighting--93e54aff-d8bf-4205-9d1b-2f5c696f11f0", "sighting--6d7a7a05-030e-49fb-a65d-397facd8dcdc", "sighting--9f52e759-ad89-423d-a92f-c7dd49c586ed", "sighting--2836535a-690d-4110-afff-9f7947ef9f91", "sighting--0532603b-c7d2-4dfd-b418-6172585461c5", "sighting--1041e0a1-02e9-4f42-8e52-1af8c03ca945", "sighting--bd4fc540-47e0-4975-a3bd-9af6bce8e772", "sighting--9cc2ea11-8218-492a-ac83-85c37e0707fd", "sighting--bc80ef85-0bf8-42e4-b1dd-47d3cfdd3572", "sighting--e21160be-cb89-4206-b5cc-5676ff75b304", "sighting--ea5e588a-deff-4f8a-858a-4482ddef2d5f", "sighting--5dd6a727-6c24-4b39-a4e1-0655a6df305a", "sighting--605d3a70-f490-43ee-a9d2-1045578869a1", "sighting--82bd9f8f-0988-41aa-80a8-d2083e6c0a5b", "sighting--0f00412b-674a-4dbe-9cd2-8cd3d72adbba", "sighting--4c1a3e68-a2cd-4d88-a277-e84e9fb8dcdb", "sighting--76b2bfd4-bf00-4572-8624-ca9a02a96864", "sighting--f8703bdd-376c-46c0-8ba0-e9b3e742939b", "sighting--987593fb-5558-4b38-b821-e728a2cee75f", "sighting--812f70a3-d814-4384-8ca1-e821c6c24ed9", "sighting--ebb20000-c3a2-4ec0-8cb0-fb28b3d07b84", "sighting--e3eec246-26f8-4dde-a0e5-0cceb76a7a0e", "sighting--679e0041-350e-40eb-a625-b6535144ae51", "sighting--fecce861-f4f7-4d7f-a088-070d5f3a63f9", "sighting--a26467ac-83e1-4940-bacd-4654eddbe33b", "sighting--39c8e1e9-c7d5-4767-8a43-381226a5cdda", "sighting--01bf436c-a999-4f9b-858b-ce9625429fee", "sighting--96a1c7fc-854f-411e-992d-360a83007906", "sighting--ff769e80-92e8-40a3-9e2e-ac2daa9ed3b1", "sighting--d438eaeb-28f3-4036-89bb-31e4952320d0", "sighting--37b36ba6-3930-4f95-857d-5b28d57ad52e", "sighting--8378c1ac-762e-4e6a-b4cb-96a71370fa9f", "sighting--c15013b6-03dd-4961-b6bb-2bb63accf9df", "sighting--25859e05-ac13-4bc7-ae27-1c33a4ee9fcd", "sighting--ec57f9fb-86f8-47e9-92e9-278a8ac90188", "sighting--70b2bfeb-8254-448e-96ab-76aff3952f72", "sighting--a10fd13d-cf06-4a51-b5b1-c64721118d23", "sighting--79f8c835-7673-4507-aa2e-bbfd37cac55e", "sighting--e7eceba7-3106-4a6c-8b03-3ff557e5e0e1", "sighting--70b80e43-0711-4b9f-9fcc-73934e59e3a7", "sighting--a27517e7-c31e-4c57-99bd-5de4662dbef0", "sighting--6583e69c-55c4-4d1f-864b-68e44af9f14c", "sighting--7ca01aff-6db1-4d9a-8b35-813f7122a789", "sighting--f67b52f2-8392-47ad-85eb-95a973dacfdb", "sighting--4670bf69-a344-4c5e-a2d7-95d7fcb557a4", "sighting--e3e029aa-0722-44cd-840d-094bad55b777", "sighting--2c94c693-bb38-4edb-b5cc-c8175afe287b", "sighting--dce28b77-f874-4bbd-a9f2-c0dc5142d980", "sighting--0695dd4f-0511-49b0-a0a6-6a7e8fde40f1", "sighting--6bb188d3-c566-48a1-b288-8aff1009b28e", "sighting--652df0c7-2c60-415c-bc74-b89321c64fae", "sighting--acd4ea40-2d33-4a08-a83c-a7fe7060d5ff", "sighting--dac67dff-d734-490e-9f57-2e0930b42b34", "sighting--24d192f3-c672-4591-900a-a93e090e555a", "sighting--32815015-ad11-442c-8a5e-2a975014f21d", "sighting--dedd4365-f4b0-41d5-97c9-0b9e7ead096c", "sighting--1807596f-d2b6-4d1c-b7c2-e17d7dbebb3f", "sighting--ff4a7c41-4afa-4a4b-89d3-e0960353c03d", "sighting--3330bc92-c066-4fa5-8b2a-9ff9dbd761f8", "sighting--f058a6fa-cb99-499a-85ca-53a900e97a1a", "sighting--e311f5ab-85f7-4519-ad8b-e4191b12f96f", "sighting--8c765327-a55a-4667-92ad-b3f588bae119", "sighting--2e646d96-72b1-48f6-8291-11117f828700", "sighting--e409139c-0621-4ea1-b2ac-8b13f6161110", "sighting--c0d87157-5804-4de2-8d73-ac66d0dcaf48", "sighting--5bbc5085-8eba-4c33-ad57-0fead91380fa", "sighting--97c53953-c790-46f0-9caf-5ac1c1bb96c0", "sighting--dbe6a688-a619-4733-b707-984e303d7273", "sighting--fbf484b0-0b42-4f80-be82-4baaa6b45736", "sighting--ddaf0853-e9cc-4853-a6c9-06b8825a0cfb", "sighting--dfe405e6-0672-4754-8199-25507fc087ed", "sighting--c3f5c2af-3c9f-44c1-acd2-ced4ac9441cb", "sighting--787fa509-b6e9-439c-8e69-4eb91497c5ca", "sighting--a778cd2f-6365-43cf-9ad6-d7a7850c4080", "sighting--8634b2b5-9829-4525-a644-59c5f85aec58", "sighting--4b47108a-f348-46c2-b1e5-94d71ce5da9b", "sighting--190f35b0-5828-448f-8b29-ff8c24301743", "sighting--bf6f18f0-9fad-4785-892a-f001bc9f2458", "sighting--35caf1da-8c4b-4ebb-b9e9-d5b7b3b3bdfe", "sighting--f807b619-7dbe-43d0-9a28-a02acbaee0cd", "sighting--b53d865a-798e-49fa-aa95-b934d8067e0f", "sighting--0af9aa34-1692-4c84-adaf-f2c1c2e6f0f0", "sighting--7849405b-bd23-428c-8390-01a45ccd0885", "sighting--50dd7560-7826-4729-91fc-db2e4ec6df57", "sighting--23bb1f85-2d03-4b1c-95ce-39a8b6e74a41", "sighting--0f30a2c1-b95c-41e9-9712-df3ec186a67c", "sighting--9cf42c90-16f4-4496-bef7-afbfe95a0a16", "sighting--7acf1ed7-495b-4979-9333-07d0c47da474", "sighting--a6eaafe6-3059-472e-813d-ba153aedb5fc", "sighting--7609abff-daeb-4477-93d2-7b5e40cb81da", "sighting--72bef12b-7b94-47ee-b3f1-d26249e42a83", "sighting--1d43e047-c326-4e76-8e6b-1ab039c41d1b", "sighting--bd27e78d-7d38-440b-92be-48438d0992fe", "sighting--2058a1e3-d060-4ec4-a657-d9bdeeec9c95", "sighting--76b6dfbe-237e-4b02-86fa-caf6328c773d", "sighting--c4aef614-1f1f-4a4d-a2db-b44aae6b2893", "sighting--5feab22b-f5cf-4d9d-a6c4-6fee0cee47ee", "sighting--7e0b7b57-891c-42da-b971-8f625fb550b9", "sighting--32090164-27ce-4810-b1b2-42db969f6da0", "sighting--b0c37add-903e-4a31-a633-fcf9fc631735", "sighting--1fca1fd7-fe56-4050-98fb-b42d4016dd47", "sighting--697074f6-0d3e-4c80-9826-740a9726054b", "sighting--66376401-1799-40d7-aadf-e112135b955a", "sighting--aa319028-6581-4ca1-9574-ff193e856707", "sighting--9f178bc3-c7e3-4799-a20a-35fd5d2c0843", "sighting--103592d1-5ebe-4b59-ab37-b2d59c40da29", "sighting--ff1bb9fa-2ff0-44e4-9a60-0586f0d3fc33", "sighting--86888319-5375-43cb-ae0c-adfe16a8f7f5", "sighting--813dc2df-059c-42e9-ab94-d06bc5dd1292", "sighting--8ea23432-31b3-49aa-8fc8-3e599e326be6", "sighting--8c31a1b8-c54f-44ad-8da8-ad6d120df1f7", "sighting--d528a4cf-c29f-4f27-99ba-c8c3ba40b714", "sighting--c2af6d2b-3832-440d-9594-616934db59eb", "sighting--232783ac-ea1b-4b31-979a-1c0b54e61ef0", "sighting--5bf9b790-b3b0-4c16-a1b4-28cee007519c", "sighting--bd365f53-1531-4cde-ae95-156eb60b8bcb", "sighting--42879ffb-1c25-4805-8261-0cc4d866fc64", "sighting--741a6902-250a-4199-ad7f-ac58aad4d00c", "sighting--c34702ea-46d0-47ef-8a27-31d007572fc7", "sighting--1dc89d7b-7ca4-4978-b0a5-9bce84dfb6e8", "sighting--2eb082b8-ced6-4ee6-8ad3-9b5a8a14c4e5", "sighting--74c6f0fb-9536-4a77-ba06-ba50f79556a5", "sighting--d17eece4-949e-401f-ae80-cbe43f1c88d4", "sighting--8adeac2e-b051-4d89-8f10-b91f1f493e66", "sighting--6f6a409d-d420-48e3-ac8d-533a92fe83b1", "sighting--92c59716-70a7-4e24-896f-5e3af64fa3d0", "sighting--f288d0c1-ce45-4ea7-b206-08b6210321ee", "sighting--6dcfc085-75cb-4062-b591-87b5d607a571", "sighting--8eaacb74-ee29-46b0-9760-5d0fb7905c8b", "sighting--b20e7b05-84a7-44c1-95b4-f986e7885aa9", "sighting--a923e571-53c2-4efd-9527-21f55a282fdf", "sighting--8a8161d9-4e8b-4a79-a440-9cdf2328aa92", "sighting--29b1a18d-6161-4c29-b3e7-8d472a94f8f6", "sighting--95001bb0-aec7-4318-bc90-16e18ca2238b", "sighting--2ae74973-5ae5-4603-9d66-3e7e65642dfc", "sighting--edfed385-8a23-41d6-8fc8-fef449a6e6dc", "sighting--2f6c81ec-1f08-497f-834c-8a8a4c7656fc", "sighting--8c10e291-d2d1-47d9-96e3-56197f3fcdce", "sighting--8592ec34-a66b-4e0e-9a45-64cafe46e6d1", "sighting--5e737ebe-cb6e-4283-9f22-079564044937", "sighting--5d8d9083-11bf-4b25-b42f-d82eae9add8e", "sighting--631d935c-d70b-4948-906a-086b6ad0c327", "sighting--e0533555-ca9c-4336-b403-991bec0d41ec", "sighting--effe9766-40da-41fb-96eb-ab7ca79f560b", "sighting--60af181d-6ede-4a71-a134-4fe8b07390c5", "sighting--a67ea89e-704e-47a8-abf7-cca9e0501856", "sighting--7a013acd-0738-42f8-81ea-2409b940439d", "sighting--46137cba-1032-4c79-b308-0c135977ddc3", "sighting--79d23c40-d99d-4a13-a957-68ae7a066968", "sighting--74e9d1ac-7c65-4a90-b6d8-a4bc4a9a0d8e", "sighting--5736f05e-452e-42b0-bbf2-d1e364343afa", "sighting--d8ba0c54-2f84-453d-8bb9-75ced7b6178e", "sighting--8944a9fc-7ae0-4ae1-b5d9-20cdb61b2316", "sighting--2b884de2-504a-4153-ae17-f75f029f2f66", "sighting--30d669ec-c5c4-43ca-b6a3-5e280d70d891", "sighting--9c19d65a-4530-4774-abcf-b1b1f282cfa7", "sighting--e8b60417-a819-47c0-a67a-2c5cf7d820e3", "sighting--73681147-9f95-4824-9db9-9c29a62f7c73", "sighting--89b8fd6f-449e-48b6-9ee7-ef6875bdfa66", "sighting--45e6ca22-6fa1-4daa-b46c-9e75b8b57242", "sighting--5b3d49df-5593-48d1-8a03-69f929997285", "sighting--320394a3-2a31-4594-afbb-70d0a4309542", "sighting--3902a59f-dc83-4539-83ba-0cd40dc2d15e", "sighting--7ace4881-980c-4e6f-be38-e3488ad466d2", "sighting--765754fa-e2e9-46e6-8fe5-dbaeed399776", "sighting--1aa782f3-1286-4d65-9d4c-9f1057ed0783", "sighting--946607bd-e924-413c-bb4b-8cbbbd306da0", "sighting--39f4930c-92b4-4fff-8b16-b57a44ba4091", "sighting--4323c5ff-ab04-4b56-9001-2ae4ff518e1b", "sighting--746743b1-1f0f-4a94-840d-4995856efdb3", "sighting--90ae1fc1-7bac-4477-89ee-3e17ec0b1cfc", "sighting--2d8b598a-2f5d-4de1-8d4f-ace77136816d", "sighting--aa14fe15-459a-43aa-91a1-9e7da5fd1ce2", "sighting--40342706-8454-4218-97c6-ed96c20b737a", "sighting--45b29656-dc8a-40e5-9c49-75fb5684d3c9", "sighting--2b465fa7-69c7-4b22-8f3e-5563130d2242", "sighting--49f08f93-675a-4963-a839-8c02b378117f", "sighting--6cf2f774-da0c-4563-ab99-0f586204fd34", "sighting--cf0d8fc8-27b4-4324-b045-edaf1bfc2940", "sighting--a155a5ac-0549-4da5-8b8e-90947b7fec03", "sighting--273a29b3-2fd4-4fda-8da7-2fc4f80d034a", "sighting--aefd4504-0c8b-4887-8119-c05797fab17e", "sighting--9f1a2603-c28e-493d-aa30-79587cd9f706", "sighting--6cc923d7-b2e9-4c1f-b845-8c7d990a94d5", "sighting--5912d748-f72f-46ee-a351-111b0937d970", "sighting--22f1ed7e-6a8d-4027-8e94-ba205b8e4124", "sighting--5c420a16-5b31-4f51-9260-f2e4647c8274", "sighting--17b252f9-2f92-4211-b02f-c215d869fec9", "sighting--7a4393fa-8def-4c2d-b704-13e44962dfb9", "sighting--4cefbd47-e9cc-4e57-86fc-89f2da02d2d6", "sighting--14d4b5e2-91f2-4330-a2ed-e3d1bb9e8a2e", "sighting--3f9ec411-1420-4d9b-b55c-06a44e9bb6ff", "sighting--e047dd47-aa90-40d4-a5e6-5470111bb970", "sighting--3fe9e4fd-9ad0-4010-a4a2-a1eca898cbd8", "sighting--99e499a9-2e0e-40e4-ad3f-a57fed4f7724", "sighting--2c990d9f-fdb1-4c99-b4ab-d29b57e41384", "sighting--387d0266-c72a-4d98-a2b4-4b3196d72e72", "sighting--67d14c09-85cb-41e8-9eee-0d2458b937d2", "sighting--302135d5-e889-49cd-97c5-db901d313aae", "sighting--7a73c8d0-bdf9-4618-8f8a-1a149388e9ef", "sighting--26c50844-e0f2-4ded-9ced-01258ffb59f1", "sighting--880d3161-1843-49f0-b1ed-0c8b749995af", "sighting--259dc7a4-707f-48d6-83c7-03ddc1440aad", "sighting--6dcd4507-102b-470f-b762-3ce38f360c42", "sighting--371b6b07-7c4c-4431-a44b-a0b9bacc31ab", "sighting--370cf0df-2a7a-4f20-8e4d-b312b1728775", "sighting--21d55589-d18e-48e2-8012-c4f16fbadeed", "sighting--b70ecf50-726f-4c44-b619-67ab086ee5c4", "sighting--48babcde-ed8e-439b-bd27-b399873f6ec0", "sighting--d6208aab-b955-478d-a21f-a606e6fc2b7f", "sighting--629a1051-03f4-47c0-a3ef-8f0f7341ce17", "sighting--0106e770-0c04-4125-9b21-45a0803521f1", "sighting--d9f803d7-65d3-4622-8096-c04417752900", "sighting--5d1d3794-3b14-4e61-ab89-1fa3bf003a55", "sighting--845c59b2-8e47-4078-9b45-fcecd76c6cfe", "sighting--080dd3bb-0506-4bf3-8ce1-a750002ded34", "sighting--07817dbb-4bfc-43da-91a8-c2e35ac627b3", "sighting--aa9f8167-9ecc-43d6-ba5c-d84e8a2a4c46", "sighting--41811d9a-93ff-4a4e-afa0-c602844997a8", "sighting--dd5db19c-4613-4435-9461-2bf74f512291", "sighting--e61dabc3-899c-4c2a-9c8e-be24d2f4cdd8", "sighting--5c7a90fc-f1fd-4e63-b65a-37f5cae1fd3b", "sighting--ae9108cd-e899-49a2-bb82-30681f2e8511", "sighting--53071bb9-850e-4bda-a9b2-410f017fd3df", "sighting--a550ecce-f1bb-400b-b3ce-19c7c7b84ae0", "sighting--a17635a6-c0e8-4718-a04f-b34a2f2646ea", "sighting--89d480c3-3513-4c0b-be1a-9d991514d8e8", "sighting--a617bce6-1356-4020-8beb-539502d9578f", "sighting--f436081f-617c-4d9a-8c36-2d3bdfb0da9a", "sighting--1494462a-7676-4c4e-9660-1c1c0a7504f2", "sighting--0579ad3c-34a3-41d0-a947-02fea9148f0b", "sighting--537581e4-7aa1-4d0d-a5c4-1d4494ad3848", "sighting--fd862e69-89ae-435d-a90b-768780edfa84", "sighting--a5e17724-c855-4b8e-983f-4fe385940224", "sighting--e9b3343a-456e-468f-bd50-9f841b5f7e37", "sighting--f3e05588-9f70-4a35-b438-8829ff2f3850", "sighting--d9314889-2fb2-43c6-987c-efd3b683b442", "sighting--739f1409-5e72-4e36-a7f8-ed4a9662e475", "sighting--436537ba-e00a-4674-9007-ec4be82cf7fe", "sighting--2fa9035c-1168-483c-92c6-13bd0ebe2215", "sighting--4327affa-79bc-4ceb-bbef-497e205a9c28", "sighting--412e7d8e-c14b-4590-9f0b-2d59ce4ffe59", "sighting--12b039cd-65ca-46b1-b718-0ecc2962d297", "sighting--4ac73919-89c9-4bd3-b2cd-654ab49491ce", "sighting--1804fd2f-6142-40d2-adf5-f7118d897795", "sighting--550b286e-d3dd-4032-b8e8-ce3fae7a5397", "sighting--06664192-c5ca-4b15-b181-2fbc749e4028", "sighting--17928747-e490-4304-9418-50da4bd93aa6", "sighting--e1f74d2f-1696-4f18-9ffc-c9c30c36de46", "sighting--3602fe8a-6c1a-4d6a-a3f3-200d0f85fbec", "sighting--150920d0-1175-4199-8918-c1180abb1a70", "sighting--29de8283-30a9-4fa3-93d0-90a735283c85", "sighting--85df4d9e-d211-40e0-b445-d7a34c29bad2", "sighting--be0b35e2-b08d-470a-a286-bffb2a4fab68", "sighting--7acd0314-50c0-4b12-8f22-376e7646623e", "sighting--01802735-b01c-42f4-a7bd-2a8fb38a7f3e", "sighting--f88ac252-11de-46ac-a152-bab765403417", "sighting--9ef052cb-3269-4c42-b0a9-0d7bbb23a6bd", "sighting--2701020d-138d-43a3-8ff5-f2ede1fe6a15", "sighting--c9636917-9bf7-48f3-b05f-cb05f193c00a", "sighting--be8744bc-2665-4f9f-bd48-3b84ebc00685", "sighting--0f92e978-a603-4f6d-aa20-7e5fc0e7ffc6", "sighting--367236aa-226a-44ec-800a-3a1ed602a198", "sighting--b07423bb-0c7e-4d88-8feb-0122c29c7ff2", "sighting--c877e29b-204b-42f9-8c65-25921b048817", "sighting--1dbf74a2-7245-4d9c-989e-4322c68eb04c", "sighting--f1ed2bcb-b2a5-4a0f-91b9-3abab5a31885", "sighting--a26bc50a-4195-4896-8600-cd7f9067e046", "sighting--ef7b2eb6-dbd8-4ffc-a5b8-b343b48b7a29", "sighting--d201cb9f-a6f7-40a6-b257-450385816f94", "sighting--59577b94-6df8-4bd2-82a9-78e6832b85f1", "sighting--8da2036b-f166-49b8-9e4d-2fe3fc831da3", "sighting--cc741591-77f9-4492-8dd0-bb591c6bf579", "sighting--f43df76b-06d9-4c2f-bd5c-a9e954fed9d4", "sighting--2dec9d93-c9de-4e1e-b54a-e8cbd05ffaa7", "sighting--227aad50-8050-4bf7-bfde-59754f8c2a74", "sighting--ca5a63a6-5d4d-457e-8d82-a65eb48b37d0", "sighting--a2405ada-9adb-4d70-8d4c-632960a7ca50", "sighting--aab61f6d-7d34-4b39-beeb-7372056e0f48", "sighting--2d0dde1c-d664-4955-83e7-513975194f62", "sighting--c1d65e10-ce25-4f2f-bca9-24cf8750226d", "sighting--6041f0db-a910-448e-b930-aec751f3526c", "sighting--75f6d6af-90cc-4b3b-ae9b-1f27099af56f", "sighting--57aa3aab-0189-4cb7-b796-91a2723ef9d4", "sighting--22fee2a8-ec0e-483b-81e2-f9b4b28254c7", "sighting--96c27816-302a-42c3-a633-f9523183c32a", "sighting--96229b47-a6cb-40f1-aad8-ace4fd53698d", "sighting--c335a511-3200-4b5a-9739-72764832f030", "sighting--a158fe42-5f54-437c-a546-50548c7038ab", "sighting--487c19fe-fc6c-4f51-8ad5-2bee461aa370", "sighting--66554d76-099d-496f-889b-bcc67d93e066", "sighting--987ceb0a-0916-4049-9a01-581b4d671f1b", "sighting--15322b65-b0e4-4b00-a5f4-fffbc66f92cb", "sighting--edbe0fc4-67a5-445f-985e-5136d866c916", "sighting--8a80dd2b-9d64-41f0-bc29-e62b0732eb66", "sighting--69ab0aa8-d973-4352-a8f9-395ebefd9b9a", "sighting--e95a0666-e6fa-4bfb-93fc-72cb7f390cec", "sighting--8a4e14c8-e162-4e80-b210-8ffaffd81012", "sighting--a7026a41-7cc1-403a-8e82-dfbe5c9c6a88", "sighting--9b9f953a-b1bf-478e-bca2-0d7b5ae9a447", "sighting--353e409e-db09-4527-978e-bed9b9275633", "sighting--35b26445-be0b-457f-a60a-c8bb404bf91e", "sighting--b3cc3b0a-abc2-4153-90db-c1bfe37284a0", "sighting--7243255f-bfcc-4652-8930-747b46a5b99d", "sighting--7e454d47-e506-4e5e-8804-05bbee9d4c74", "sighting--eb2c7c4a-338a-4971-9ff1-b018c3f51861", "sighting--2fb9b65d-627c-4309-9f50-0331d20f90c6", "sighting--31a456da-0176-472f-ae26-95e667926990", "sighting--3c2add75-3c31-4999-9de1-f28f0b35fefb", "sighting--bed36a62-fa10-4406-932a-d1211a0dcc7a", "sighting--007ae749-7152-464b-967d-e2b5b34fc38e", "sighting--62107ae5-d907-47af-8b2d-708ff515c01d", "sighting--a481ec41-ca8b-4d2d-99be-7394afab4fe9", "sighting--d1722707-9505-441a-8c2e-32a8836a2f00", "sighting--ec0f989d-49d1-438d-a26f-8d9a380dcd3d", "sighting--e30152ac-5062-4428-924c-b63a0dfc1e14", "sighting--20a1a580-d075-4d7f-ab80-378c03c760d1", "sighting--801f2b14-18fe-4f94-a1fe-36d38baa2ec0", "sighting--c2f66b75-02a1-475d-80f4-4bab1ed18080", "sighting--a51c3217-0551-4b0a-99a4-3e255220bd2a", "sighting--8ff6712d-218b-4dea-a425-d2a4b2c77630", "sighting--1af73afc-1f0d-4268-a086-98f9b06a72fb", "sighting--486da448-1e05-4f9c-8513-eb918dd7cab5", "sighting--c860bfbe-43bf-4973-bf6d-b273d1ecd9a7", "sighting--2414c5b0-5baa-4517-8e70-f9ef005e073b", "sighting--103a5433-2902-4ff6-bd5e-30dd552d9668", "sighting--5f3c5ad8-ded4-4ad5-9ea7-052eb47be446", "sighting--77a2e4b4-f06d-47f2-a7a6-8f027a52e7f3", "sighting--623a0e49-924c-4159-a2d3-73d435c96f1d", "sighting--7b329050-50aa-4d5f-8151-297352abd171", "sighting--79703df2-007b-4e16-ac76-075fcb55e3d8", "sighting--232b5359-8ff0-4877-b725-8397fba8d180", "sighting--6f8e0c48-5d78-4a23-a922-1f3d8bd98850", "sighting--051da669-95ed-42e8-9433-afdf63821a2b", "sighting--a7c23e4b-19b1-4241-b465-b605c8d76954", "sighting--c60511c5-5a24-4ea6-a44c-a84acaf21e09", "sighting--7ab18ac1-1c76-4cca-9d13-10d3f7e00af3", "sighting--2b82584d-cdf6-4f3d-8be8-2a51f2f25830", "sighting--2d254bc8-fa8a-4eab-ac25-7db814a42ad7", "sighting--bcb5e550-a585-4edd-9be1-63502e1160ce", "sighting--798c7f12-9164-4577-9b9b-653a300f544b", "sighting--98fa02da-9bce-4058-a159-cf70ab8c3ea8", "sighting--b4afb0ad-5120-480a-95ec-aa4d382554fc", "sighting--e9c5ed36-90cb-42c5-811a-f8ec12d41a3b", "sighting--9162c6b4-9fd3-44b9-888e-ad7e69cc460e", "sighting--8dc92f62-85a7-4cf0-816f-f41869e8b5a0", "sighting--29af84f8-fcc0-45af-93aa-46c857081922", "sighting--222b3617-49d6-4693-ab8c-2ebc244fdbb7", "sighting--2d268597-3d00-4299-8a14-bbff8a72af9b", "sighting--512a7a9a-083e-46ed-8e63-114ec9089af8", "sighting--f8193d71-d9a0-4c3d-97a7-a97e79a5e8c9", "sighting--5189e5fa-29b2-48ee-8a64-6cb721f946ae", "sighting--719d4f82-3175-40ab-b992-592831ebb46e", "sighting--b2ac1142-5985-47eb-9396-4d80fb279d29", "sighting--d81625e3-5070-4543-a63a-b304a03b316c", "sighting--b56cdfd2-aaae-4812-82ad-535c6a747d9f", "sighting--32f8e4d4-a67d-4c3d-90bc-c59f3ce1ac22", "sighting--a0c6331a-74e8-4f81-ab90-811a2b2b6e8d", "sighting--4c1ebd26-9918-4b7a-b5af-fede10dfa055", "sighting--0570daba-6ec8-4576-8d9e-81ebc0dfb8e7", "sighting--ca0ba828-4c1a-4e0d-bd6b-5268d5cf3267", "sighting--92277a86-8bdf-4ce8-a3ed-e0e56d469140", "sighting--ea9adc41-510d-40d7-a7bd-368a6bbc06e4", "sighting--b699aa87-7fab-4b88-86dd-e827692422aa", "sighting--98a86d9d-d71e-40cf-860b-2acbd5f28b69", "sighting--ff9d2133-66ef-41c7-be90-4eb98fbc49a6", "sighting--18e056f3-cc49-4c94-9c2d-2e92c2501121", "sighting--ca8d7df4-084a-4427-a523-f3213de8a67e", "sighting--cbd0d27e-3fbc-4648-9817-adecb89faec4", "sighting--73ae7bb0-c3d6-495c-9240-01b6b932c42b", "sighting--beba3172-0255-4d44-ac69-f2706dbf3add", "sighting--588ebf7e-264c-4ffe-a5ba-ca661426111c", "sighting--2dfadcd9-a81c-4fae-9ca4-e7bb1d8ebe9f", "sighting--63201de2-0bc0-4265-9972-3da83ee4eba8", "sighting--8cf3dd22-05b2-4f6a-87fa-6abe8ddf234d", "sighting--453ea7d2-2971-486d-9267-da8c9e34268e", "sighting--9a17c9c8-66f9-41d9-bdf7-5984256a1348", "sighting--0a9e89fb-f547-4852-8b59-554ca3bb0b0b", "sighting--aff3f5bc-6c5e-487f-be90-2a5701414af6", "sighting--00823225-2e92-4516-9068-dcbe6963a514", "sighting--152ec539-46d2-42dd-b8d7-4c6e362f09ef", "sighting--3062150f-948c-4b18-9783-d4197e2f2604", "sighting--89b7c5d8-17d7-4702-9bf1-111177d08376", "sighting--10e3c1e7-76e4-4969-b902-b263d713cd6a", "sighting--2939cf31-bcc8-4f08-aefc-4d8f074ab853", "sighting--fa7a2ff5-0064-4eaf-9179-a6f4e18cfc1c", "sighting--88e69623-8ece-4a9a-a17c-2d11fa10690d", "sighting--1bf2a7d8-1bac-4bfa-b23f-ad7049259226", "sighting--f31cf8a9-5520-4e96-a2a0-494a76c811d4", "sighting--7fda82a0-9a47-4cda-8851-ee9dccb776e3", "sighting--4bf36f70-29f5-4644-b26d-a276b240d0b1", "sighting--0ed40012-1a26-4e49-af35-d2f8593c9163", "sighting--5a66bb3a-8259-46cc-807b-f8f3dedfc8d6", "sighting--9f6829cc-555f-4790-a804-b79a3b492ad4", "sighting--adbfdf4e-4ce2-4410-8acc-559774e4d0bc", "sighting--9401e472-86d5-47b8-bb6d-55bff692cc06", "sighting--cc6befa8-2d02-47c6-b48b-926d6261e96f", "sighting--1a1826bc-3afe-4630-9641-0c1ad443172a", "sighting--510c32f6-3c29-46c7-9170-f315505b33e4", "sighting--8abbcff4-4f9c-4e3b-a463-e66e42dbac7a", "sighting--b9ebcb68-ac7e-4ad3-b245-1e32374a1c92", "sighting--e5f2493f-e6ba-4e80-bf8f-c87de731c575", "sighting--5f453648-b72e-46d6-b8b2-170e3a1982f5", "sighting--1f3a0cb9-3767-4824-a9c4-52845524a521", "sighting--01602e99-dd38-4c0e-b513-6c9f15142438", "sighting--a876e766-4c9f-4ace-a6bf-5c10a88ae11a", "sighting--73ce8ad5-226c-4922-82fa-27a1f78beb35", "sighting--efce19ac-657f-4000-9abb-a413579b6bcc", "sighting--d181bdb6-2e26-4a93-81e6-a7bba3b9c242", "sighting--df4e7723-0f09-441f-92ec-b1222d63f400", "sighting--37af412d-5a2c-406a-b4ba-dcaaa18634f1", "sighting--aaf10ca9-9dc1-4192-8081-fd315170f19b", "sighting--ec7a1663-0f89-4b4b-86a3-8c0027c6d042", "sighting--9fa017a8-3107-498e-b7bc-43580a50cf10", "sighting--18c9e5fb-a4e9-4b45-bc0c-856a1e9d07fa", "sighting--e94b4eb5-8f07-406a-b6f3-b150419ffbc9", "sighting--822fcb09-b559-4714-ba80-a4c291673005", "sighting--c1f5c647-e279-4b62-b41b-8e79425c5d19", "sighting--b30b7b5c-75fa-4501-8470-5682dc34ba8b", "sighting--70e02fdd-470a-434c-8849-50a10ded5181", "sighting--9ee5c36b-b80a-49c5-ab06-5c5fa9654c9c", "sighting--2a16cf6f-fc1e-4323-b650-a7ee2f184006", "sighting--412cd9cf-ac7f-4bbe-ada4-3c8019e7b27d", "sighting--cff09a6d-f6fd-4d0d-89a0-fe4599b7ede6", "sighting--689a17d7-98fe-4958-aaf7-3cde4217c067", "sighting--cf0c8fbf-24ab-4b46-a097-7f506ffe3815", "sighting--be231ca0-94ae-4b6d-8abb-ac6584df749c", "sighting--c3693293-d38c-4426-a5f2-67d5aab402df", "sighting--461e7d5c-479b-4956-b79c-a8c168bb8534", "sighting--766c737c-6c94-4c4a-969c-a3c8550abf99", "sighting--804941b4-e62b-4b5d-9a39-c2d556639887", "sighting--2fb41a5b-f557-4698-878b-87420adf7bc1", "sighting--5e7693ec-8f51-47f0-b6f6-72f6d7a27cae", "sighting--4d6c73c5-a2d4-4cf3-b437-380805ab93da", "sighting--3d9e6d70-83c5-41b7-96d6-e981f4a7dd32", "sighting--f26aacd6-be8d-4db1-a633-67cd7300ad70", "sighting--a51dd5b0-d025-4705-b9ba-d2e66b0f85f8", "sighting--bb2eae40-b98d-4a95-b236-9b225c604338", "sighting--fddb93a1-7c1a-4e70-ac9f-6b2a42e591d0", "sighting--5d8dafbc-dca6-4aec-b6a2-30a4456b471e", "sighting--65623142-1087-4fa4-aec7-21d906f4cf33", "sighting--01493064-ca55-40a6-8b66-a07e4ff5921c", "sighting--64185d83-25cd-4c20-8187-3335087c7a26", "sighting--233c993a-5d35-4bc9-8c4b-1bccf25c31e5", "sighting--16d0bf50-876c-4f7b-8651-995e6b9985f7", "sighting--dcc5e3c2-84e0-4d4c-8c97-0cbf54b84c92", "sighting--6247f77e-bd83-4692-bf62-cc0818fa9c8f", "sighting--62dc9586-773a-485e-b0cd-717e50aecd90", "sighting--42983ee1-58e1-40f4-9c85-bc5e951e9b9f", "sighting--139c05f0-9643-48da-b38f-e6003506687f", "sighting--2ce8f5d2-9092-4ba6-9a55-9447a619057b", "sighting--98434bfd-3d70-4075-980d-67243f9cb4cd", "sighting--ed8daabe-eca0-4114-b633-620f7be1af4c", "sighting--781b37cc-95c4-4d89-aea1-b4e3d746a6a9", "sighting--69e7579c-fc8b-409a-898d-4e8ffa9365ad", "sighting--d2c39ed9-c548-4bf3-99fe-fbabce1a6afe", "sighting--b61e2889-c048-4999-adae-378a2ee74cf1", "sighting--fa97e993-ff98-4ff2-80bc-4eff92206181", "sighting--0df6922c-3d57-4f84-95c2-6a5a2e0779e2", "sighting--2bc190ff-916e-4ed2-88a0-2b4175ebc644", "sighting--863254a2-9ae2-4962-8724-f51d59e4d32e", "sighting--368116ae-4d9e-4c9a-ba60-4e8fa9a9f6d9", "sighting--7185f8e3-6c3f-4038-a212-2f5b2f6fe596", "sighting--21db82bc-5a21-4d58-bcb1-550f70ef1c8c", "sighting--54c876c8-2070-4e97-8499-437862c3893b", "sighting--a92ef68d-4d3f-4b90-903f-0c723bfd9f0a", "sighting--1917a79a-3d94-488f-b9da-27644ff297a6", "sighting--3538aa6a-5992-47f6-a7d3-d27315840146", "sighting--80ab4143-3ace-4c5b-a406-82cf309ff468", "sighting--a64c759a-003c-438a-94dd-787393767705", "sighting--7d93603a-0af8-4f83-832e-49cd7665ffb6", "sighting--f3eda515-76b5-4ccb-8612-2b73bf07f120", "sighting--87b3d438-5592-446b-92a2-c8a5ee4a7231", "sighting--06765f9a-d000-4ed5-bc51-40cec194ac62", "sighting--8ce60ecb-1272-4c70-b067-8e0517c49386", "sighting--7baddd52-352e-426d-8516-c76da64405c2", "sighting--b954be4b-7155-48b6-b82e-bfbb5a2bfeea", "sighting--60afb147-243a-459d-b59a-92a2e1e4eb36", "sighting--0eda5fdc-17eb-40eb-8e76-d07794113d0e", "sighting--791b3862-2454-4e06-8fe1-354b59f00f48", "sighting--bbcd09d5-3138-42bb-83ab-3f6f347f8394", "sighting--b186f5b4-815c-48de-87a1-97af032bb6a7", "sighting--b1c6a0c9-31c4-437e-b55b-572a2e3612ab", "sighting--e17c1324-d54f-4c04-831f-1655f6fa0122", "sighting--c81a8538-f106-42af-b2dc-3ac5a5cd6a1b", "sighting--e0074b31-9283-4047-a6e0-53b83587f253", "sighting--8377985f-377f-4c13-b632-39340c999b6a", "sighting--8010ff1d-2f35-4ab9-9ab1-42b7e9066349", "sighting--664ae5c2-aaff-43db-9061-bcfa8b4c2d7b", "sighting--de203cab-3d13-4299-8ef9-ed12beb13113", "sighting--ae907ea9-25a3-4f1b-aaaa-8bc4d6939d2f", "sighting--9be5e16d-b645-4bbd-94a4-7d696ec999f5", "sighting--82751669-402d-49c4-97e1-81034e375972", "sighting--faa371c7-7119-4038-ba34-d9ad3284c744", "sighting--3f527ed5-0c15-4326-b79d-ae03674ddf3c", "sighting--85ab0f95-197d-4c43-b079-6f71abe163bc", "sighting--b73a6643-9c7b-415f-8e0b-263cfbd5ffd9", "sighting--1d31633b-7056-4047-b842-b222ea423aab", "sighting--7eac917d-9e66-485f-a62e-8d97ad4e54fa", "sighting--d4ce0579-13de-44c8-b61b-61bf706b9cac", "sighting--3768b646-9ccb-4618-87bc-af72d0d80c20", "sighting--796fcd47-9f78-443d-b1f5-7efae42edf07", "sighting--ef479d4d-1eb9-4368-94e6-51f5364ff959", "sighting--63b15b8a-5fe1-4393-b2e2-c5cbb5154f08", "sighting--0a607f54-8f41-4366-8769-26eb4297a252", "sighting--a20c370a-2ea8-4206-9e80-9ec84a439559", "sighting--c8f92017-74a8-4e25-92bb-51d0ce08c798", "sighting--242793c1-da62-4a13-9703-c9e79cae19a3", "sighting--18376844-ac79-452b-a648-38a1f1bcf397", "sighting--4a7fb6b8-5692-4a38-9e5c-52f398a3d93d", "sighting--abf1321e-cafd-4f3a-8487-bc4dfbfc80cd", "sighting--13c1f990-2ec6-4cf9-9ecd-9a1c8c486e6b", "sighting--6fcd6888-47c7-4e1e-8538-eb317ff1f599", "sighting--66b0eff9-04ec-4d90-8096-4c4241405c4c", "sighting--e73057d7-08d1-49f9-bf8e-d85538ce36b9", "sighting--32bd64f1-330d-4b88-a9c6-276a7962514f", "sighting--eaea5fd7-219b-4270-b75f-b78d1099bfcd", "sighting--9009582e-379e-4e16-a710-a5dc76736eb0", "sighting--e1142132-780f-4a27-926d-e2eb9cb980d8", "sighting--0205b26e-d776-41a2-8bd1-cbe8749ef47c", "sighting--ffab233c-e582-42c7-a181-03ecaf9b23e7", "sighting--d253c865-7746-4116-94a0-b32c21448350", "sighting--27be32dd-882c-4c89-9d9b-fcddb16da6d5", "sighting--68a24bbf-06e6-47a9-be5b-e81acc2197e8", "sighting--6de43550-1ad9-4d68-a14a-87080dfeba14", "sighting--21dd4f4a-4d87-4478-8823-78d36d7ebe5c", "sighting--6513f577-b107-4ae6-92d0-3373c218972b", "sighting--16c5e079-2cdf-4bcd-8083-4e591bd207db", "sighting--dec2995f-2aeb-46a9-b1d5-7282b4084e3d", "sighting--f17add56-1e83-42f7-987b-310055e09484", "sighting--50470191-66b2-41cf-a91f-05e0d0b3ffee", "sighting--17019eb9-0ba3-4302-9f4c-6524cce38497", "sighting--8065184d-032e-4580-8e98-485b2547b361", "sighting--684e43b3-bd6a-4f5f-ad1f-1e0d192c9640", "sighting--f2c23cee-39e8-4858-a50b-b21ec4e14112", "sighting--37b55b94-3803-466e-ac06-cdb04f54205f", "sighting--bd870b24-c2cb-49f9-b701-83984ed111b8", "sighting--92690b3b-45d9-4319-9441-d2a094eed273", "sighting--2ce73e0e-71e9-4ff3-8156-f3a2a365e877", "sighting--5363e29d-719a-4af5-9ed8-f90e5533c134", "sighting--35ccbd78-3035-4e3e-b7c7-81346bb9fdc5", "sighting--446be905-40c8-4cd6-b67a-37095e9eedfd", "sighting--e2f805c0-6ae1-41f0-acdb-3ef60f1900da", "sighting--5ed8a91f-c675-43ee-952a-bdab9fef069f", "sighting--eb38bf66-2575-4349-af4c-6d4ab10c6e51", "sighting--bbc0066d-4ced-4a50-a44b-f380687aa8ed", "sighting--1a964a2b-45ff-48a7-b752-22ae1b76ec5b", "sighting--600dbb96-dd38-4003-9e02-7e10fa25f401", "sighting--4092a05b-c765-44b6-b744-437c8e2a9868", "sighting--4c9e2037-a20a-4b2e-9560-f21edea72fb0", "sighting--debb392e-178c-40a2-830a-4f6ccd208c16", "sighting--b8f499c3-d9a8-406b-bac1-1c5a7898601a", "sighting--8dd4e06a-46b2-448c-93da-1d6784f717f1", "sighting--60036255-1770-4c27-9019-67b3e68bd4d9", "sighting--fcd29db7-e7d9-4160-bae9-7e899f5fa2cc", "sighting--8b91d6b3-55e3-48ab-ad8b-80fb3ccfcb61", "sighting--859b8c6c-bc48-4f63-98c5-ce1f68cd5e3b", "sighting--33209e1f-096f-4cce-a1d8-3693e9e7f728", "sighting--a84d6bc3-e0a2-4795-a041-7d1e1429e3b5", "sighting--84bde8a5-1843-4a14-aa4a-32858afa153f", "sighting--720895b3-d5b0-468f-93d0-310aafc8d9f1", "sighting--53b29b50-9c8b-4eb2-b18e-f8f34423773e", "sighting--8b3782b1-e6ac-4609-9070-f21b030f2227", "sighting--4572861b-2e5a-47f0-b520-b0f164558b21", "sighting--7985eb16-3e7f-4d34-afe1-63264f77754f", "sighting--c340848c-8b36-4451-9584-8f1724f50a36", "sighting--783ee78f-6b0d-41b0-923f-b9f9092dbb24", "sighting--b9f26c7c-2dd3-4013-bb12-51259fd147c3", "sighting--72d015df-4288-4f06-9a7b-654422aec1ca", "sighting--586fa793-6c17-4a51-b9b6-95066c39de95", "sighting--29f3cd1b-e652-446a-b6d6-47c4aa6aaf22", "sighting--5004c348-2a65-4891-8655-2994978108ed", "sighting--a0ed5d06-5e15-44be-ab37-500c30b42abd", "sighting--1a0d3923-c180-4d98-b301-e535ca217c65", "sighting--8c315fc9-a92f-4a23-ba16-c345e9db7271", "sighting--5eba72fe-f67c-4a78-a436-7bc6063864cf", "sighting--ed39b7a4-26b6-4bb3-8929-24ce923ea4b8", "sighting--8761b1d1-78b3-4870-ae2a-7273352c43f2", "sighting--f9bcd0f4-4aef-48b5-a34d-a9e7e9e1aafb", "sighting--fc2ebbe3-79f5-485c-b7c0-326e5cb98743", "sighting--5c47d611-d3e7-43e5-bd90-cf6d9a1806ac", "sighting--e9c195df-d228-403b-8bb5-bd4df6ac4bed", "sighting--7de033e9-9257-48f4-af94-ead6fbaa34f1", "sighting--2b2ad0ed-983e-456b-86fc-fbc2af864405", "sighting--75e9c60b-de19-4b84-96cf-a6946014daa1", "sighting--24ec155a-e3df-4b97-b683-714990214e0a", "sighting--07d53669-2812-42f1-9ed4-e1204f62665a", "sighting--40344d46-b6dd-44d5-8ed4-1e9c4f5f5b29", "sighting--747fcfab-42fa-4ae2-96af-4b50c85967b1", "sighting--22920bc7-5cac-473d-a913-1774c91ec682", "sighting--51b0c24a-c0c8-4fb7-aa31-879e4aa9d20c", "sighting--0ee64797-d710-4154-a993-1d938b40c07f", "sighting--1f1a2f06-a3d2-44a4-bc6f-67d0577a9332", "sighting--5428b19c-8cac-4837-9762-6dd131b7bee5", "sighting--0f3cddb5-0d14-4baa-97e9-2eb84cd4f197", "sighting--eb045617-bd62-48ae-8904-f0bee3596775", "sighting--5c47a8bd-e809-4a77-b964-3c575792d908", "sighting--7a812df6-9624-4c57-80e3-b5115f67dcba", "sighting--7d2caeb4-fd4d-4ce3-b5db-05091f365fe4", "sighting--ab7b158c-feef-4aca-b991-b9b7d0e66fb6", "sighting--70cf7339-08ac-4fd6-a740-c19ab4917d47", "sighting--56ffcba5-ca77-42a3-b78b-d5e9d6a901d1", "sighting--a071ae03-7f60-4457-ab2e-7e87af061653", "sighting--95952153-d9d5-47d1-882e-89c5b06bebe9", "sighting--43d88540-d37c-4230-817e-fe4f14503e63", "sighting--3dcbc4fe-13d7-47bd-bbbe-cb384c060166", "sighting--d1017216-583f-4b4d-99cc-99ec693a3b08", "sighting--37d1da10-13f3-4d12-ad0a-c931dce6cd87", "sighting--2d29c6df-e961-4f7f-aaef-154701bc753e", "sighting--c06d6bfa-ba4a-4066-8183-71db31cd6a15", "sighting--e5f271ad-1078-40ec-ac40-14cd8bf28533", "sighting--4c48d4e0-03c4-4e19-b946-ff9d567ae2fa", "sighting--e4a14c6a-7235-4fc5-adae-4c643edb012e", "sighting--5a0c0a84-1cc9-48e5-accd-1fa65e832c86", "sighting--8a1922a9-b7be-4f06-a529-44a5c238ee40", "sighting--854ea267-66e1-4d83-8451-3ed8eb0fac0e", "sighting--abfd8978-854f-46b1-bfd8-b31886d9b822", "sighting--a96823db-0e63-4df9-a95a-f004b3bb9d19", "sighting--e8c80575-ecdc-48b4-a9ea-a00310df0565", "sighting--30a4b9cd-0a79-4d29-a2b6-6c2b812d4a40", "sighting--d2edf541-4977-46e8-ace4-477c11a0ac92", "sighting--dc264f0f-db8b-4c81-8096-b0b554b31d35", "sighting--40c93001-9449-422f-ad51-acef2d0c4d59", "sighting--f2b6f91d-dd5e-4a90-9e9e-3b339a0cd48c", "sighting--446a3636-a510-4a35-9b2e-97259473a3f1", "sighting--8e6d42a6-53d0-4e5e-94ff-68535c7e0c56", "sighting--416a6825-adf4-458a-b1a3-7195078ff5b7", "sighting--9bf6c2a4-74ee-48ce-bb06-eb7ed8187a36", "sighting--33214775-8446-4afd-9424-a6223a7e58dd", "sighting--c7fda039-8888-4526-906f-81ef32ea945b", "sighting--7952ac6c-b3d0-473f-909e-da3c5eab8d63", "sighting--75af0f98-f48a-4c11-97a4-ed80a111d54b", "sighting--04e857bd-9e93-4e1e-b4d2-f3559f035a32", "sighting--970f39ed-7501-491b-b50f-36b488adac8c", "sighting--8e81fc7a-afc6-4c60-b6a8-36bb27d3a273", "sighting--7e402a20-b57c-46e6-8e79-fd6006284e56", "sighting--8037046a-2c6d-4c55-a8c2-7916951a276f", "sighting--2865e1eb-2382-489a-a7fe-43ca7e1b1a3a", "sighting--0a202c24-e6fa-4ddb-a3e3-3baf1b13c728", "sighting--d9d43eb9-d69d-4fb1-9357-4123773883d4", "sighting--aa281922-5d3f-434a-9928-5970385aa0c6", "sighting--bd8f9adb-5cd0-4e4c-a43a-65c4c3adf6b9", "sighting--b5ff2a66-a402-4e2f-875e-cd8341451185", "sighting--654154e1-2d42-428c-864c-1c554f14c77e", "sighting--110d3089-e1a2-4dbf-acec-0e26a5d7538c", "sighting--7fd4ecb9-905a-4a64-8e41-0bb952d0e0a1", "sighting--1f97b863-78a0-4257-94b4-cedbaac1267f", "sighting--969cb3d1-8af6-4ccf-b79c-8121bddd5c13", "sighting--ada38a54-bef0-4291-bc9e-9a98829c16ec", "sighting--2ee75b1f-f8f3-40de-901d-a40d94d2796c", "sighting--d4860c5f-f9b8-474b-8f2d-68d8bd9df812", "sighting--9dd9b401-4e68-48bf-909f-547d4f7d9d3f", "sighting--cf7cf5b4-afd0-4e05-ba58-8d6eeb836658", "sighting--0f57fc52-138c-4283-9ddd-b24a01c7aad4", "sighting--b1dc9c02-f08c-4847-933e-bd7d77244798", "sighting--4e19c817-cf92-4a85-903c-7e315c70c5b3", "sighting--f53c2738-339c-4aff-9d53-c016bdaaabcb", "sighting--f67a789e-66c0-4ff5-8a3e-6723840ce5d3", "sighting--1b39977f-2263-44e7-95f6-701866bfccc4", "sighting--7272bee6-71c7-44bc-90f3-242c9df72744", "sighting--7d27b6c0-197e-4a72-8410-7815faaaaba4", "sighting--2609ca1d-2acd-4fe5-b086-55f2b5d6766f", "sighting--3e10f45e-5828-48e4-a7d9-e92bfe481261", "sighting--61cc6753-bb97-44a6-87e7-ac4a1141eefa", "sighting--1fd74633-1c7d-405e-8889-9bff02760c1f", "sighting--cac24662-44bd-4fe5-b91d-494db1cd7584", "sighting--bfe529e5-d042-48b6-9006-bbf35ea29480", "sighting--97033fa3-b30c-4c84-80c9-a6c80d2cfb8b", "sighting--4ce66413-ac76-4273-a31a-1ff6eb097414", "sighting--da181371-81c3-42cc-aafe-3cbbc968c693", "sighting--50a54efa-7b10-4079-9833-31df2ee2be92", "sighting--e6d86d3f-88df-47d1-b0c2-5e28d12f2c91", "sighting--f7388865-d7d6-410b-af07-a4ce8b663387", "sighting--f37f0418-5727-49da-b86d-909d3139b04e", "sighting--b3438f6c-fe3c-40fe-a1f9-e37bb97f50fa", "sighting--353e382c-5a76-4752-ab5e-e578fc2ad9f4", "sighting--f047cd85-bc38-49c6-84d4-b1b01c044642", "sighting--fed0ce6d-faf2-4ba3-9d5c-7341d495e06d", "sighting--fffb0ebb-cd8f-43d3-9bed-ee4316496b5a", "sighting--bd3eec74-3b67-4303-8539-bcd56c340023", "sighting--b68773ec-358d-4bec-a3e9-beb6e733e7c1", "sighting--7a9204be-651d-4bb0-9e87-4fb075c578b9", "sighting--757c700d-da4d-4ec2-87ee-f19522a7be3d", "sighting--b8087de2-f160-4ce8-9b61-ca00aff173c7", "sighting--df538b3e-ff4a-4f9c-aec0-274dc02b5664", "sighting--e27a596b-6a14-4e5f-9760-3571741c7013", "sighting--aeb6f4e6-4452-4071-9766-d9671d1a5d52", "sighting--28107d66-b48a-457a-9e6d-d1be0016e476", "sighting--062dd77d-60aa-431b-b1f8-d977cee2eb02", "sighting--32def8d1-f43b-43c9-aef8-e84eafcb9b11", "sighting--3f5fcf03-aa5a-448d-9e33-a7dbdd914ecb", "sighting--aeb338db-ced5-4fd0-884f-bf01c2289a32", "sighting--be353320-3fd1-4133-ab2d-1de4404e6edb", "sighting--798a3b49-e75d-470d-9fcd-aeecc6a5483c", "sighting--5a906f72-990a-4cbe-8048-db3e5ec43bea", "sighting--6078f420-2d7b-4632-83ae-41363ee4c2c7", "sighting--8315bb98-98b3-4777-82e7-177e445736d8", "sighting--764cec7b-49d7-4ac5-bdb5-8873577b8a21", "sighting--1c7a6405-2ad8-4636-b10f-5b0d5a822f26", "sighting--1224d03a-f185-4fac-97f5-e4ce341fc52c", "sighting--1716a446-1aa1-4360-8dfd-249a1ecde8b4", "sighting--100b8662-8c5c-466a-a580-a1eded10177d", "sighting--db13286e-1d4c-4a5a-8871-05b649e9adca", "sighting--a2ee86c7-b308-4602-9529-d3e28fb5bb83", "sighting--6bc35d24-dcbd-405d-b4cf-a48c10d9159e", "sighting--9bb68cc7-9d17-40fc-9dd2-e5d87eb5f50a", "sighting--0e9a9c6c-d870-4b42-9bc4-949722f38728", "sighting--a17a6134-cd01-4cf4-9cd0-73bae196e984", "sighting--f1346c88-5728-44d4-9cc6-c14316689271", "sighting--95f00602-d8d4-4599-8f89-34db2684ef8b", "sighting--1fab5b75-f81b-4336-9e9a-0eadbbba4dbf", "sighting--7ee56c24-6ff7-4279-9b16-23da8c1c8298", "sighting--77b86d19-e673-4108-87eb-785688f63b1b", "sighting--5e92354e-10ba-45fc-8346-91ec7c9e241e", "sighting--aff096b6-4d7c-4e81-a165-75582afbb617", "sighting--403f1ac2-baa3-4142-9bf2-f543b53202e9", "sighting--0803a3a9-1738-4b73-87b3-8cf25a0aba8c", "sighting--7965321e-6894-40a7-b528-1e8b7bc9b5f1", "sighting--05a56e69-fe9a-4d77-a3a3-8e3440137e39", "sighting--c09bf4b3-7a82-4272-9a00-1c7e48e6267c", "sighting--0c610b04-063d-4103-a217-5d93f8e4d24f", "sighting--8fb11096-89e1-4812-a319-ff3563ae7e3b", "sighting--9f1fb8d6-934f-4241-b8a3-6859bc524d90", "sighting--1ccaf349-cc86-45cd-8f5f-18f612555de8", "sighting--6fbd5184-b412-40a0-880f-fa485de2f0d4", "sighting--993aae7e-7d69-45c7-b315-b0f81152e2ef", "sighting--275cd9d4-abb7-4be6-a755-d964dd74480d", "sighting--1ba8eebe-4415-4095-9fb8-60b139db3133", "sighting--ab28f9c2-955d-43d6-acc4-fe0ca7f2d045", "sighting--4c1c8800-71d6-456e-beaa-bc9f11e9686a", "sighting--fa6c71bf-bcd4-4d86-92c0-f3ddf874e614", "sighting--3ca575e3-59be-429e-a6e0-e5d28557f6e7", "sighting--ed47e208-a952-4c60-b779-bab331e6b91d", "sighting--8b1b1f3a-330d-450c-90f2-a74324600d9e", "sighting--693f7b4d-3069-46cd-bb58-58738bdce8be", "sighting--5484c624-d4d5-49fb-a21f-5e027bffdfd3", "sighting--28e075ca-6341-4586-a689-d435d7882dd3", "sighting--129d73b0-99d0-4647-a0b3-8b8f2b82f049", "sighting--97c63767-161e-49e5-97a7-90533c460c14", "sighting--96f39e17-3c85-4bea-99be-227b1eb4e93f", "sighting--228c7b48-a2bd-4636-8028-2ce76606b695", "sighting--99be140c-6352-40ae-bf88-57065ca5f280", "sighting--a69e0895-eedc-45a4-aed5-dfb63ad52302", "sighting--19c473be-68d9-4ff2-bc3f-3a5400c9b1cd", "sighting--062f8d49-82c3-40a5-9a9f-651af14190dd", "sighting--ea495145-2555-4c8f-bce9-427429c446e1", "sighting--02ca9796-0bc7-4349-b273-5130c9bc1f94", "sighting--760f4cae-b5f2-4436-9423-fa4a9a4ddd8f", "sighting--c0011b3a-3507-4e07-9670-28418f44c6a4", "sighting--040d8bf1-bc9e-4165-a4ff-7fec6fd370b9", "sighting--eb3efe97-2460-44ff-ab5e-4ab76bdb3511", "sighting--ceee214e-a44b-4e3a-a45f-29250d28d9d0", "sighting--b20cfa04-5f34-4da0-9ed2-00b4c78f5abe", "sighting--b4f29fe0-f286-4213-8745-679b26ec5316", "sighting--6f65f064-f92a-4752-90ba-d8ee25a4bac7", "sighting--7d4a5fb1-ad6d-4f20-b101-8492356c6997", "sighting--3bb5b491-3b7e-4841-87a5-3b19c161ee20", "sighting--9ff1a118-f355-4f35-9166-333bc01fbeb7", "sighting--0d1222af-19f6-4188-9f16-051634fe1873", "sighting--15c37cc3-4685-493f-8a8b-c875da5e0c4f", "sighting--dac0b092-c260-4068-ab00-485064d85d9d", "sighting--c15d6a39-a411-496d-8604-d716bbb90cd0", "sighting--bc3fb1f3-12d2-4aeb-8e9d-baf62edfaee3", "sighting--aa353106-c849-4e3c-8f1c-f6589c17501c", "sighting--9cb38b69-bdd2-4ae3-a0b2-d268efc9c1ab", "sighting--b741df67-a63a-4456-8030-088469e1694f", "sighting--1d3de03e-1faf-442b-ad42-4771b5092922", "sighting--893eaab2-37ef-47e0-a2be-6eef0b340a2c", "sighting--98b81674-977d-4999-a471-2953ddebd6fd", "sighting--7991f349-e7d0-4a99-8931-9e81654a7278", "sighting--0a94bab2-faf2-4cd0-a00a-4953cb9b4bd5", "sighting--de9d682b-75c7-486c-8263-87c1dbfdf835", "sighting--c7b3cb3d-91c7-4a56-81b0-d3594a382795", "sighting--0014b7aa-8b4d-415c-8912-efe53db6319c", "sighting--87bc3d7d-700d-4503-953e-ccd7e1d27a01", "sighting--edb56c92-509a-4a03-9d3d-143580e7c6be", "sighting--901cfd91-0349-4e21-af4c-f3d1f67298a8", "sighting--6d8a0a91-a531-43dc-a3b2-16e3a00a4968", "sighting--69cb318d-4fd5-4120-926d-8f8203045c9c", "sighting--18894935-c322-4b08-960d-7dcac1903dcb", "sighting--bed7f6d9-765c-4dac-a938-1a5fadd46799", "sighting--69583c2e-520e-4500-bcf3-84b341ba6058", "sighting--1121a7b6-6e20-4515-920e-9e6ca0dbdab0", "sighting--1c10c4f3-de40-4f1b-8ae6-0ce10ce35f18", "sighting--f6d610e5-8b9a-4984-b60b-e3b4dfe70e52", "sighting--89f259b9-d32e-4afc-8efa-dcb176422dd2", "sighting--f01da38c-7ca6-48c4-8499-429a7c11d0fb", "sighting--cfde0190-65c0-4702-b0d0-080142070db9", "sighting--2e3d534a-9b19-435c-8c94-6237a85e84f1", "sighting--18c32447-6219-42d0-ae54-123c8fb1c7a7", "sighting--a155ef3f-b144-4cbf-8fe7-4732405f5d93", "sighting--4f4d0a42-0040-489d-9d8d-31bf2910d630", "sighting--311966d8-ac99-46e4-ba45-19081052349f", "sighting--47d52bc6-99e4-47e5-851f-3080292cea9d", "sighting--35f51da9-0f37-4c86-bb30-1a2615d412f8", "sighting--78044094-b486-49d9-8cd5-acd623ec5d07", "sighting--9b110eda-7d47-4431-957e-37feca0d0c0c", "sighting--0e7c9638-85e2-451b-be67-b8724ee6a7ac", "sighting--94ebbad0-7f94-4222-9f4f-4b93d9945de2", "sighting--b4e98606-6629-455c-9145-e2862b56d9e7", "sighting--197b95c2-00d5-4042-822d-3f29c4afbba7", "sighting--10c8dd36-c925-44ea-85f8-6f8f0565b6a8", "sighting--45132c2a-5a50-4794-9895-8f0c6d67db33", "sighting--cd36ba65-b5cf-4384-8852-c95509ba7858", "sighting--1a646308-cebb-4611-b60e-f3705a725635", "sighting--e97b0cb0-16e9-4720-9c7c-98d05854f848", "sighting--04f39056-dcf0-41a5-95b1-4f2329879271", "sighting--116032a9-3563-4763-b0d6-0e022badfd2b", "sighting--3cd57c9f-10aa-49a9-88cb-37e94059e132", "sighting--6a61cbab-dea0-4b94-ba79-9529d6bc02fd", "sighting--c65caa1d-a62c-4b69-84df-4ee4199dc364", "sighting--bc6b25fc-2fc7-4046-b3a0-82a3cf51472e", "sighting--79490192-8905-43e0-8b6e-c80348eb8721", "sighting--1de84b29-5483-419c-91b7-8c85365ed6cf", "sighting--3912983e-3156-4dca-a57e-b88917726389", "sighting--974c7d52-7fde-48ae-8b40-f28dbc0ad525", "sighting--ad84c7e7-d9a0-4dac-b13b-b8883c987a66", "sighting--adbe7abd-49fb-4119-99c4-509f7a74f760", "sighting--9b749975-0376-49f0-942a-2af1ab347fbd", "sighting--c045d83b-7495-405c-a0f7-97171ffa5e5c", "sighting--fa4b7c75-df28-443a-8b41-b10fdde3a42e", "sighting--9eabb5b4-0b16-4a9a-b94c-1bb0d05b03fb", "sighting--f5536687-fd44-4c1d-9ab8-dec3516acce7", "sighting--cee71544-d44b-4a83-8826-d4466762f3d1", "sighting--778f8424-9f64-44b3-bdce-d0431add574b", "sighting--1c866fad-7969-477d-a052-ee955b5bd33d", "sighting--2c5b659a-2bfe-4896-a912-612230107fc3", "sighting--1d8f67c8-ea15-4a6f-bb65-b5cfc71843c3", "sighting--22137719-0646-4b20-9ac4-60cc217d638a", "sighting--e04fb072-be67-44cd-bf0d-286264e07c75", "sighting--7b099cba-1a93-4f57-abc5-2b2ff4b3046b", "sighting--fc1a849e-6911-4715-8aba-52a073d47513", "sighting--cd55cd7a-f7d6-484f-906c-0b4a36cfd22d", "sighting--0bc68439-dcea-4ce3-aa2f-07035150ab92", "sighting--755ea308-012a-4bb5-9531-8e8cfe5f36c2", "sighting--679873a6-929d-4a91-92c6-aadf6b3c0d8a", "sighting--7057cfd6-fb1f-48e5-ada4-3fd00f6b4078", "sighting--b063975c-aa30-4296-9450-56055d035ece", "sighting--3f0a8d58-6901-4dc0-b61b-a11f843735c1", "sighting--37b311b1-3bb1-465d-ad5a-6cfe7a6359fd", "sighting--9dc0a999-bd18-41c4-ab1b-5c0450852298", "sighting--7aced390-b018-4f91-b3e7-9325fc3ed565", "sighting--b949c713-a361-4071-9429-71e194a0bdbc", "sighting--ac92e8ab-70be-4683-9ccf-d8aaa52f1076", "sighting--894be079-76ef-41b8-863e-d72254d2ac48", "sighting--cab3dd89-7543-4805-a895-ba9568fddfde", "sighting--add86e6b-d8aa-4f56-b5f8-89bc0dfa6994", "sighting--3b84e318-44bb-4061-99f0-f9129865519f", "sighting--5c4f6edf-8e7b-404c-a3e6-0bc021dafd0f", "sighting--f97b397e-f532-4f73-822e-b1093b4aa1bb", "sighting--d7534be9-cc21-4f33-85c0-ca43c9fe5724", "sighting--9f26ac67-a2fc-4ebb-96fd-2eeda046bd13", "sighting--e3844615-ab7b-4b18-ace0-3171aa7ac383", "sighting--55c2dbfb-02e7-46b9-acb9-65edead7b899", "sighting--f45d4927-9f4d-47b2-89aa-28b69ce5a253", "sighting--18296bc4-fb6e-4041-b45f-ce476e285649", "sighting--2a3d67c9-2379-482e-8a85-88e302a07787", "sighting--fa8a2b52-6d92-42f9-a858-58e3b9bfe6a1", "sighting--371025df-f71a-4776-af04-c3f46837dcbc", "sighting--8f1c9633-0edf-4ef4-8f9c-d2e79d47f3b1", "sighting--f10e98d0-c115-4e30-b5ea-a8b062b7ddd6", "sighting--4900029a-9789-4e4e-8c2e-e13e467f0639", "sighting--f2a0e7c7-a445-40a0-9e7e-aea434d432a3", "sighting--09c42c32-6066-4994-b6a7-920a977e1e59", "sighting--fd2caf48-5cc0-4f3a-bb95-8c737b9589ba", "sighting--b3913442-fd0f-41fa-aea2-03e0cfbe1a50", "sighting--6cc7613d-bd5d-48d2-a68c-4345ae682813", "sighting--bbda80bc-86be-41f0-9876-0bee6206b3b9", "sighting--b5bb625e-0c50-46a8-96ce-2e50b757546e", "sighting--2a2393c9-ff1d-4e40-9574-e742524355e1", "sighting--b38d289d-08fb-47ea-afd1-a1d4c875a8f2", "sighting--98f6acea-357a-45f5-9bd5-45d8f42a21c7", "sighting--8538a9bf-e9a2-4a6d-9883-f2c32136c140", "sighting--b970185e-0277-4b5c-a960-c16bc4e56ff9", "sighting--cfec5b81-f282-4fcc-8737-e839729e7880", "sighting--072c202e-abf8-48de-ac98-e3f270cf3f25", "sighting--fb1821d3-aeef-427b-94ef-40af3281651a", "sighting--da8f10d0-2605-4619-ac59-6c4b65040477", "sighting--9ed6bb91-ace8-4ad9-9cf6-c06569808ccf", "sighting--15ce7ff9-a54d-4048-ad3e-afe0ffae2d6a", "sighting--ca5d0f9c-9414-46ec-8a3f-730540bb55d0", "sighting--d02bf86e-e6e3-4a24-8d91-1defc109bf6b", "sighting--4b59eed4-7cc4-46cd-b785-64dedff2f414", "sighting--a277b3b2-8ba5-45bd-9733-11ca0fbe754c", "sighting--f19c4c45-fcd0-4808-b1e5-10b83c619f4e", "sighting--9bbb4856-11ae-4cf5-9d5e-842306da9c71", "sighting--ad92c482-e929-45c8-99f4-f57819c58d75", "sighting--c020cba4-c326-4f33-8be2-2082d9283eeb", "sighting--c2d658c3-6d0b-4d75-9550-9cf36a40bfec", "sighting--e7fe01c7-3b4a-43f2-8dde-b0ab92803720", "sighting--4842e57a-00b9-41ec-acbc-f5d1a2257680", "sighting--c0db559a-bb64-4c41-9bad-31f618c40c22", "sighting--d6c7b817-b925-49ad-9fc3-8a649b9cbdce", "sighting--0040f815-2f2d-49cf-b37c-0d46e6fd429b", "sighting--7712ae6e-0fc6-46ed-92ae-9406b8dcfc88", "sighting--962a617f-3edb-4831-b814-9aff53f92d40", "sighting--b4f1e79e-5ec4-4ade-9c81-1afe19faa930", "sighting--befd0fdd-d721-411f-8037-762587f8c7d1", "sighting--66a73870-642c-47ff-a561-f9390860da4a", "sighting--a6c9122f-ddd1-4c04-983a-4aa6824d4f68", "sighting--ad8afc30-f8cc-437d-ae18-cb74683adad0", "sighting--a0199a11-b8a5-4ddb-832f-b5f708c448d2", "sighting--9343b406-dc99-44a0-871a-657f0731deba", "sighting--d31b37d6-812c-4cf9-b2d9-2ec9a4b0bed4", "sighting--8764fc33-09e0-4696-a2b3-68c03afb262d", "sighting--54ff0497-b154-4289-8372-0a637142beea", "sighting--325d873d-67d8-4b05-9d27-9c4b5132b0ae", "sighting--a13ee042-f239-4e8b-b12e-dc5a08d7de34", "sighting--ec612a53-6224-4045-b32e-dacfbe3f1016", "sighting--da12954e-7e1d-46b5-b289-ac76afc5a007", "sighting--4443c2b0-edd3-4729-b2b3-63f7b387a1bc", "sighting--333084cf-5744-4f2a-939e-13d654ba7ea8", "sighting--0b7f7040-095e-40fe-95ba-d9f173d945e2", "sighting--37571932-4f3e-4f60-8872-d8636f5bca11", "sighting--7556bbfe-7904-4eec-bfe7-8e712de3bb9d", "sighting--f2fea593-019d-46f8-94a0-deddc04c8f26", "sighting--ba595e42-5fb7-42c6-b94e-5531e3c9c3c6", "sighting--49a72fc4-cf68-415a-b0e5-fd1e75945e60", "sighting--9b943b93-2f63-4a7f-a904-39c51aea0039", "sighting--f47297b4-a9f7-417b-bf47-17ec50f8a28d", "sighting--948a6244-db0a-4c89-97b0-0558b2a54ded", "sighting--ab0ea27e-4753-4006-8a62-7ff031084750", "sighting--f309a086-5903-407e-840b-50ca9c77741e", "sighting--a03634a7-1c0e-4ff6-9041-12d4cd1ba637", "sighting--bac90780-dd7a-42ae-abd0-a2161d4979c8", "sighting--c0cfa5c4-1540-4038-8117-65b905f147d4", "sighting--7755a20a-0fc3-4146-9ef7-5b152be53db9", "sighting--c427f264-396c-4f12-8f97-78380e460b1d", "sighting--ac2ef69e-39e5-4d8f-a050-2c815f7e0528", "sighting--d38f8098-a808-4da6-b761-27f646f89955", "sighting--6474d653-73b4-486d-b415-34fdd1bea442", "sighting--d510ab6f-dd79-45fc-8d6f-08ed9cdfddbd", "sighting--bc2ce7b8-eda8-4df1-ae6d-3780fed54683", "sighting--2978a2a3-9a7b-4e73-b05d-a87024e25b04", "sighting--1a35a218-7db6-4e15-b3ec-7cfa1069105f", "sighting--84f3a260-2297-4ffa-8379-eded8e293776", "sighting--876df128-5da3-420b-bfed-a65c3651723a", "sighting--79080337-af89-4df9-9e6c-c71fb70c426f", "sighting--0d7c3fd0-925b-4323-a476-4019ed628beb", "sighting--08cc8929-9a05-48fa-b90e-1b04a92c7d17", "sighting--c66929ab-35c3-4724-8b63-c4e4286dec56", "sighting--d6e2669b-9cf6-4809-8b6e-e399cdb7c6b4", "sighting--fb34399a-1268-46a9-9ecb-37d56a928042", "sighting--65805e6e-f1f0-4596-beb3-a04e93a2a66a", "sighting--6e38b863-808e-4755-948a-f8346312a82b", "sighting--69933ee7-c3a8-4822-a7e1-772ece2b5a78", "sighting--579c2808-a681-4c88-bd80-64be12a7a37d", "sighting--6662b4dc-365a-400b-827f-6d5e82e1250f", "sighting--9cb2587b-08ec-418c-8f87-7270f45bdf69", "sighting--5ca1fd69-dacb-479c-b0be-05002b579cfc", "sighting--534683c3-1464-4772-b485-b1647d31a1e2", "sighting--038b0fbd-a489-49f0-a01d-b5b9b0fd47c9", "sighting--e102a5e0-d7fd-4c20-8b9d-f15ade870db0", "sighting--18842ddb-1af2-4136-89db-23a63cd7c0fa", "sighting--2a205ecf-498b-441d-98c4-0fca0d933bb0", "sighting--37913678-bbf7-40da-9a51-e9966d2fc8b5", "sighting--fa617cc0-9c95-49c7-bb64-06e9d2b4def9", "sighting--41ddde9d-56b5-4c44-890e-40be6f26d5f9", "sighting--4a89d055-604c-4b7c-a898-4fa654df5b19", "sighting--2016d27c-cbae-48bf-8112-a6388d66cd94", "sighting--61d026c9-0bb1-42b8-964a-3f39166c3d80", "sighting--371d49ac-8f9e-44b5-afb2-2881f148ac3f", "sighting--802babce-9d14-4558-a3c3-a8ab31418cce", "sighting--cfa1889d-f6c3-4c4a-a3ac-897a9d87c98c", "sighting--836186eb-7b63-47ed-b7ab-ccb9fbb96c29", "sighting--3ffad594-e8e3-4021-9c3c-abedf962c770", "sighting--2f810cf1-0fc8-4222-9b8d-a39c284ea727", "sighting--b2f9d602-300a-4e23-9703-116684f099b8", "sighting--0fde7f1d-55d7-476a-8714-9511d30202cd", "sighting--5a6e93f6-bbc5-41b3-922c-07523765d16d", "sighting--6b9da1e8-7632-47ca-a321-3580c4d30ecb", "sighting--acbfd5ba-be0f-413c-9d96-801074402431", "sighting--a8237605-61d7-4ec4-89c8-cbdbf9eeae6b", "sighting--e6c17551-37b3-4811-9b93-924ffc91dd34", "sighting--c86bf5ab-3740-43c8-9698-86083c962dca", "sighting--8a3d7d27-28ed-4348-bade-ec4a99e21186", "sighting--77ae5ece-fa4f-47fb-bfd7-dff11fda1ae8", "sighting--9b331bd8-1d89-4dc7-9701-1cd0ea1f42ab", "sighting--eb281b8b-bbd0-4f8a-a174-d49b2482f89b", "sighting--7c1ec2cc-1d38-4607-80dc-0370fea171f9", "sighting--bbe9d974-a2f6-4538-8137-92c92c43fbd6", "sighting--ecd07e94-d365-4f8e-b3ae-b7271098efd0", "sighting--48e7e216-d415-4f35-9c89-b18e278d4b8b", "sighting--888fdc90-602d-4da7-9850-353e8aa096f6", "sighting--6d21f494-1973-4d9a-aff4-cfadcd87359c", "sighting--697be541-e868-4b2e-8ae5-5bc834fc98be", "sighting--aff3a824-0591-4599-b873-261225a4b476", "sighting--d93d5313-a2eb-4927-9a19-e3a9d7a3afdb", "sighting--91ddac43-26f9-49dd-a3b9-48154c22ca8c", "sighting--7f109110-688e-4c6a-beff-971b06f91154", "sighting--02c20ad7-26ab-4966-b654-f816cb7cf6cc", "sighting--8504d331-2a43-4505-b391-adbb3704e0a4", "sighting--fc3d5a7d-a508-449e-b8e7-3a40e4905fce", "sighting--26967687-4e1f-42b1-a130-b4a772d1202a", "sighting--5b7622cc-379c-43c1-8368-7275a4406ec1", "sighting--c990683c-2873-454b-ac34-f20b46fbb085", "sighting--4f5bdec3-a96d-452a-be16-70e7982ed1a8", "sighting--80bf2c06-b88e-4541-bff6-64df87dfc214", "sighting--dcbe2b8d-ffd5-4976-af3d-26466be9fa4d", "sighting--1f4dd4a4-5133-4c64-8a8b-93b12c63c053", "sighting--ad55fdcd-df63-4f73-af2b-8d2e08a3e6d3", "sighting--c3586020-af03-4cbc-b0da-3df0cdc7139f", "sighting--f4b82e6d-60f4-4a21-919a-9b45ae83406b", "sighting--8c7b8c4b-0116-4e36-8181-6bf342fc349f", "sighting--44f70ba6-720e-4773-8d9d-7c39635158f8", "sighting--c2572cce-e331-409a-b174-fcae439e6866", "sighting--099b5167-00fb-4c9a-bf24-a9696d9babac", "sighting--6ff75c78-fadb-4ce4-b6aa-01fe965395f3", "sighting--7c59c2f2-d9bf-4c0c-8b95-ebd04681226d", "sighting--ece61d46-4186-489f-9d24-0e71129f879f", "sighting--cb0da54b-b6a4-49fc-a5c8-b90773ac9bf5", "sighting--2db69f4a-6958-4f57-999f-d83e6e97ce39", "sighting--808e25f8-3c4c-490d-a73c-b0098e21a555", "sighting--89bdc344-d610-4c75-b7a2-4bb33d8d0a7a", "sighting--a6577fca-3360-4b6f-8e53-56494ef3d243", "sighting--462404b7-3652-4d69-9af2-fc1143553695", "sighting--3312a1fb-0a95-409b-ad68-c380943347d5", "sighting--74c5cce2-1e3d-4dac-8ee1-00d48f057202", "sighting--7278ae90-43e8-44a8-83f9-e011ca9ff80f", "sighting--9c58aaef-2c45-4128-a49d-dd495c573ac9", "sighting--750437a8-f267-4a1b-ba2d-cf58ee797a73", "sighting--5b8d80f9-9eda-4c6b-b3cf-3ae892734d2f", "sighting--62249e5c-7543-4a91-867a-7efaf4963c14", "sighting--4fcbac49-5dcb-4aad-a205-f3342b5c982e", "sighting--e404d138-f302-42d2-8b80-0feee004112a", "sighting--710a6b8d-05cb-4c59-8e11-9ad0b83492ff", "sighting--810b8eb8-d5ef-456a-92da-c146b3786590", "sighting--7254ce2e-75f9-438e-9aa5-f52af41cf384", "sighting--8ecbfb68-309e-40be-8c8b-466126f5f7b8", "sighting--e7166a15-0744-4918-acd8-4db3ea923195", "sighting--236a2036-f42f-4100-9f0f-8c8563de760f", "sighting--5b00daa6-ea9e-445e-8ed8-06054792c5c1", "sighting--999b4f22-5073-44ef-ab63-5359add6c623", "sighting--a7cc8656-2458-4b49-ad0c-84226246705a", "sighting--d7a7bb77-7b9f-4c22-9074-0fe61f58de58", "sighting--ee41b682-43c7-44ab-9856-fd67d9b1dd5a", "sighting--a24c71f2-da60-40f2-8c09-39d0d1a67448", "sighting--02194845-79d5-4eeb-8390-2a21b3f0f3a1", "sighting--7bdbdd0f-c1e0-4ee6-923b-9351e7236283", "sighting--bfba4a56-994b-4b6e-b2d6-13f65b97989a", "sighting--33f299ef-0e7a-4bad-b856-a12b84336bad", "sighting--5f3bb319-fc48-4d09-9195-5d724e1c0abb", "sighting--2fad61c0-4e4d-45a3-baa4-262521ef6e13", "sighting--221b7e9b-3652-4f86-9e24-a3f9c1fff074", "sighting--c4ed59fa-e0be-405d-8356-8ed4860901c4", "sighting--951e12db-21f7-4a58-8f9b-5d452c699667", "sighting--fc0caa6b-885c-400f-a79c-03ec76f0e308", "sighting--2ab77484-d200-4148-b775-4694891e6709", "sighting--6e6b38ce-609c-458a-a213-73b06aa2e2e6", "sighting--0a8ac30b-c205-4699-939d-8859b49a32c2", "sighting--5d2d7556-a89c-439d-b720-0d8f4b5e8f31", "sighting--fb7a40fa-2c83-4b35-9d2d-9e31add78240", "sighting--bdb9a6bc-b5f1-41bb-aa7b-090517d62b42", "sighting--cdd93df5-23f6-4adf-ba66-150af8ac0681", "sighting--3f21a0cd-c0e8-428b-9001-e29f67ff64ba", "sighting--c3cb0182-f8b3-43c5-a6fb-5993d7443f29", "sighting--69b929fb-06c3-4cee-bf71-639da84ac150", "sighting--5574a7a3-6938-41eb-b942-63011533ef56", "sighting--a2cd420e-8e17-4e67-b5d5-c57236999f4c", "sighting--885c32ed-dade-415e-834b-05e3083657b9", "sighting--cd61881e-b040-496c-92ea-64d6f0f80075", "sighting--d023b371-a607-4ede-95aa-cb4adad79180", "sighting--6b5250af-5319-4c4c-90f3-cc0c1b6dd15e", "sighting--9bbe4c61-84dc-423f-8617-ba87a4b5da8e", "sighting--dc6d23dc-12f2-463b-848e-2b2f40d161c6", "sighting--9f2238e0-ac61-47d3-bf88-77b47ee81b94", "sighting--0ff16b9c-09cf-45e1-9f10-f45ba6d2a287", "sighting--bc531941-d8fc-48fd-851a-6a281a78f54a", "sighting--fd739112-e355-4a2d-bf93-73082a809744", "sighting--134fcfa2-1970-47b8-a4ee-cdfa107e5be0", "sighting--dfebac9e-271c-4ddc-9771-1402dcf2e184", "sighting--060cd8a8-0d9f-43ec-83ba-8e7af7469609", "sighting--c6da91c4-8a45-4c9c-96a1-62b39336782f", "sighting--2fabeb3b-8e46-421b-9f54-5d9c201c434e", "sighting--9338430d-229f-41e5-95db-2e9a3d2bfd12", "sighting--a895fabb-6c0b-4a1c-8a5a-1b5c70071eec", "sighting--c5d72b68-1566-45ae-996b-ae075a74dc79", "sighting--718b2893-9937-4c5e-968e-861dce30cac5", "sighting--01020059-35df-4a85-91c1-946cf35f74f5", "sighting--8274f4f9-897e-48db-b6aa-9852a1d50df2", "sighting--6246fb5b-1b24-400d-a56f-7d8c3602ce60", "sighting--ddb2d286-9b42-45f3-87dc-d054e02f3bf7", "sighting--126d5323-4eed-4869-a30b-939bde7eb7f9", "sighting--15f358b7-61ad-4a6a-a60c-8ad36fb154b2", "sighting--c5352f61-02d4-47bc-85b2-965827f08388", "sighting--e00b6aec-923c-46a6-912e-2148af48b9e5", "sighting--e4280f19-1f04-48e6-918e-ddb655609a1c", "sighting--97faeaf1-3485-40c2-9059-a205984cd0c4", "sighting--64bea2cf-77f0-4c54-9fd2-3fdfe2ac960d", "sighting--24525a08-c688-450a-8cb9-72e795510dc9", "sighting--61961b3f-ec4a-4959-a1ae-783c3337e528", "sighting--08e1438c-8184-40af-a3ab-dc1cf86dfb48", "sighting--b502b523-3851-437b-9a55-2efa70cdc52d", "sighting--fa96784c-2727-4e10-9801-6cc0ac4c3b3a", "sighting--2ddb7ac0-3289-4997-9604-ffde5b785a51", "sighting--ba93609d-b8c7-4370-a5bf-cf95f2053334", "sighting--fc4a8715-b923-4bdd-9bfe-b911679af606", "sighting--2d77320e-d803-4aa0-b1ba-3b40bda59efc", "sighting--ef888cdf-db56-45d9-8fee-b66fa0c1e681", "sighting--c5f2bf66-e42a-4734-afbe-d8fdb7e708a4", "sighting--198212af-e146-42dc-b366-1a4cdda22c57", "sighting--92418c19-b736-4602-aaf6-fb80d8fd33c1", "sighting--13b75b46-770a-4bd4-8037-5e8e98d6ae97", "sighting--97784141-b61c-4a85-acc6-b72da75757a5", "sighting--e9ec0349-a280-413e-b20a-ab40baf03b65", "sighting--918b6cf4-481e-492c-a915-feac3229d021", "sighting--f6d89d01-a6b1-4fd4-8b01-b255dc63be1b", "sighting--eaf1129a-31ac-453d-adec-1cab3180a50e", "sighting--2c4e8368-63d4-45b6-aac9-103ee4fe4e6e", "sighting--67add284-36ef-44e5-9eea-24e40c489222", "sighting--eabacd6c-550b-4aff-918b-aad1093300df", "sighting--1183a828-46f3-4d25-a14a-5c9acc509185", "sighting--3bffa73b-f299-409e-8de9-bb6e252228a2", "sighting--d6352e9a-f76c-4fe0-a798-c8e01dbf3421", "sighting--35166c2a-7150-4e9c-aa9e-ce7cc2aa2b96", "sighting--317afe28-88c0-4e43-a3b0-5daa85fc98ce", "sighting--1bac1e68-86fd-4183-b8ff-a95eb7f6b9e3", "sighting--4bfcb3af-6ee5-4bfa-a2b1-d657c130a6f3", "sighting--ff76f2a7-74a0-4e14-a43f-de6bcf796bca", "sighting--361706a0-35f1-4387-99a5-95b5bc444d77", "sighting--0c9f8fc0-45fd-46f9-a506-eece630c286f", "sighting--49195179-6bfc-40f0-9b21-d2365232f433", "sighting--7bf30f81-7248-4342-be7c-dea099abf31e", "sighting--814b2d36-3e85-404e-a67d-6d83f09fc540", "sighting--e774928c-abac-41e6-8358-1ee0f784687a", "sighting--a40dd957-7882-43aa-8ee3-3fbed45a85bf", "sighting--ceb2710f-9b35-4e7c-af61-aa4663e132d0", "sighting--24a499d0-718a-4c18-8f94-edfcdeb6b8ba", "sighting--190bbe63-8361-4898-b8e9-0009162b66ff", "sighting--7fd09bb1-ef46-4ef6-a6aa-711442f47053", "sighting--ff27e555-7946-4c26-bdf2-7d6eb61926b0", "sighting--f7fcf031-24e9-4074-92d7-3af90bb77f96", "sighting--f4c1eee6-41a0-4ee5-a7c6-27ecf31261c7", "sighting--e8145e77-ff2f-495c-8421-b836f8123ced", "sighting--79e16615-5b2b-4ebd-ad42-c3f5ab2d5ae6", "sighting--76e8e651-5407-43ea-bc50-ec0906c8a5af", "sighting--73663735-f3f4-482d-8785-a3cf7cbe6c5f", "sighting--bae474b0-289d-435f-9641-4d7a73b1060c", "sighting--837f315e-e7f0-4bb0-b525-ec96ce4d3800", "sighting--814eae52-f1d0-4552-83f3-6bffe7d1c57c", "sighting--594ae9d0-7ef6-4111-ab08-129f41df870d", "sighting--217ab6c5-4868-4ccc-bb10-556de7cfc52c", "sighting--dfbd8b1e-8028-4fb1-a5fa-281f845c14bb", "sighting--03f01626-712d-4ec8-939a-a26f2e730285", "sighting--a1b8713c-e633-4b67-aeed-b5cd128c1ec4", "sighting--10be16f9-0db1-4b18-bd1f-06ac21be3430", "sighting--c2c1bc48-63df-4d83-88f4-45b304cce223", "sighting--d0dbdbf1-d46d-41a4-bc25-482e1c0d07de", "sighting--b102d2bf-faf9-48f6-a661-92d0b3e47d10", "sighting--96bb78e9-bcf8-4d32-a4f1-5a935251876b", "sighting--f661bac0-17fe-471d-8e3c-7e77b27e7a9b", "sighting--2dba7c27-8970-4878-bf08-6541ee6d933d", "sighting--0c219509-545f-4d84-b3bf-05802e0c8187", "sighting--b5019d5b-b264-49af-bf3b-a2aedfa79945", "sighting--8c7daa3e-b63f-43f1-9bb7-d69d6d6be6aa", "sighting--36a9fd3d-d398-41cc-bde2-41c5e860f69e", "sighting--cb99c0a9-13b4-46bd-bb1b-e607d5c8c50c", "sighting--089fdcc5-a32a-4373-b75e-5f61b918b1cb", "sighting--405e0a17-d73f-4070-8a0e-fc4f9807f33d", "sighting--c2379cf7-da46-48a0-a0a4-553c8280a2bb", "sighting--1bf370db-1ab4-4735-8d5e-019ab72c9c5c", "sighting--81f7adc3-ce8f-424e-beb8-842fb8cd1e43", "sighting--2908e442-9ed5-4127-9501-74e00da4b98b", "sighting--dab42507-ffe4-42cb-849a-a6ebf145b12a", "sighting--c799aa2a-651b-4c46-9c59-f6c227454f3d", "sighting--a3ec9cd6-7899-4e3b-bd84-7b98cf95a3ee", "sighting--be66b733-94f2-4374-95e9-f8d0249a26a4", "sighting--33363d8d-9696-4d70-96a1-02bc46c6f91f", "sighting--c3eaecc5-3ebc-4bdc-8e1f-31ec97dcfe19", "sighting--727863b2-cdeb-47cd-abe7-fe11ed80e671", "sighting--68d0ad3e-5065-4596-8d8b-471bace36369", "sighting--3cc9f7cf-b6b9-4386-979e-52b3563dd67a", "sighting--994b2662-a6c2-421c-8937-b3e58b7a92a2", "sighting--bbd3e9a8-751d-42d3-8f78-cc6ea9cf495f", "sighting--3d83a40c-2971-42fe-b874-25944b814d57", "sighting--3295348b-b6b9-4798-98a4-902544197aa6", "sighting--70b25e44-09a6-4f03-a7dd-0393748d2cfb", "sighting--e8ff2541-ae41-432b-aef1-7f1d60a3ccea", "sighting--61d8ee70-2279-480b-8cb6-c370141d86ac", "sighting--28c31ec9-2f41-432e-bd8a-47c97619ebe3", "sighting--c00677a7-a0b4-4d4c-a0f4-c1934db0d210", "sighting--908c42d3-9a5f-46ac-b4be-e8c95bcf4720", "sighting--0865c2ea-e96d-492f-a7b3-5b3f2a649bbb", "sighting--57a47418-5e51-4079-9873-5fb8eacb861e", "sighting--13537f8d-b73d-4097-905e-41ab6398be06", "sighting--1834c52d-dee4-4131-abc3-dd56248235db", "sighting--2ef40e3d-59a7-4838-8fef-b40999c5f6e6", "sighting--cd7f45de-d1d2-45fb-95f8-af096c42a86c", "sighting--4b5d6095-dead-4b5c-9ed6-5e0988d92f52", "sighting--3ad10325-b947-4232-bd0a-19ee784e2092", "sighting--581d85b9-7cca-4011-86d4-f5ffa3563178", "sighting--a645c7e7-39d6-4668-bcd7-ea63a308be1c", "sighting--2c02e032-8eaf-4308-bef6-fa7fcbf00027", "sighting--aaeab742-6f4f-4192-86ef-22362d49285f", "sighting--d9512374-daec-4ad6-9145-4cac7d77efe9", "sighting--81e37fa6-6de3-474d-bd92-810ee58b3423", "sighting--29f59baf-2c4d-4e58-b06d-5dc4e1f9012c", "sighting--181c2c89-ac4f-4a01-80e6-1b9cd9c942ab", "sighting--3c911c4b-0cd4-404d-95f6-287a4b5880ec", "sighting--9d79864c-c905-48f7-a082-b64182668321", "sighting--bd28f92c-bc9f-4e1f-8b08-07d24ce7243c", "sighting--f399fc38-9e05-4259-91d4-1e6821178057", "sighting--d4d92d6e-25e8-47d6-a63c-cd0e58e051d4", "sighting--450e7d91-9b6d-441a-93d1-738dbb58c27c", "sighting--c972381a-c527-4203-87dd-a67b969ee23b", "sighting--44f71b90-97c8-467b-b4fa-c028317df199", "sighting--45eafe0f-d783-40fa-b6bf-c4d67330e88f", "sighting--1e0ed320-9c11-4e22-a50a-4cef4455bb9c", "sighting--97eea13f-a06a-4d14-8453-a7a71cad0174", "sighting--5d21febb-45ce-457a-a46f-cb0c2926db8c", "sighting--b9414794-58e1-4dad-945a-651e24000966", "sighting--5c67b2c6-02ec-4654-acca-0b56f4c7a970", "sighting--c6caa31a-9025-4ee3-9aac-476d5a72e032", "sighting--9cdbeb2b-aa9e-48c6-a9ef-48a6214f5eae", "sighting--a8bb9539-f32b-47db-b3f0-08034deee400", "sighting--faa8a1fc-1f52-44bf-837e-d62d60a936f0", "sighting--ed4e45f8-e302-4be2-9b8e-66d61a276531", "sighting--51ab3a60-6f00-49ec-8957-91767e9f7db6", "sighting--c73ce8fe-6fc9-45d7-a740-d59e7a98015b", "sighting--b4f328f9-1818-4452-aad8-a108029d5a81", "sighting--730b8ce8-91e5-472c-9846-71b6c51b1a6c", "sighting--e127c7e2-adce-4593-9516-34f12f19cb52", "sighting--5d71ed76-038b-4462-ba92-1ef96058dfa8", "sighting--8c6f5eb4-7f77-4984-bb83-388c8d7e0c9b", "sighting--6ab3681e-c62b-4566-a3cb-a3a82afac24f", "sighting--0ad2ba65-8a03-4af4-82ba-db2fad3410a6", "sighting--c25843dc-9715-4ab3-8cab-c92ca38749fd", "sighting--10ada0b2-9285-4474-936f-f30947cd21ea", "sighting--7f695f82-4137-42e5-aa6b-9ff930773bcf", "sighting--7c776264-32b5-4667-a1f3-7b186c6386de", "sighting--e85c46a2-870f-4ea4-ad1b-4b1e406383b6", "sighting--00b2cef3-6dd2-4cb9-baa7-cbce5e621eda", "sighting--09fc8ef8-027b-46d9-b4c2-e80f0147636a", "sighting--3c657e39-9709-4c1b-977d-f4d46fe152da", "sighting--a67a9b60-b213-47cc-b39b-31d1c3ae50a7", "sighting--38706a21-a343-42cc-8642-00cedb0e5b15", "sighting--58b670ac-f5d6-42f7-b5a4-fba0d420d998", "sighting--05677d7e-347e-44bb-9b9d-1021f5113734", "sighting--c5b3e7c3-08c2-4732-ae45-dc603842d697", "sighting--4ca6a6a4-9bc9-4ba9-9afe-0a1ad41b7983", "sighting--9f032ff1-7fab-475c-8ed9-f18e270db8d7", "sighting--24fe304a-a54b-45f2-9be1-c4c6d03ad78a", "sighting--2381503d-af36-495b-8dfe-bbbdd4c09a94", "sighting--bd284121-fe4b-473f-ab2a-144643a616d1", "sighting--d054d87f-11fb-44ca-8030-955b50bfce63", "sighting--cddceac1-0339-4093-85e0-996960be7338", "sighting--707c4e00-15c9-4838-892d-99b89a957095", "sighting--8b4560ab-6110-457f-9eab-05a29e12e9c8", "sighting--6fea95ea-8c37-44cc-a47b-eb2a5958591d", "sighting--45cec614-ea9a-4eb8-95d9-fd397a00dc69", "sighting--8480c50f-8bf4-4696-a88f-1b230f86b53b", "sighting--b5a87e8b-f03a-4b27-a18c-b97d47853050", "sighting--b8d5c169-a175-494b-8b3b-1ce676de5790", "sighting--ab1bda73-20a8-4dd2-b69c-3f10d71e64c5", "sighting--34898190-137a-47dd-8345-2f541855721b", "sighting--69319704-45c7-40eb-8119-14e901690bd6", "sighting--d955de18-7b78-4f28-97e0-fc96e6a4f4a6", "sighting--3bf194f9-d49e-4604-878f-2bd35761795f", "sighting--b4f9258c-a628-424c-bf18-9bb9a6eb2284", "sighting--1e5a151d-7b1a-4368-a9d7-8de8dce421c6", "sighting--59ba347e-b65e-4489-b2da-72bb879229e8", "sighting--59c37f5e-95eb-41ad-892d-bc2d07611958", "sighting--a0f17418-7443-4189-883f-dfa27de3a0eb", "sighting--0410cbc5-a793-4191-a0ab-d85a3bb173a1", "sighting--8ecd58a9-2ca5-4ce8-914a-c3b46efe34c1", "sighting--5c03a607-0754-4af5-8f63-3fb9df32a935", "sighting--07ea587c-f28d-4db1-9bcf-d0914614aca6", "sighting--f47bc59f-7a91-4261-b64b-2ff8dbd02056", "sighting--8319fd24-1f15-449c-802f-7bfaede9d1a5", "sighting--ee98c31e-daa1-435e-926a-4f5c1f1531a3", "sighting--05ea08b9-4320-48a2-9291-948d3406eac9", "sighting--3463767b-60f1-44bc-bf9a-83cb0c0b11d9", "sighting--a4891747-89a6-40d1-810a-a48b473324c1", "sighting--bf534152-8206-4f06-a939-ac2928e98580", "sighting--d62e1d50-b88f-44df-888f-7461f57ba101", "sighting--29f18390-2547-4d20-974c-c3ecc744b66b", "sighting--b3d1a1df-a2bf-49b9-b362-77d8c0149e9e", "sighting--0b2272e1-5a3e-4d17-bfe0-b127d194fb8a", "sighting--ed529546-30ac-4d93-8ac1-2fa1308bef9c", "sighting--3ae5557d-eef5-4a89-88b4-56f685a39ef0", "sighting--57c73be1-8c7b-44b7-9c77-c3273ac1b9e8", "sighting--715dbd1a-7965-4021-bac3-f329df3918b7", "sighting--cb8a2e91-a42f-4441-a255-79f9fc75f653", "sighting--b8437f33-8c4e-408e-b696-d29f9d0c071b", "sighting--73d7f269-394e-442d-b0cd-4b7388eb10f5", "sighting--efd27cc4-b519-4d61-9746-0a2813535a99", "sighting--50e9b5eb-9c63-49ef-80a0-e8cf413a4665", "sighting--aaeb7933-d68e-4c44-9fc9-3bd37f485dae", "sighting--d4e9c45e-288d-4883-a614-b3bc17b356e9", "sighting--03e39f85-6748-43d3-a0d9-2bc66108668c", "sighting--eb20b341-44d4-4bdc-aee1-7fbb2581ae57", "sighting--8c801ae7-ba4a-4c1f-b59e-a36e45ad3aaf", "sighting--b652eb02-4c48-4efc-abc0-214953cfa034", "sighting--ae2a6510-e343-4424-8749-a3dbebd0a388", "sighting--26b2a4ac-2b2e-4aab-8124-00565286a6c9", "sighting--368c06e6-9419-48b7-b37e-dcdd79b3f691", "sighting--81dd6404-018d-463a-8699-805656cf301b", "sighting--f01c4c59-f8d6-4268-8109-a4d93f799384", "sighting--ca60eb01-8677-4506-b550-86adf33053ac", "sighting--074138c9-7267-413f-a1ae-50af075b74f9", "sighting--d98d1c5c-4dd3-4ba5-b9f5-21e779dcd23d", "sighting--7f57bf18-c10e-4317-bee6-b0531acf307a", "sighting--2da276a3-2bbd-44af-ab76-afa2ff086eea", "sighting--38e5b08b-3ddb-493f-92a5-c6d18bb631af", "sighting--e9c0c602-8c20-4fc6-ae6b-494688b327ce", "sighting--e0f5621d-b8ec-4ab8-a9b8-00c20697d262", "sighting--3a825f8f-c866-411f-8ac7-64b7db66643e", "sighting--58efbaf5-e6f8-4b57-8a6c-3ba2c70a7d79", "sighting--29028dd7-0f73-43ab-87cf-5776c7f3df30", "sighting--c745d9e5-86a8-49a5-afcb-ebf02079a921", "sighting--02e93221-5b69-4d6c-91be-7fd5731ce9d1", "sighting--1f471469-e409-4a5c-a49b-4eb7b89ab97e", "sighting--2aa1156f-5458-4522-bcd2-f0a890c62e3c", "sighting--971c0f7b-c2fe-4c92-800c-dfe886413e59", "sighting--c505692c-f396-422f-8fcf-209971441346", "sighting--d53bece2-6998-49e7-b0ca-e81a6bb22b75", "sighting--0fdb77d8-cf41-4fa6-bc54-22310589a2a7", "sighting--711352cd-6016-43fe-980b-80a6aa8daf5c", "sighting--567ace92-ad45-43f0-90c9-dee4ad138975", "sighting--71886a17-3268-4a97-bcd2-debf875a6cb3", "sighting--679a6d6c-5015-4f90-9a03-026e20ad4e3f", "sighting--1f37b6ba-6b93-4cc2-b265-62111e128a35", "sighting--c9a158a8-5a3d-480a-a2fb-00c80f555b39", "sighting--c0d9a14a-ea55-43b2-8b9e-e385948aba01", "sighting--4b761c23-1c41-40da-97a6-9005612ddc10", "sighting--797ea9b3-3c80-4bc9-859c-b4942152b921", "sighting--7ebfe497-d0f5-4820-a48c-59bb677e113f", "sighting--2bef36b4-437c-49d5-8f33-84fa3c33ce0b", "sighting--59c78a39-a400-46a4-8345-c65fe1b01e1c", "sighting--3faa0d70-98d7-4158-824e-2ec0ec3f77f4", "sighting--ddef42cb-0281-4c9a-aa97-9dacc85c4e14", "sighting--ca97c5d4-9210-4b37-b6d6-7140f165e62c", "sighting--fef33222-15bf-416a-8f57-1fbed9eb040d", "sighting--d03eed42-8684-42a5-8d6d-628f2186ca31", "sighting--e3c4eab7-21ae-4398-842b-0d05a7cb7099", "sighting--83380b97-f446-4b4b-aa2f-5e9f21ff350f", "sighting--6f1f5418-4e14-4ae7-a95d-9d6023741ef7", "sighting--3feb131f-9d0e-48cb-a56f-c76e1c37e463", "sighting--b63610e0-24cc-436a-a699-4abe9a70bb93", "sighting--828a0b11-0424-4ed5-9dc1-0c35221732dc", "sighting--057bbde7-ddd2-480a-8eac-8f9eeb5ecb96", "sighting--afce1d2c-7c98-4faf-a50e-a209f7423bf3", "sighting--9abaacad-d340-4c2e-9e59-bdbda5b184cd", "sighting--7829b21b-636b-48b9-b386-c451633d5256", "sighting--c72bcb05-8cef-4f45-a089-6f4aca2f07a3", "sighting--0702e273-25c1-45c2-a35e-86d039945bde", "sighting--773ef3a4-346c-47e9-b53f-54c53b78ca70", "sighting--c1d03efc-b09d-42db-a55a-0485f84651be", "sighting--18ab8402-3303-4ed8-b85b-fef3ddd4d677", "sighting--6fcce627-fe7e-45d6-a5b3-c181164a49e4", "sighting--5247bf20-05f9-44d9-9871-239cee0475ef", "sighting--8ef55a14-2d1d-47f9-8698-4a90f161a7a3", "sighting--61107423-c4b6-4e0c-9bcc-096c2d5713d4", "sighting--34b0ecf4-78d7-4d68-91dd-f75a11c8fb00", "sighting--17d4cff2-3f60-4a64-ba25-b117df651a7c", "sighting--c6d895cc-ec1a-4cdb-955f-7fb9c0531659", "sighting--759466ee-2b9b-4984-8d4a-b449f1c30c65", "sighting--f3ba664c-f745-4c05-9263-321e05a75522", "sighting--71453491-f210-4030-acec-782f88f48f3c", "sighting--d5cfeb4b-7712-4917-90a2-9a57510f1797", "sighting--d07be604-f95a-4dd3-803d-2b0b92eb8118", "sighting--14b7f172-7f00-4c4b-abfd-891ecb54ee20", "sighting--029e2d02-74f7-47fb-bad9-391f3ba4a15b", "sighting--83f89e03-eef5-4a81-85c5-8dc036f7e0f0", "sighting--973969e3-9ff1-40db-b1bf-325e69792702", "sighting--01165dd1-8614-47d3-9d16-91ffa12b9269", "sighting--60cdf6a9-260b-4bd2-ac7f-3f86b9eb5e06", "sighting--b272a5e5-d20e-40fb-a153-bc34f45875eb", "sighting--a8200cf0-290a-4d9b-891a-0cf04bf56db7", "sighting--f090f0a1-9d51-4a7f-9fea-0612724b5d28", "sighting--fd786114-1a9b-4fe9-9592-bc814e198ca2", "sighting--8a9e1c6a-fa68-4031-9203-cf0b20be233c", "sighting--d04d5a23-65a3-4a20-833f-e99e899063b1", "sighting--19ddf8d0-5d65-4542-b797-97dd19c45a64", "sighting--095ca0ec-89e8-4b0b-85dd-1a150a5aa933", "sighting--df1c8a3d-aae7-43ec-857a-989852714df3", "sighting--12a4d520-4fe8-40be-ae8c-d59efabe4126", "sighting--bb50a954-946f-4cf5-8057-6be912b4feca", "sighting--d03394a0-edeb-4068-b390-01b89f0fb9ad", "sighting--64d2dda7-9084-4177-ba5d-48a1624faa52", "sighting--2db93db4-2090-4946-9d38-83442e10c77f", "sighting--2335cef5-41da-428e-9580-c01ccd9be13b", "sighting--b8df93c4-641a-4eed-a36d-39f2e587ff66", "sighting--a816e2c6-284a-48f2-84e2-6d3ee03a1253", "sighting--b591a891-7204-4ab3-a16e-339d04960b5e", "sighting--8ec55987-104f-4a19-ab23-e53d5af02775", "sighting--d40034a5-e26b-4105-996e-e987d5e197f1", "sighting--023c82b4-55b1-423c-ace9-14dcce4a84f8", "sighting--93ad5090-fe4d-417a-b51f-6b87934f6ed3", "sighting--86e003f4-2585-4bc0-8c15-9ba4e93880f4", "sighting--77261e77-103f-48bb-96f9-db51e944ee0a", "sighting--1fda3c7a-b206-46f7-b7a3-b25a0caa0999", "sighting--b8d8474b-3b01-45d9-b1fd-4d7ca1da34f6", "sighting--bb99fbb2-11e7-4b60-81ff-f29c1466ec2e", "sighting--29f92b10-5e8a-48e2-8a0f-7cee1b0abab1", "sighting--b547a668-ad1a-4790-a9d8-a4a93556d6fd", "sighting--10be396d-eae6-470c-8c2d-8ee1126e0bd5", "sighting--e0dd5c2a-1f49-4303-aef5-eeb8718d2eca", "sighting--a8251618-a3ba-4677-a00a-cd59908f05e0", "sighting--feacd39c-76e6-4b82-987e-479aa8adc6c3", "sighting--529b3a08-654d-4605-9774-955076aa7d76", "sighting--3d09cc5c-1d9a-4022-8edd-29df6cb59a4d", "sighting--b603e4a6-4a9b-4a25-98b2-86d5817f0ff7", "sighting--3ef46f0f-dd3f-4e63-b0de-cd215ff2da3e", "sighting--9be4cda4-6379-4c82-ad17-31274071519e", "sighting--22f78e0a-3a18-498b-9acc-cf13b9e6c48a", "sighting--7f979f71-14fd-4148-94f9-f1b74b10ccb3", "sighting--4ab25f5a-211b-45b9-b2d7-d94f3b6c6eb9", "sighting--0b3b8477-0c30-49d7-8410-43270b2ac4cf", "sighting--c2cdcd9f-fa95-4664-b66b-0dc7112d70e1", "sighting--a688846a-0e75-4cfa-9cb0-b8115cebdae9", "sighting--cb6619ed-b1a1-4718-afea-52d81fa412a1", "sighting--e2ca12a5-1354-4c8b-bf76-ca2ba4645e80", "sighting--25c8726a-0516-4a66-86bd-898849d22ea9", "sighting--35b10332-fe88-4eb8-8217-91f810401921", "sighting--3350eecb-b632-4fb5-8bdc-c85943d168e4", "sighting--daaa4f5c-6508-4777-9086-b15c942197c4", "sighting--f458c08d-27f4-4b83-ac78-5ba2da56262e", "sighting--82dcf022-0532-4c9b-b97e-e1da4efb4d92", "sighting--d5d1d94e-09f5-48ba-af3c-f0ad461487b2", "sighting--cf2cc841-3259-478b-b741-23ce9d074e1b", "sighting--ada23112-0653-4b76-b2c9-22f326209a2d", "sighting--85ff5b9c-2bfe-4448-9996-3c61a896358c", "sighting--5dffdd96-313b-49e2-8be1-d9b77dc6bf6a", "sighting--343423bd-538d-4721-879d-0f0dd02da0e2", "sighting--46285d88-75d4-4e78-9265-5dd76edc583d", "sighting--c4585d9b-0fef-47e6-90ec-8995dbc49027", "sighting--fecb048b-ec50-4ba3-8629-9826544e553a", "sighting--c7b6e221-96f4-47c4-acd7-086689401da3", "sighting--66652477-4db4-495e-ac35-56469dd3b048", "sighting--29e9a234-83e3-48ba-bbb4-b122c17df1c4", "sighting--fa20d9e7-c1a1-45bd-9406-62e263f1785c", "sighting--5878df96-675e-48e9-baff-bfcd69752225", "sighting--b938df3a-13c7-4558-887d-8af585a2ee86", "sighting--602f5098-7f4b-41d1-8dd2-1df738384abd", "sighting--95d291c3-ff15-4d5b-a1c7-8cbb6402783a", "sighting--4fd19850-2a1b-42c5-ae33-6668520ad49e", "sighting--f081f03d-7d54-4ebf-a22a-9c36705065af", "sighting--bca2798e-3a38-4395-a202-e25c99b0de16", "sighting--f7858c87-5c39-4f93-96ee-a3210449900e", "sighting--d770cfc4-4690-4299-9699-7f3ecdc7b2a4", "sighting--07a89b05-1712-466e-9e2f-e107a1252996", "sighting--35b7b80c-bb06-4a9f-aa91-0588343eba53", "sighting--47da255b-7af0-4e4d-a54d-595e67d2e864", "sighting--cf5d9e13-f237-431f-95fe-528df822d816", "sighting--e4be3a01-f603-47eb-9b3c-bf07bdba3528", "sighting--ed58f085-2843-4ecc-9add-0dca47743b2b", "sighting--9c307918-8168-4f3a-97fe-1bc0e555e0f4", "sighting--1be9b458-6781-4358-994c-daecf83b66de", "sighting--2fd8b6ad-27cb-4a17-8b89-b79f0a27b7c0", "sighting--22905796-ec51-449e-ad99-a9624c3822e8", "sighting--f95ab13b-90aa-4495-b8c0-a8ab9d62e4e8", "sighting--bcb968d3-f79b-4639-b837-7e0473f74421", "sighting--404c2c49-ae52-4fe8-860f-5029ec923895", "sighting--d30ac528-9653-45a1-b185-a9e92e378088", "sighting--6fe65560-0240-467e-a984-833f0009a534", "sighting--e9a9a026-61e8-4083-93c2-d6a421798a92", "sighting--05a04ee8-87f6-4ca2-a28a-09905413c99b", "sighting--fe1fc6d0-4e58-4f19-852d-469a83795284", "sighting--e63069bd-0aa9-4062-bd81-4922bfd3f55f", "sighting--a0c4e336-8727-461f-a2f9-80fdc2e81d58", "sighting--12072dcc-74dd-46d7-845a-f32723491200", "sighting--521a13b2-5e49-44fc-bb81-7808184ba926", "sighting--1fa2fb2b-fdb2-451d-b472-a8e5f32cedc0", "sighting--4af4e8bd-0386-47e9-9c9c-bb84eaf5f9f9", "sighting--1f567441-db20-4cc8-915b-e55cbeb362ff", "sighting--5769635a-4013-404e-837d-b589d067700f", "sighting--b18d70e0-e3cd-40c3-a0c9-7d159c608421", "sighting--2243faa5-e877-46be-917d-1c8fe5c2f044", "sighting--5c5dccf1-e46e-4663-a6f2-cb2674b823d9", "sighting--c02f02d1-fa4e-40c2-946b-55621e67217c", "sighting--5900e1c3-1fdd-4606-be52-cd864b94fb5e", "sighting--b6cc3933-20c4-41ef-af6d-e61b8f02a01a", "sighting--f0a1d7f1-9b6f-44b3-81c2-ba7d9e384b04", "sighting--4603244f-7878-4084-9984-1784250ba2ef", "sighting--8b53a632-3f5b-4dc5-889e-6c59a3000b1f", "sighting--16cd160a-d707-4c1c-a5e4-c98cf8c723ed", "sighting--fdd9a4c8-6049-4344-b4cf-1fff0fe88f2a", "sighting--173a1807-f1fd-41a3-8dab-ccba9c739be0", "sighting--2d57c367-c525-4b92-8870-53574013f79c", "sighting--fe4540eb-91a2-4e2f-9592-3c637ffc54c7", "sighting--a8539ed1-6296-47f0-8741-21e0b8bc72f5", "sighting--b0488041-0ce1-4062-8397-c142620d4679", "sighting--a26ee448-c9cd-4073-a689-67afdb57738e", "sighting--5df658f0-ede1-4375-887e-0d0297de9de6", "sighting--ead5bfa0-d701-4751-bdb5-baec3bf28d3e", "sighting--e9f0d31e-4917-4c7f-8552-08ea8643a387", "sighting--dac45880-c31a-471e-b9d0-0f38a1f7f1db", "sighting--7ca0c716-6568-481f-ac78-eb1d13d73e83", "sighting--d83d8234-a639-4dfb-88cb-bdf6dc90c9f1", "sighting--a348e1d7-6cc3-4456-8472-ea9b2a7b0559", "sighting--f3ecf9cc-ba78-4c7e-a884-78285c5993b6", "sighting--f3056908-b42b-4553-9b74-260820fe3f0f", "sighting--ade69b8f-74dc-494b-9775-3ed2ea559fe7", "sighting--a282de56-c51e-4846-a9b1-8426003f7a2b", "sighting--a2a7097e-ba38-4e41-947f-e6467ae3a780", "sighting--042d8a74-4ac9-4beb-bba4-dfa8e688f36d", "sighting--83e626fc-f0d6-4a7e-bdc7-67b6c9dfa19f", "sighting--5baca03e-e307-4019-ac0e-1a4a975895aa", "sighting--7f791c9d-4cb1-420f-a1b0-8cf4d39e52f8", "sighting--2cfbf3fe-2cfb-4505-8a35-c8dfcd546988", "sighting--348031b3-4095-4ceb-b91d-4cf13a43ddbb", "sighting--4038bc60-8ee2-40c7-8e88-092745124317", "sighting--d53e7c61-23a5-4040-90ce-3733e4f66ab3", "sighting--90f69f7a-1b1b-4e4d-a55c-5ba321c13807", "sighting--5de07866-b953-45ae-821a-a15a230d4659", "sighting--1984b9f2-b78e-46dc-86cc-7c91051838cf", "sighting--a21aaded-ff07-42e7-a0b7-8b3ef8647af9", "sighting--e15c1938-a552-4baa-9597-f95e66a24bcc", "sighting--009697a7-0027-415d-92a1-be331cfa0221", "sighting--e5a3cf1f-4e8e-4875-b954-136b157fe621", "sighting--b916fca4-adf5-421b-bc1f-f33e18dd94ca", "sighting--46edefde-92bf-4469-9a28-84a940fc64b6", "sighting--e4dc51e0-84bc-4598-bc87-b4b97e4a40f0", "sighting--590ad370-a8a1-44d9-9ef9-3a957913f46f", "sighting--9d43ae58-5cf1-470e-b519-626a7f510a4e", "sighting--726592c0-2368-4df7-bffe-d3cf95dfe5e2", "sighting--69a47ffd-a946-4f81-a5d1-e367eb9f1946", "sighting--68d8cf9b-03b1-4b33-bcf8-69cc758408a8", "sighting--14195965-1daf-4073-926b-abe8b14eb325", "sighting--df69d782-f3e5-49b8-8df1-0d70c0fe75f1", "sighting--ffd0ee09-2a41-4cd3-ae79-6c011f80406e", "sighting--e813d9f9-9a4e-4540-89e0-c0d1406832cc", "sighting--2b541a4e-5958-4e75-a7b7-241ac287b023", "sighting--b6116b7a-7f77-4123-8418-d1de831323fc", "sighting--48c7997a-ab2c-485e-a790-726449f495f0", "sighting--b5ff001c-3b67-42ed-88f5-3fbb4068dc8f", "sighting--0336766c-674f-44ab-876c-287957c235c2", "sighting--59366a02-5611-4aad-9d43-eed92fbe6cda", "sighting--ed056179-574d-4f5f-829d-cac97c0d0b65", "sighting--ba45fdca-ca4e-4997-9f0e-8822ad8dc36f", "sighting--6f1f0429-6c60-41a5-8f73-3bd22f6e4b41", "sighting--bf85495b-aec6-4018-ae6b-7021232d25c1", "sighting--15be1549-8e73-4fa1-b3a5-0c740d0fa1e9", "sighting--4d722b16-16b1-476c-a553-741a0031c6ae", "sighting--fe8bf24f-6581-4b16-b04a-0786882d3840", "sighting--86b0abb3-46be-4093-80a0-613adfe0eda7", "sighting--37e75388-1ba4-46de-87a3-4b1b91ab8bdc", "sighting--7d5ca9bd-70bb-4431-b004-0a2463857915", "sighting--a2a0c152-705d-42a9-bdc4-ec77df5a1ea9", "sighting--08bb5c29-3cc9-4089-affd-4b36f7c52c48", "sighting--dd4a9760-cd20-4f21-b649-c28ebf40ab0d", "sighting--0d13ae67-95a2-441b-bcef-f3c6cfdf061a", "sighting--11fb34be-76b8-4e0f-8d66-99128d089d84", "sighting--38bc4b29-4512-422e-a9e0-1a9f1e1da1fb", "sighting--5c4d179a-6aba-47ba-b6ec-5e59af8237c9", "sighting--0299c33a-d577-4318-b2c4-6f9a11cb3739", "sighting--50653bb3-fa96-422e-83af-6a5afc92f6f7", "sighting--53d53ee9-f1b2-40d7-8c03-5509253dbef7", "sighting--c6fe12ef-f146-4b15-a780-c31233162e23", "sighting--7b6a0946-ac40-4ab7-bb92-33157a46a614", "sighting--106a76c6-2b4a-478a-901a-11966c2d748f", "sighting--d049c475-e8b9-4ea6-b969-218716dbe1ed", "sighting--9922ac58-0a48-479c-b665-2946d3de06e2", "sighting--a8cd0395-adc6-4788-b57e-382483820c46", "sighting--21944c9a-e929-43a5-b8c4-8e8177a41f26", "sighting--b6b6b0c6-14f6-4245-8e05-916e691a914d", "sighting--e368207e-1bf2-42ec-9250-7792a8a4a913", "sighting--61daf9b6-6cfa-4569-acb8-becbdff8de19", "sighting--0bd3d5cc-2be1-4cda-938b-b579af3f2e8e", "sighting--7d4d55ce-ee6c-4e6f-8d14-2896c13f7087", "sighting--c6865305-bcf8-4ada-a055-e22d2f57e71e", "sighting--7c1603d2-069a-4e94-a79e-ba7452dc9dbe", "sighting--fbaa8107-ff0e-4d80-9d14-a5ed66aa16f9", "sighting--cad38ee5-da4f-43b3-92c4-6e8693324c50", "sighting--25541d5a-c8a0-405d-9802-98558a15fb60", "sighting--be51d152-b4dd-463d-8086-d6e5344da39b", "sighting--db9fdecf-3a20-42d8-a83a-d39c08db3bb8", "sighting--8965892a-78ea-4476-a288-f288173ade18", "sighting--1c8ce623-7adf-4234-a006-c4129563decc", "sighting--83211bf9-1152-4af4-8be1-245ae83455b6", "sighting--bd424277-e114-4e4b-b07e-21d5a9535b8d", "sighting--4178df3a-2440-4762-bb80-4e2b80c71082", "sighting--0d5696d9-f559-4139-ae98-82d68cd69ce7", "sighting--ae7cdd94-128f-4f5f-936b-994b25930c1a", "sighting--41bf2086-1ddb-4a34-a726-694c33a410bc", "sighting--324a52ae-eb51-4947-ae17-942636fb0f87", "sighting--c221925b-f0ab-4c9a-8cac-4a46d15dd83f", "sighting--edff8ad0-3499-476a-a3a3-cd805d532197", "sighting--593cd54f-0555-4cfd-8c5c-2324ab17fc6b", "sighting--ed65efa4-0680-43f0-9755-e74c6f798504", "sighting--e0494bf4-a379-488d-ba0b-e55280843839", "sighting--2ad32ecf-e78a-4de5-9065-c072795bb57d", "sighting--dc15b863-79c9-45e3-971c-ceb8eb24541c", "sighting--4d59d331-93bb-49d3-b8c0-d8db6bd4eb8c", "sighting--1454beab-1d02-44b2-884b-17a6bdb99da2", "sighting--e8887d4c-45c1-422d-8678-3c8d0ebf53cc", "sighting--7404d36b-4a78-41a8-95d8-8c7454ff4906", "sighting--33e6efc3-f0c5-4555-a3b4-92ca8ed7b3d0", "sighting--749e92f2-7b6c-4f53-84d0-26fbe6d5d4c2", "sighting--a15a125b-4f50-4dee-ae4f-f88a45a3f54b", "sighting--81a1c4b5-0250-4b60-be5d-e336ced99f17", "sighting--f1e2315d-01c0-4f54-8e25-59ae64bd60a1", "sighting--b1777308-11a9-4200-b052-5ae7a3106a63", "sighting--c4c67507-0e03-4b33-aa7a-acd9d713ef74", "sighting--1beb12f2-6fbf-493a-9c3e-33ecc19adc90", "sighting--75775aaa-546d-45ae-9095-0a14f3ea8db5", "sighting--864aa1b2-f5cf-4eeb-85f1-2fea791760eb", "sighting--115dc704-779f-42b1-b2c0-526413401747", "sighting--f0364dbf-1188-460e-b13e-8e2b6cc42c2d", "sighting--f7a58728-dd3c-4daf-bfe0-81f144aa1524", "sighting--719fcfc6-5d60-4455-b9cd-1a6199c90e37", "sighting--cba98713-ebf2-42b7-a183-0a9ffbb1232b", "sighting--c18fec3c-a6e7-49be-a215-68b29d0c835b", "sighting--ea5bb255-be6a-44cc-92f0-030e26592f54", "sighting--55f5e286-6b19-45c5-be2f-177d1e50e3fb", "sighting--2d51b3e4-5b2d-4212-8e2b-8ecf0a626e57", "sighting--5e685dd7-dbc8-428d-80bd-b173378d528a", "sighting--baf6618b-3ed2-4398-bfd8-1744fbf0aa76", "sighting--30d3595a-f6d8-4add-83ff-e173a3ece557", "sighting--3141dd88-de7d-43d1-9162-78d038ffc0b1", "sighting--ec36d957-d783-44b2-819c-cf2fbd36a0d0", "sighting--cc0798e7-b844-45e4-ba59-778f85816f54", "sighting--5d96e88f-dfb0-4be8-860f-12080e32371e", "sighting--ccf03b7b-ee21-402f-b0a2-9ca4640c6f58", "sighting--236cc9c4-c457-4640-8c7a-ac366ea5f922", "sighting--288c7181-1e8d-4e4b-b128-2b4dab175051", "sighting--6cb84115-ece8-4f99-8334-aa13fdfcf223", "sighting--09a8effb-6f48-4312-80d1-f9e18ee041cc", "sighting--67409d8d-1b23-4257-8552-079ba055effb", "sighting--993c96a6-40b8-47c9-95a7-98020547ee16", "sighting--9e7e4f7d-3d45-4601-b945-4b5e5049b02c", "sighting--60edf2b0-a56b-4be1-b3e3-c2573c6aab8e", "sighting--b5c29f79-050f-4477-80b0-7221baed1e7f", "sighting--ffc87773-76ad-4959-9f41-4acf1dcef131", "sighting--f7ab723f-f063-4414-b46f-e22942fb6e71", "sighting--acaab475-7264-4be2-9270-69fc516fdf82", "sighting--4296b56e-9eef-4d39-9c13-53ffed88ca47", "sighting--c5d5e76a-c46b-42df-ae72-356feda505be", "sighting--7c79cfab-1138-4a62-845f-b46e5ed1ccf6", "sighting--e304be60-d80d-4c38-a038-b16fe9841b30", "sighting--9f59be7b-96f0-42c7-8825-6cda659d32a8", "sighting--14993713-e45c-441a-b623-f6a972665e4c", "sighting--513bb838-5187-4360-8516-5bf5db8eeeac", "sighting--26506b48-408b-4dd5-a696-08790ea2ae35", "sighting--33c9a6ff-c1e6-4d36-b50e-a0fd0a594510", "sighting--27f3881e-4635-49ab-9308-e1cf6a0dd3cf", "sighting--08cbee5e-45f9-454f-9e94-e1955797c9a0", "sighting--8147741e-1f16-472a-813d-19c839bb294b", "sighting--0cd24fb0-e663-4cdf-8b97-959b9c3b8fd7", "sighting--e3ae1110-6f93-45a2-817f-570bda9fe4f4", "sighting--5d2e0e25-bc1d-46ff-aa8e-498c71d03b06", "sighting--5c8a092a-96ec-4e5c-b70d-f3723468ebec", "sighting--73d48b48-9d4e-417a-9fc2-70cf6d06bc92", "sighting--64caecc3-730f-4102-846e-1fe4f7d05cf4", "sighting--1a5692fa-8851-493d-babb-ab8e70eb91ed", "sighting--a2c32b36-1eb9-47b3-bf00-1db1302c0b78", "sighting--4dba3310-34bd-47ac-85ce-1c258b68ccb2", "sighting--df7f90d0-88f9-4636-9f07-a831604f0a0a", "sighting--c3e83c0a-c948-4c2e-b320-675e67756fb2", "sighting--2bcffd3f-3e8c-46c6-b100-ad83b1418640", "sighting--c9974ee8-7d0c-4536-a512-f950bafb5910", "sighting--034533bd-a55b-431f-864b-c0b98f53fcd1", "sighting--a8cb2ca1-91f0-4366-94dd-bb4683596bf6", "sighting--1b6ed171-e590-4376-b1ad-d56dbabe9dd5", "sighting--8d4c885c-bf47-4298-83b0-1fd74d913f76", "sighting--ba4706ff-3110-4961-bb6f-406f4b6af7b7", "sighting--e2ec2c1f-343b-4b7e-a7ec-1452fd4c8677", "sighting--a6b46bab-0f0e-4fc2-9eef-1b84c18aa5e9", "sighting--2465ccfc-28c5-49f8-991e-7b5d4b031deb", "sighting--1478ff04-83ed-4570-9d33-f83008cfd9bb", "sighting--be94c758-29b9-4763-a5b6-363319721bf5", "sighting--d8a222ce-7ed4-46ea-a946-416a272c76b5", "sighting--3123276b-9f8a-4df1-bb2f-bfcecbb99b2b", "sighting--cd7cbac2-48d2-43d9-a4a8-d0c1f4ef1ce1", "sighting--0160441e-2e08-4efb-8f7e-8977bf4efa1a", "sighting--dddf7ca4-da4c-4a6d-93fa-a91016ec6ba2", "sighting--d72ee75c-eaf7-4800-b8d4-6b190f00cd7f", "sighting--63c55e25-2244-4712-9e10-564a32e69d83", "sighting--7b67c17c-5e4b-42c0-aef4-8947578c6090", "sighting--485f811b-8002-44cb-b72a-8d29424369bf", "sighting--112ddf03-e073-4c29-9270-6b116875e3df", "sighting--e3b0bc4a-0989-461e-aae3-ca3efbacabb3", "sighting--468dcc6c-d0ba-4da4-b970-009afc80624f", "sighting--c4e45649-a92e-4136-a69e-6523a660b05e", "sighting--9f5b4c0e-fdda-4ef1-bb24-fb5c5b9a42a2", "sighting--68c52538-6c7c-4b58-a0ff-4cc218b3907c", "sighting--3ffda239-d457-43d3-a97a-6f11e54a84d0", "sighting--9a3122fd-d296-4e9f-b1ae-a84ca8cf2df8", "sighting--a4ac8bed-fc98-485c-a051-afa0c76edb84", "sighting--c81294b6-3a9a-49f9-b306-2df4e76c92f2", "sighting--879387da-f0b9-40d6-ab1e-d03278b9f034", "sighting--85e97c8b-621e-4248-8e23-04f2d27fd02a", "sighting--21de2e49-3b72-4934-9ae7-61738cb941b8", "sighting--2a534d6c-fb5d-45f7-9d14-eeae72cefa8d", "sighting--d79fd646-0cfa-4e62-aef3-72bb66bc488d", "sighting--57324c7a-6400-4b1d-bd3a-4a8ece36d2d6", "sighting--38acdc92-d0cb-46ae-a984-df930ea4b087", "sighting--69108f41-7538-4b80-b100-a3367aed2ccb", "sighting--4a718bb1-a758-48a0-b638-853d3fcd4fb6", "sighting--23f8b291-fa68-4672-9631-e49a09c2636f", "sighting--ecb21d64-fba6-47f0-8faa-1f63042677eb", "sighting--c3198c10-9892-4806-ad93-1b759f0dad93", "sighting--f8abb06a-ce4b-4356-9388-b36a925873c9", "sighting--e001543b-ac5e-4614-bb71-838c3a21d00d", "sighting--a685cea4-5f1c-40c0-867b-e9e8877c065f", "sighting--23f29956-3c57-4138-acd3-91fd63ee4d39", "sighting--fa1a70ad-8ad9-4296-b76b-f54ce80cbf97", "sighting--895e9900-e3af-4c14-8630-8cb5714f5dc1", "sighting--d2389f9b-ec38-4637-bd68-4902d394b022", "sighting--e19b4435-5bc7-4c23-8200-63a1c8aa5fe8", "sighting--d1660d07-0d90-484d-bec6-9d2305d79896", "sighting--c601e223-a78e-464c-8b98-11cbc7351bd6", "sighting--a2464b1b-cd1f-4e92-9209-edf9f411eb97", "sighting--93207c19-ef83-4ea7-8eea-e3f1b82b309b", "sighting--2eb8238b-4e34-43b4-abe7-14eb2d493170", "sighting--22df7f87-1056-49c8-8248-b2700bd90b8b", "sighting--f382f5fb-2b5e-45a5-b021-575fe5ccd35e", "sighting--274666f6-2f33-40d5-b9a2-f49054b43b3e", "sighting--b4735bd6-d6d7-49c9-8c86-2f358d790556", "sighting--24d03ef8-0747-4cbb-8cd2-013031c5a733", "sighting--a0d5c6e2-ea77-4a8b-8fee-d030b9e158f1", "sighting--4bec92ab-adda-4ac3-afb9-4ea16aa2d165", "sighting--1ed46513-4a5f-42d0-851a-c61504b57dcc", "sighting--da02705b-8167-4341-85bf-f02cc7a8c8d1", "sighting--c3aacd8c-6937-4e7f-8d77-c42d1e1db329", "sighting--5da1aa94-9ca3-487c-8583-9b6a56852475", "sighting--e22ea841-4963-488a-97ea-c3fd3c162311", "sighting--5d3825f6-df05-4c2c-8ca0-9fdff3acfa29", "sighting--25fe04e7-29c6-482b-b0c0-63d80aa29d3b", "sighting--cba9ca12-f963-41a9-af21-ec8d0a4c21aa", "sighting--d8f1e2e4-87ed-427c-a152-18e5e1d2f870", "sighting--3b27e4f4-de1c-4f32-b58d-fb3853c8587a", "sighting--40a10344-f5e2-482b-97f5-f0ef57ad8b3a", "sighting--610cd66d-1458-4abf-a5d8-c8832a5305b8", "sighting--b18c03a7-a60c-4100-8599-673413e7a8d9", "sighting--b9e76aa7-9c4e-4433-8dc0-2b51a8575795", "sighting--27d02c14-31a0-4889-a848-cec93643da81", "sighting--34530974-060a-4e68-bd35-cf2a1c203c13", "sighting--b8e37768-676a-4c1f-a739-100fb9ff03d6", "sighting--36ee9d5b-3541-4f98-9003-5e86b7341bf4", "sighting--8e1b34ae-f029-42f3-ba26-846075199c9c", "sighting--c6fce296-6ab8-4354-9f01-c42693ea40fc", "sighting--e31906d1-be1c-455a-8afc-95495bd9ad96", "sighting--b9e5138e-b31e-4f0e-9689-49aeeaaa181f", "sighting--10c4974e-d06f-47c8-aaba-896354830974", "sighting--79ab22b0-1085-4bab-91fe-d46489a76bac", "sighting--7aeffb9a-834c-4117-a068-d3ddced0188e", "sighting--727797d6-fc22-4bbf-9d9e-09d7b0f5f458", "sighting--bdb9618f-15e3-46a8-810e-563686f157eb", "sighting--638c7a86-245e-4443-a3de-d88641757010", "sighting--37ce65d9-4e5f-4175-be94-d966c5094655", "sighting--0cb955e0-95f0-4048-8c71-bea945747691", "sighting--b3a48075-b214-42a3-9649-609d80425fef", "sighting--b5837edf-f30d-46a2-a119-463560f68b52", "sighting--5c515e57-7339-40cd-8f1a-517022cbe27c", "sighting--e2571238-60de-4a38-97d4-b7ba7b714840", "sighting--c3c295ed-c552-4106-99e9-f8a9e1ee6b32", "sighting--e2144fd1-c55e-485f-8e63-74447b313309", "sighting--32f7f2de-b49b-4f69-9d5d-418fbe44eaf0", "sighting--a090891a-7066-4347-bcd6-47317df977ba", "sighting--9b1b21c2-81b4-46e0-964c-38dc0bfbdedc", "sighting--aac9d47b-9c76-46e3-91ab-bc5807a461ea", "sighting--6f87e12d-d155-49bd-ba69-1c5cb79b114f", "sighting--2d4a3078-b0f6-4f3b-831b-0408710d0927", "sighting--224e26c7-8b64-4e2d-b16c-c3aa21c7f54e", "sighting--f99c49b1-c824-4b2b-a193-90d332792146", "sighting--28934e82-ae7d-4f79-bb37-d8be368f3533", "sighting--973ea096-855f-4466-ba16-5803b75a8b86", "sighting--72ae277c-d19a-4edc-8124-5c42c998cba3", "sighting--dd05fce7-b857-4012-867c-ade94f897217", "sighting--f29fd713-1b68-4d47-b382-5cf79057a163", "sighting--037b571e-a757-4166-80d0-badbf9f9f1e1", "sighting--9a84da2c-c570-4613-9c2d-ae67fc826242", "sighting--d10836d6-2cfa-425b-9ab8-c1d064d1e9d5", "sighting--73724af8-8ea2-4b98-8f66-9178a61480db", "sighting--4faa6647-d137-408a-aef6-6736f5edeb41", "sighting--bbf5557f-1bd0-47cb-9a93-ed101ad11dda", "sighting--2967afec-ed71-4c96-8fff-2aba7e614e8c", "sighting--c48cb914-4db5-41e6-9b05-c24bb20e44cb", "sighting--bac6ebc0-9027-4444-a5a4-5466d85b2124", "sighting--a1d47edb-e739-4276-a249-46b6f2889664", "sighting--5b03d714-d19e-4d95-ba45-d3858a16c946", "sighting--091bd607-8a76-40d1-a036-0ed62aeac67c", "sighting--bcce6c9e-7df0-4c49-afc7-fffcc441393e", "sighting--e7ab4599-b3bb-4356-8a21-89dd02908a27", "sighting--66976bad-e507-436b-9a55-9cffdeef6344", "sighting--01fb799e-8a31-442c-a5ee-7da31b4ed8de", "sighting--4b734364-3c29-4d8c-9dee-039b048a0dda", "sighting--68b456cf-5c9b-42c6-9b3a-1c4e2bcad388", "sighting--ad33a805-f223-4ce4-8c79-ee4558195251", "sighting--2eaf79e1-7020-4058-a85c-19e52c6bd0d3", "sighting--6ab73bd0-f1a9-4a38-b2b0-f337da575bff", "sighting--cd974e95-fea8-41a7-84c6-44220550d6f0", "sighting--aa5e39a4-d5c0-4ba7-9a3e-570779a82423", "sighting--d9e36daf-db99-4d45-8085-ab3a6fed27a9", "sighting--116b3dc9-9e39-47e9-ba4c-2bff91455834", "sighting--1bb8e7dc-9d04-414f-9530-4b3eb6a2356a", "sighting--258852a2-b56a-4764-b243-4fa4e21f8a85", "sighting--95f7c4f6-008b-4b39-8972-5156c09c2e79", "sighting--d81a29cd-5a2a-446e-956d-e0ea80487f2d", "sighting--20bfbe8d-f155-439e-a107-d193ecdeacd4", "sighting--e1ab705d-ec4f-4ab5-9094-7f3c649cd263", "sighting--7019407a-d144-42aa-99d6-92f299db06ff", "sighting--7f3cb325-8f2a-43f1-8454-6be5fca1ad68", "sighting--e21106b3-90c4-4bec-a24a-2c02485fdc5c", "sighting--66d2ff2b-79a4-4cb4-8d23-9bc3f99031c0", "sighting--aaa3277d-54b6-485e-975c-621e575d008a", "sighting--0db92306-3dce-42a3-968a-c88a5df89a5b", "sighting--a9823068-1b6c-454c-b39d-e082d06ff47b", "sighting--e4a4c9c1-77b4-451b-806d-01ccd729b710", "sighting--886a2b50-0248-442d-a809-a375081d096d", "sighting--4fbfb302-fd5b-4138-a702-2368c6939ca7", "sighting--27ae071c-4fda-404e-bfc6-bfaf397061f0", "sighting--f389aaf8-4c76-4f23-8c81-fe0ca12fb9b7", "sighting--8476bf90-bff1-4707-9490-f6f9875282f3", "sighting--78d41123-5825-4eb5-9086-d69ba0f35ad4", "sighting--7ab271e9-0ba3-44c3-9f43-4514c2d37176", "sighting--877780c8-8672-4306-a705-f06bc6a7041f", "sighting--9785976b-b3d2-4103-9a63-81b66486809a", "sighting--61dc6c29-8e3b-48bd-9f64-a103b30b636e", "sighting--faaca7b8-e41e-4476-a039-144aeab0dfa3", "sighting--45d394c7-ff42-443b-855a-d9c3d8b2e427", "sighting--a36b4d8b-6f89-410d-a2e8-fe3f0c6145ac", "sighting--5bd0cee1-bf6a-48b8-9bc7-6f21534c9844", "sighting--d262694b-29da-4323-8aea-2d14f719cf19", "sighting--c9c54500-a48f-4f9c-97d4-8ed34fece6b9", "sighting--f8cd8cf3-845c-434e-9456-ec9740c2b991", "sighting--7c386a8e-9f30-4b47-ad36-21a52152f365", "sighting--80640dc0-ccbb-450e-8268-13521f8f7c95", "sighting--1e2a1304-1cf6-4032-b51f-6eddd4037bbc", "sighting--0239ed4c-b1e9-4621-8ab2-1e0e328b1447", "sighting--685eed4e-8a3b-48c2-b27f-44343b85e625", "sighting--93f97d62-1cb3-44a8-92ff-fd840a7bdf58", "sighting--fd2149d1-056d-4fa7-b6c5-3a28e632ae93", "sighting--922d511c-d35c-414d-8ef1-cf53ac4f4879", "sighting--03057bd5-19c9-4939-8631-246105dac0e6", "sighting--22fdf6b1-6447-4151-86d9-e0f9673f9301", "sighting--ebf4ec1f-92ee-403f-a646-1339d565c8eb", "sighting--df23d065-0fbb-48d6-9db9-e4ae1ac8e460", "sighting--e961c247-5ed6-4cd2-8c8b-9dcaa92f5c03", "sighting--6c75b9a2-2f6b-48fb-b9ab-b2f2f304a5aa", "sighting--c18817d1-1084-4e15-a1d8-1ea36a2668bf", "sighting--d125aa35-630e-4b82-975b-94e7bcc8bad3", "sighting--91f15f6d-b470-45fd-968c-dc3108e02707", "sighting--5f21df11-58f9-45d9-88af-96eaec55d7a1", "sighting--3dea06fd-658b-40bb-936d-c835bbb0f35f", "sighting--e2c3f070-3777-438d-8ebe-9e35f81d4143", "sighting--77451192-82f3-4e86-a543-eecee9ab5a05", "sighting--acdee0e6-d417-4c52-944a-3f90255f9a4f", "sighting--56c2d324-396c-4801-b88b-3e88d535d130", "sighting--754e6ea2-199e-45a8-a428-7d073ba4e636", "sighting--199331e4-e6b9-476a-af4d-a1d7273dd408", "sighting--54669c5c-f8a0-45dc-962b-6d06712690bd", "sighting--039badae-4b9f-49cd-8fb8-11ab169d780a", "sighting--249a1d6c-0df6-4cbc-9b4a-c08d2110335a", "sighting--9694054b-cffa-4e94-b434-9d1d00c36f86", "sighting--2f40d313-048e-43cc-9a0b-efa1e9d8c418", "sighting--1c4f7fde-27ee-44ce-9964-eeed2393580b", "sighting--2c495272-517c-4424-ae25-c0dd21ad5b98", "sighting--8bd13be3-b9a7-4db7-8b69-274b0ae5da69", "sighting--e489cef9-fcec-4c69-80ed-b716116547c7", "sighting--56966591-b9aa-454a-a050-3b74e7bae2d5", "sighting--5ba02331-a413-4f05-822e-f1dcc12bed45", "sighting--da8bb57c-da84-49fc-937d-3c652c915518", "sighting--8b806682-bcf3-433a-912a-17a90260f599", "sighting--0112fa59-5695-43ce-89d4-c74bdbd2a3b4", "sighting--3a76ff2c-ddf6-4160-bbbd-6d94f8cf1456", "sighting--6bc01633-b8b4-403d-8d04-848d1cf8b7a6", "sighting--667649f7-6368-4266-8eb2-8d448c49ef22", "sighting--0d5fb356-3ea9-4ba5-9c1f-6db515564cb2", "sighting--e6d9f54d-ab9f-483c-a43e-e0bc605bd57a", "sighting--5206a237-a159-49d8-871a-36cb95d8654a", "sighting--fd1c13fe-a587-4de3-affa-ddc6f12d3669", "sighting--d4b311d9-d68c-4ec6-b9a0-cb3f827f69ac", "sighting--f0641f00-8a08-42fc-b583-730ce585a73c", "sighting--804ee8f5-7d41-4835-9583-f071a7631413", "sighting--3e25a64e-f265-4cec-8ff0-80d957e53812", "sighting--c23df86e-5281-4645-9cd9-3a86e47360ca", "sighting--300586cf-e36a-43ea-b4ab-e46a71afebbb", "sighting--db2aec95-9184-48bb-bb59-e1f0994ef9d5", "sighting--622c8e18-b791-49f8-b806-d4aa9cd9f104", "sighting--8215da17-4e1b-4cbe-b4fe-149a34c817c7", "sighting--c00b8050-90a9-43c0-b5ca-7db9db893f27", "sighting--0601e45e-6482-44fa-8f69-26d78a482c45", "sighting--ea8612a9-b0f2-4626-bc24-155c18a75143", "sighting--d9d4dbf3-ae26-42ba-9f4a-5b8710301b39", "sighting--a0cc97b4-bbc5-449d-85b3-8674474c8819", "sighting--6f499c76-c65f-445d-8ca8-6f4895e26ba8", "sighting--104c3db0-13c2-4ffc-8b1b-2573bf117aeb", "sighting--8d522ccf-a526-4d07-90ac-50f406329776", "sighting--a0c47953-3fcd-4477-a62e-fa02dea9280f", "sighting--50ebe6bd-071e-4ee6-88cf-9365d6d3d8cd", "sighting--3589e57a-d7ca-4d63-af30-b2d4cd987b59", "sighting--418eb8be-a4d3-4acc-85b3-fecafe030ac1", "sighting--3314fa82-19f0-46a7-a68c-36e73748541b", "sighting--6df8fd44-74e8-4fdb-8e77-70f8594bf7cc", "sighting--73b8d4cc-c803-4859-ad49-eed4f0a8249b", "sighting--3de44e0d-42fc-4497-98be-b9e562fe80c8", "sighting--36438097-125c-49be-a7b8-bd26b20d32ff", "sighting--25befc7d-6822-4da3-8f38-65017ab2660d", "sighting--85d78bd4-aa7e-499e-9276-cc18603ed911", "sighting--82651ff6-6c5b-44af-95bb-f97d35563a87", "sighting--78b6e5ac-9306-4e5f-bc38-e31934195d65", "sighting--ad8597ff-167c-4149-a054-860ec56f56f0", "sighting--4205c82d-d1df-4eb7-88de-8015e18d3d8c", "sighting--410bf3d9-f284-4b74-8852-5485ac1a597b", "sighting--2fa1179a-7513-4896-b944-472c69540512", "sighting--2ef9f7c9-19be-49de-b6a3-e109171137ed", "sighting--14a070d9-d9a8-4cdd-ac38-bcf56a2107c0", "sighting--d6d704e2-de17-4359-9c3d-1b08798b9b52", "sighting--2e37424f-4bbb-4eb0-8ed6-70ce13fcb842", "sighting--77e12a80-563a-4373-a42a-a20598d5e390", "sighting--4879c201-83f1-4a35-83c5-eee836e36634", "sighting--c48986d3-d0fa-4cb5-a29f-20978eb34ca6", "sighting--e5129515-46bd-4a63-9111-3383d858446e", "sighting--6b466e10-8ac7-4e5f-bf71-b8067b39c0da", "sighting--e7a88420-6ee3-45de-ae12-842721a62088", "sighting--94c11204-9c20-4fe7-b3d8-e93a148cb8a4", "sighting--a3861aef-fec3-449a-932b-784809bd5954", "sighting--168e0d5e-e9eb-42cc-ba44-40d6d599b305", "sighting--a1f3b963-ee48-48d6-b5e9-6d5c51b53bf8", "sighting--ea71e044-d3b1-4b3f-8758-8245771d0d71", "sighting--7f309b82-98d9-40ee-8e0d-5168c5a0c29b", "sighting--df15afd8-ac31-49d9-b833-5d42de816ad1", "sighting--f64a24a6-3535-4d6d-a8f3-ed966cbbb238", "sighting--76927046-8544-4a44-8fe3-2517f33bd464", "sighting--6a583a79-6b24-499b-a715-185fa544953d", "sighting--13d7bfd5-df29-43f9-8784-058932787302", "sighting--005f5786-6eab-4b41-83e2-8478c062fcc2", "sighting--2364a1e9-5632-43a1-8522-0fd441f92d3b", "sighting--818bd778-7abf-43c4-9d60-a87ebcaa9820", "sighting--52faa36a-ee8b-445b-83c5-4d337fa2e4a2", "sighting--9bf1b718-5539-4ef8-a9f6-58cefc16aa54", "sighting--328f4de3-2340-41b3-8632-f9e9c4a2c88f", "sighting--80a31904-21d4-4abb-8f93-e76e0a7af321", "sighting--4d700643-1b20-479b-9deb-9adfcaffa16c", "sighting--265d8c9d-daa0-490b-9324-c34d59d77e19", "sighting--8e0db5d6-a0f2-461c-97b2-701a8df444f1", "sighting--bb9db59e-d544-4df3-a090-2d21a2c1746d", "sighting--7e0b4306-4999-48d7-a8ed-284df8612624", "sighting--0a759dd4-44ab-4072-be07-c2f20fbdb13d", "sighting--6a135bb2-a34c-4d3a-97a5-234e942f0b41", "sighting--adf89d21-ff83-4e6c-8bbc-d91abb4274cb", "sighting--dfe232d1-dca6-4150-a643-89012f3a3576", "sighting--2510c93e-cc4a-46e4-b8c2-3c1690d9d20b", "sighting--3bef597d-0b4c-4435-984c-03a4dfd9a7b6", "sighting--0a79fdea-873f-44f1-994f-2f28f0a6b015", "sighting--79a68dae-1e3d-4aba-b8b7-2544df26e84e", "sighting--03e34a90-fcd0-4902-9c10-2dc8eee216c6", "sighting--0991c9ea-8efe-421d-8fd1-12452a93a586", "sighting--a9244978-3d46-4984-a46c-17e169e98d7a", "sighting--9b2f4e2f-e2f9-4d63-94b8-6969b5d94528", "sighting--3fbe4d80-a447-47c7-b82a-fcafb4b3d23d", "sighting--80a79551-519a-4016-8d67-0718f52fd632", "sighting--427568ce-a5fb-415a-9402-5393e656288c", "sighting--797ea60f-e283-499c-8de5-eb4f77314645", "sighting--3c427de1-e352-4413-be74-b669e6baf381", "sighting--d15afd6e-411a-40ed-b0e7-fc05931d4ed8", "sighting--e936853f-4188-4aa7-ab0a-319851e4a187", "sighting--2bb2dc74-d754-4436-a2dc-c14347c26be5", "sighting--c4b3d2bf-7f2e-459c-9019-94427f25d3ed", "sighting--e1e2df75-95e8-46ca-b499-cff45f1b2fca", "sighting--dfe8cb47-3f61-46f5-929d-07c5a9b89a83", "sighting--33462e0a-a9b3-4c8a-9d8e-903b03309d18", "sighting--5b3d805b-4125-445b-9f2c-5cef28c54229", "sighting--9bd7c473-6014-4aa7-ac2a-f2e5cd62c6ae", "sighting--93479921-85bf-4e71-8ce3-3b01f3fb0d74", "sighting--a3097417-65a6-48f0-a20d-259ce1d5e3a5", "sighting--b0b4b094-e031-4349-af37-c6b1dfc9d113", "sighting--eb1e25cb-fe3a-4706-bde6-465002f04d47", "sighting--bafe1a49-85ae-4701-95c0-09d879403449", "sighting--66a235e9-29de-4c6f-8149-21c36374f9aa", "sighting--2a9facce-ef75-4dd0-9d51-6be2bf1b8016", "sighting--9cead250-8b33-44bb-af3a-0ad108168e9c", "sighting--9533c0c1-54f3-40d8-a20e-0de8f58b46e4", "sighting--c6311926-613e-4e3d-a097-e433fbfdca0a", "sighting--2be527fb-833f-4707-b6ee-fcc2b2a6f3bb", "sighting--472f27b6-f8f0-4a3f-8042-58c09b0f5b02", "sighting--6ce8b947-a065-4dd4-96dc-855567580af6", "sighting--6bc040d9-2c26-401b-a7e0-80328c6f641b", "sighting--f1d03416-d2f4-41f3-9e44-9433817253a2", "sighting--f9482039-2bc7-41b0-961c-e34e4c3a0f44", "sighting--6ea875e9-f0a7-400c-b614-b04bc3141dc0", "sighting--27f7b151-bb24-4b1d-a9e4-3cc1ccdf5cd5", "sighting--74600d85-71db-4760-9221-57f080491d69", "sighting--405fddac-a7b6-4777-a7e4-5592afda7fbf", "sighting--2461e35c-ef27-462d-a295-f795a46985a5", "sighting--fd9341b8-ed6b-4d95-ae69-4696ba775786", "sighting--38d8f75e-bf2c-4341-ab82-1e03ffe79985", "sighting--b7d83eb1-38e2-406f-969f-b78b52b83313", "sighting--e0b3c23b-67d5-45fa-8b80-af0c343fa355", "sighting--46c134fc-c5e1-4d4d-aa66-905448dd1995", "sighting--631cd851-9c33-4545-baed-e46712efc549", "sighting--4e021ee2-12ce-4dd6-90d5-02eab9df39ef", "sighting--ab8ce10e-402b-4f6a-b5b4-0a42b2a9b229", "sighting--407ed206-cc3d-4123-a36a-76d79a7e3cc3", "sighting--6c2feb7f-5647-42c0-935e-6eaef034cd59", "sighting--16d4d924-3489-43b4-954d-e7a8fd8b7bc3", "sighting--095e40ed-7ad8-4e34-b894-ee8cfb467dd3", "sighting--85d5f196-70b2-4d6e-bf73-b296547c2e51", "sighting--888aed12-2262-4237-a527-1cb24362d6ee", "sighting--e68ee775-a2f8-4f53-b8fb-507d5ad65496", "sighting--b3d11472-1c3b-4a44-88e4-5c101857bf5a", "sighting--244f8428-9f79-4c86-a5f8-b9b9f19cb852", "sighting--f322384e-b396-4e75-a10e-8fe0e3d8a553", "sighting--29be4b80-81c4-49f6-a6b6-e00040045c57", "sighting--55c818e8-d103-4cad-9bd9-2481f863e0ca", "sighting--336d63eb-c068-445f-8b3c-7ee5f8967517", "sighting--0d251fa9-9a64-4a1f-b9d4-4f2287eff175", "sighting--972c18cd-d91a-4661-acc7-690b3d37d7dc", "sighting--dc24c73d-6678-48d4-b6b6-6d4a6988e8fb", "sighting--4e6b186a-2b3f-4701-8c17-a3a8255d89b0", "sighting--f2d26a32-44c1-4eca-a77b-4273d313a893", "sighting--b3edc47f-c4e0-4580-956b-e1af3fa54e93", "sighting--579ce647-1b1a-4392-83cb-7ce655eea53f", "sighting--d3e8b1d8-9221-43f4-9586-3e94b910ced6", "sighting--256a603e-e6cd-494f-ba35-a7c6a8709918", "sighting--0c770a6b-ec62-4141-8eca-c6c4096dc4f5", "sighting--f0429d42-c31c-48b5-8613-394eb1e4e66f", "sighting--649028b1-fd27-423e-ad6e-423dce2f2fc4", "sighting--0999e0b9-24ea-444a-83f7-d56e9643ad3f", "sighting--1e037071-54ce-4a47-b362-8f72a0c23c5d", "sighting--7decd6a8-f272-4ef4-bd07-fbd8632a063c", "sighting--5e38d863-8d15-4499-8e4b-121e8448afdf", "sighting--4bb32814-6e52-4856-ae82-87de51261120", "sighting--1be234a3-f378-4e96-b4ac-a07e86c32a78", "sighting--0a51e6fd-7e1a-48d5-b920-1da465aa48ea", "sighting--8eb7f765-5f58-4312-bb5b-397c2641d9b7", "sighting--8116c5d6-a50f-458f-889d-04178f85a137", "sighting--8e4cf727-9395-4e09-ab37-1e9fec981f24", "sighting--a058e9d6-34b8-42e2-9286-6926220c37be", "sighting--c8608cad-369c-4e9a-9902-6fd001cca9e0", "sighting--e63892d7-9137-43e9-8001-6db48313612b", "sighting--7ac63373-d910-4765-855e-4948c7001921", "sighting--1e37f8c3-665f-477a-a5ba-0de35ad18d08", "sighting--bd0fab8e-62a7-45c1-9a44-258a6b2138b2", "sighting--885b1df3-9ce0-4e56-a9f2-4928d5ce1d69", "sighting--0f030e9c-879d-4edf-b8ac-eb7ce3375e5c", "sighting--37685a61-1b31-4e3d-9a0a-495a62f2141e", "sighting--4a00a75e-2c0c-494b-a567-b3cfc9cbb1ee", "sighting--8aefd734-773f-43f2-94a3-75c448e930bf", "sighting--e1769d11-0f09-4f74-b5c4-c940ee956a32", "sighting--50e597fe-4074-440b-853f-62fd807c215b", "sighting--d9322056-33ac-4b19-aef1-82dd61d60b9a", "sighting--bca8ada8-6ac8-4a92-a081-05edc0b4aff4", "sighting--c45ba0b3-ef1d-4f66-ae7c-f809a41ec1af", "sighting--8aeabf5a-efe8-499c-9dd1-c3ef3a72625b", "sighting--a1b49fdd-0cb1-4005-ac43-7b7cfe8a67c0", "sighting--ecd43ac2-0a27-4c80-993a-caac5ed3d472", "sighting--9771f2f6-335b-4c24-8721-349cc8f8df1e", "sighting--963fdffe-af51-46ed-86a2-05103597d2f2", "sighting--270865ba-4aa1-4527-904b-41753e76b0cc", "sighting--3f087bc9-fc9a-4572-a649-460611e38f47", "sighting--cf793907-86ea-45cc-8f78-0dbb44607f30", "sighting--4857ebfd-cdba-4fd3-a0ee-34c78f13072c", "sighting--5a5f792c-963c-4e1b-b008-115d7e52d893", "sighting--34e3988a-b3f9-47c5-bf75-d8f36b362d5f", "sighting--0e885f3e-d699-4580-accf-3c4a26ad82da", "sighting--7da21457-14d2-4cd9-8ff6-9986f608b6d6", "sighting--53d8b995-3236-43e1-a9a8-e36942bb34ff", "sighting--f02be1b8-8f5f-4870-862a-3d05a30903ab", "sighting--80e88215-056b-400e-98dc-372cf63914a3", "sighting--ba01fe42-b4ed-49a3-95cc-f1110ddbdd63", "sighting--0a205a6d-f5ec-426f-98a7-739bfa1bb26b", "sighting--220c7b7a-2310-4d99-b6e2-99257667cdf3", "sighting--3a18b9b9-131e-4a10-9915-bdd9cd6c2fe1", "sighting--9ad5019f-a053-498d-aed1-a20060d2330b", "sighting--62fb2074-6eb0-4d55-8ed1-ec9fe2c547df", "sighting--a014f661-625e-43b1-a18c-e9b74ee552fd", "sighting--6f0db12c-b321-42b1-b246-1eb102807495", "sighting--b369ec9a-16c7-4acf-9e28-dbd0299d6ad1", "sighting--c0bde45b-b3c8-45fc-a642-89d1be063b21", "sighting--6fea73e3-ad28-475d-ac2e-b6dd122a89f9", "sighting--5ddfbdb5-11f6-422e-89f0-7c9270a66e93", "sighting--752da5a0-8d8c-4314-a68b-60d5739345cb", "sighting--aef9d530-99ff-421a-8206-c7a324c7e759", "sighting--b7b798f2-867d-44ed-8d60-438a4ce8710f", "sighting--d23d821b-7007-4916-8c05-803c7d1c5182", "sighting--0cc3157d-7774-47b2-8972-2e9338799047", "sighting--dceba83c-d915-4fa5-b942-743d16760c0b", "sighting--e2c31557-51df-4a74-bf00-1e00bac02bdd", "sighting--0b3c9464-e3b3-4ae4-8fa0-2f92d2e966eb", "sighting--bff028c8-dcde-4ec5-b18b-ff0aa2571d1f", "sighting--24821611-1b2d-4059-985e-8438db41e90b", "sighting--a00f48d7-c2ad-4d49-9a22-c8cdfd90a17b", "sighting--25f9b2de-715b-4947-a0ff-2181ce974dd2", "sighting--0a1833c3-9a3b-4f59-9862-568be29c92bc", "sighting--1a185478-befd-4438-a8fb-5673c280fefe", "sighting--789b31b8-94b1-4617-a8d2-d8e001605ddd", "sighting--610fbd98-f0e9-4aa2-ae5b-1dd5b3fd8068", "sighting--c7b77df7-c0bf-4d6a-ad45-bf6266b97315", "sighting--eb626803-9def-4880-9309-a77c54ca77da", "sighting--4a0cb9e7-dd59-4735-8c78-18aa8ecd9649", "sighting--347226a9-ce1b-4584-8e1b-694dae5227d7", "sighting--abe265d3-17c0-4e18-9645-89a65bec0622", "sighting--ff4be47b-1ff5-4c9c-b3ec-300da468443b", "sighting--b5fb3314-b372-4265-aaeb-7c44e01bb7c5", "sighting--66acd11f-4b19-4175-997f-fccc0801dd6a", "sighting--1ee1ee07-44e2-4b4c-98be-71ede5e712d7", "sighting--ae858b1f-c320-4655-8e20-0b7792a385e5", "sighting--5ae9261b-4e9b-4334-98bd-b00817530cb9", "sighting--2d9eca9b-619e-44bc-95f8-3ba9593a0e92", "sighting--b2c5ac12-b574-4668-9f64-4e008cbe79bb", "sighting--dea011ff-433f-48f5-bab2-c6763425b2b3", "sighting--c33cafa4-c9d5-48b7-ac8c-562a98145d91", "sighting--00b7112b-a726-4d03-a769-6ab359e60a17", "sighting--92e8df4c-4719-4dae-9c07-83fc851836a5", "sighting--71af1b7c-fb67-4611-ada7-41d89c8b6096", "sighting--c920e774-07fa-405f-bbe2-ab3c7f7c69a9", "sighting--2f27eead-6728-4050-a37a-3098f3227c74", "sighting--a7710426-9f6c-4f26-bd14-8d509ea5f0e7", "sighting--97d45590-e4a1-4968-9652-d08e5f508a4f", "sighting--b15f9bdd-de40-4d53-83b1-ab8df49a844a", "sighting--cb3c479d-4423-4008-8da9-25e0acb82531", "sighting--c468abb3-3600-4220-8824-af7f1605c9c1", "sighting--5d1f104e-769f-4fdb-bb47-b3e9610b75d6", "sighting--61054eda-550c-42e4-9340-bc4b09686587", "sighting--606b7acd-124d-4760-a413-5fb6e2502711", "sighting--306477ad-74e7-4188-8228-6a6ee34a3fb6", "sighting--1f412d26-fac3-43b0-8328-ba934c0e7462", "sighting--ef1dcd88-da9e-45bd-b32c-13d32befa0f5", "sighting--208867dd-e6a7-4e63-993a-c47453e33d00", "sighting--2f8f3ca9-a473-4983-80df-83680ebe153f", "sighting--b90b21b2-57da-40ec-aac4-40344eff9d4d", "sighting--0f5a2a0b-2997-404f-bc8b-b835b2d12b70", "sighting--3c561d04-94ae-4c34-87b2-f4dd3c9fb383", "sighting--9f240004-05ff-4dd4-89ef-67dee998e6fd", "sighting--30a249ee-1214-4efc-a98d-f21529304488", "sighting--3343bfd6-382d-407c-9d2d-e6cc609a5a84", "sighting--bc7bad4c-9c17-443e-b65b-36b0cb087444", "sighting--806a70cc-1920-4a08-8cb5-744a24f41c05", "sighting--ad937700-2d56-4e6b-aa64-90e3577c0823", "sighting--9d5aad8b-c9c7-4f26-82a0-e1d5eca94cf9", "sighting--4fc654b5-095b-4635-a29e-bd969d29b9f6", "sighting--715be966-c3d6-4fab-8daf-e6e51242607d", "sighting--b5b94fe1-74fa-4ffe-9441-f4ffd5400ceb", "sighting--e30cd050-68ff-497c-a7c3-7ebd5eb86f48", "sighting--ed958cb5-6883-4c74-b7aa-58cc1c77c7f5", "sighting--7672796d-fb7b-4b61-9591-a133d5c1b507", "sighting--829f1f3e-898b-412f-9f8f-4f2360894a27", "sighting--bf539dfd-d33d-449d-890b-28974c60b8bf", "sighting--f28c6b22-4410-4563-8115-ee1501e6abc6", "sighting--4765344b-6566-488c-b723-ba4cb58568c3", "sighting--2904944b-1378-4d68-9892-157d65b7c77d", "sighting--48d3179a-2690-417e-8066-5f4e5f5131e0", "sighting--e19e9c67-afdd-4a75-a947-df1fcbbddb92", "sighting--8a5fe21c-3e99-4373-a8c3-8b359480507b", "sighting--bca873d5-6974-4211-9b66-f387ce6496b2", "sighting--22659e15-196b-49a1-80c1-a783a2b7776b", "sighting--22a2e79e-c388-4900-8a35-2ce43a7d3d48", "sighting--f41b07f1-4822-4afa-a73d-84c75b7a6a82", "sighting--6296038b-af58-48ec-85da-b950ffc5b2c0", "sighting--9ceb8f38-e5a5-4bf4-bd85-3d372c8bb2e9", "sighting--78f100fe-0888-43fd-881b-5462f940777f", "sighting--0bc9ca2f-b75d-4bba-bd3a-36b310ed3df0", "sighting--add51b50-521f-4460-ba66-8c987c326037", "sighting--4c875471-3ee2-4b88-a7a7-66cd4e093aaa", "sighting--1047a227-f6f9-4153-b64d-2d9e2695ecd4", "sighting--728904c7-f377-449e-8d6e-bad4f25f6233", "sighting--e0ba8d79-f485-4ede-92e4-fe9b7f40ade3", "sighting--b4a9bf88-675c-4608-9a72-4098f62034f7", "sighting--b5f487ab-acc1-438c-9fba-173ec53381f1", "sighting--0eda80fd-8f48-4f83-92bb-4c279283db35", "sighting--b695ee77-84eb-4ba5-9254-ce430dd7bf2f", "sighting--87abf5f3-ada8-4c2b-b8f7-bcf8acf3754c", "sighting--e93125df-fbc6-4bb3-b213-29da2db755e3", "sighting--fa0430e6-0793-448a-b21b-a50441bfb26f", "sighting--5a1cee09-1a8c-4eab-936a-771d2fafe7a4", "sighting--61ec6011-10d3-46ca-8a14-b8b23172844a", "sighting--884bdc02-b167-4937-bc31-7e91437fb749", "sighting--8f9c08d0-bde6-45ef-898d-52238a3550c6", "sighting--9256bf9a-aab9-498f-81b7-2ec601872d1c", "sighting--e50d2410-295d-448d-9d46-6ab41f5ffcb6", "sighting--0767cce5-3dfd-47fd-b825-03131485b7f8", "sighting--717a83a4-8768-40b9-91c7-f11a48937482", "sighting--d1371120-205d-42ae-8492-2141e068b779", "sighting--cb058c4e-c132-450f-a91c-011f467864bd", "sighting--db8e3e3a-9796-420d-ba41-1ebb07fd0022", "sighting--dbd56437-8948-48f5-a96e-4a5ca4678a5c", "sighting--e5c2bbb5-f338-41eb-b2de-35b573569d41", "sighting--5ccb53e7-ca9c-4490-b5fd-7d82d4f2bf71", "sighting--f356f532-3baa-4e05-88b5-bc77d11fe665", "sighting--12722df1-7214-4064-9af8-9a6d06570ed7", "sighting--01445361-2c91-4d8a-9efe-961edd8be3f0", "sighting--f53b6015-179e-499f-aadb-ddec4fa3a0e7", "sighting--70bdf8ac-b272-4aa1-8a32-8f1cfbcbaed7", "sighting--54aee91e-f8f2-4c2d-9fba-bc01941ed0c0", "sighting--f23487a5-eb18-440a-99f4-d2af61249058", "sighting--cfe4eae9-7ecb-4e69-8a8f-1c3f99b2c1c9", "sighting--169274ca-fcd5-4d8d-bd52-4c8fc57f2ce7", "sighting--04a01f84-4cfa-41ec-8ec8-8ca9861c944a", "sighting--075954f4-0831-45a2-929a-38953ed7eec3", "sighting--343de65f-1dba-468e-8f2e-706f8f745dc4", "sighting--1206b2d7-a7e1-4918-a667-419f2fac4778", "sighting--e2fe300d-757e-4dd1-ab68-7d312620a608", "sighting--521eb37d-e6f1-4417-be38-d726af97f5af", "sighting--b53b8d77-b4ef-490c-b8f8-f9fd5ca9d888", "sighting--0a6ba4a2-e6eb-4a73-a2d8-1124988c1be7", "sighting--b1e8395b-363f-435b-b350-86f3080cd525", "sighting--cf2a5b7b-6159-4a76-a890-040ac72ce413", "sighting--f20baafc-0528-4553-b46c-30cf8c0ff7aa", "sighting--ca8d9021-0dd6-4169-bb8c-2e384949ccf8", "sighting--5a2af704-232a-46b6-93a0-383a3e6e76e5", "sighting--34b6c275-9d75-4c2f-9e67-d6ee1956ba2d", "sighting--fac2a0a3-78e9-44f0-9e92-0fb15e3261ef", "sighting--967a959a-f1e9-44f2-ba00-ebdd7ee6923b", "sighting--57db1a18-a12e-4593-8fc8-bd28a81d270d", "sighting--e364d03d-992d-4643-9975-cc312b6d4218", "sighting--554a1eb2-4946-4cbb-91da-e07f38e33f9d", "sighting--ea66dc2f-0dc0-4569-b53d-7dce333af9d3", "sighting--15a4c7a9-e33a-4946-80cd-eba0925565ce", "sighting--d6d7ae07-7840-4b4f-ae84-07aab95c3711", "sighting--feb2f814-9edc-4b8e-bf52-1e0b915b8713", "sighting--b8bdce5c-8dac-4ab1-b47e-0ee3286f0cc9", "sighting--6e5ce239-4d21-45c0-bba2-b45f67604193", "sighting--75036033-fa3d-43bd-9fd5-c049c292104a", "sighting--bff6740e-2bfb-4764-a78f-1e0094d99b7f", "sighting--e28ac551-51c1-4a63-9f40-e65a6bd9f3ba", "sighting--e14c21f6-c28b-42ed-bafe-d093d0a2d8a4", "sighting--af9e1727-3449-48d4-b3f0-6415d7cd4360", "sighting--7bedbaaa-beed-40c5-9b3a-7d16f603e658", "sighting--f78b1b5e-2f8b-4516-b20f-2d25afe8265a", "sighting--35830bfe-9b02-4fe1-92b8-dc0c6910b4be", "sighting--bae6f1b9-c87c-488e-aba4-ea354186985f", "sighting--01e36e37-0ce3-4749-9a1d-546a3126e0c2", "sighting--f55bd33e-27bc-484d-842a-675c59b8988a", "sighting--6a143893-4ff0-4d47-9082-ba2d131a8eba", "sighting--6cd98385-0bb8-4f30-9488-f262c0c33614", "sighting--ee908b0e-1c9b-44d4-9255-f98266bad162", "sighting--d564dacc-4b09-4cba-9d00-fb6d50d568e1", "sighting--6662f932-fc1a-453b-b023-5da679e552da", "sighting--81c88b16-ae73-4647-9426-2edf0c26e1bb", "sighting--5ccf22ce-ca67-47cb-ba69-704bb5574666", "sighting--349253a7-3f91-408e-9294-7381694e65bb", "sighting--a50c6bed-3922-4372-b428-f1a8c2a3fbf5", "sighting--a6a7f164-e264-4805-9f03-f4cec5a0f723", "sighting--9c3e09f2-caf3-4cac-86c5-1153f945d68e", "sighting--5afc2651-9697-46fc-b48e-17b5006c52ed", "sighting--0d96564b-9c5a-4e7f-a6a9-85416518aa2c", "sighting--3412bf63-efae-4112-81b9-d81de18aece4", "sighting--0e10f73a-f190-4dab-a75e-dfbe1a4385e3", "sighting--62e59377-e35f-4aae-a4ef-6c996992d617", "sighting--6418a551-da19-4b8b-b71f-c23ac62d4083", "sighting--107f8839-4248-4700-bf82-aa3ba4538c78", "sighting--597fa537-7a14-46e3-b311-ee1fe0bb015b", "sighting--65f3648c-2964-4a93-82ec-aedbb06d16e4", "sighting--0b47640b-c199-4c3b-a8b5-614d36cd4d6a", "sighting--6ef1e825-bf99-452e-9981-e6477f307463", "sighting--87491cc3-d8b5-4b53-9f09-f68d92036d0f", "sighting--0c7b0ec8-c923-414a-a9f9-4c3ed429129b", "sighting--2a77075a-d825-4152-b830-c50fa03dde8f", "sighting--26cb5700-ccbb-44b5-9956-c2be0c53cc90", "sighting--248d77d2-59f3-4d48-abe6-2a7e7c34fc22", "sighting--c604e9af-20d1-4923-9d09-a0a1c95cdd63", "sighting--36614ebe-cb14-40be-a9ea-797ed80a379a", "sighting--7770e544-beea-47b4-837c-7926d1da4170", "sighting--d3596469-d088-42ec-9e77-1b174643a82f", "sighting--0649b56b-bfed-4913-bf2e-277c52fe32b1", "sighting--bf3fee4b-de9d-4e09-87c4-33781eeab1ac", "sighting--41b2cebb-a9c2-4efd-ad6c-4dc1cd5b4c06", "sighting--739c0f20-10c2-4e29-bd12-8aa964bb5932", "sighting--6ca04d73-bf83-40f3-a242-ffd38eebfd64", "sighting--7b0a3c5c-eddb-47da-aa4e-7e4e0a633f9e", "sighting--d3eb37b5-124a-40dd-aa9f-992d248bd994", "sighting--a1a317e2-47c7-46aa-9d1f-6e3129f4706e", "sighting--9690e3f5-00c3-401d-92d3-1d1d4b4f199e", "sighting--51389523-be15-4d88-91f7-bc226337eaff", "sighting--4327a844-27a2-4b19-9ca0-e4188731c64b", "sighting--14a3147d-9612-4d71-b86e-753fec4da356", "sighting--e0b86aa6-5f30-49ec-9692-31d480acc857", "sighting--732785b8-8b21-41de-a900-d94dafd200c7", "sighting--ba2ce2da-c216-421b-97d9-d1435a46c7a5", "sighting--32ad7125-7bc5-4de6-bb6d-6853ff132734", "sighting--1aa812c1-7ba9-4c0b-b370-42e495e71d5a", "sighting--00bb2647-b112-43e8-91cb-2aa3fb8370b6", "sighting--2db43cc0-1e71-4c9c-8575-79e4d8faa22f", "sighting--d79fbfdc-67f7-453f-ac19-d65bab533699", "sighting--70c2e782-128a-485c-81a0-5adaf3ce99d4", "sighting--179ef3a5-0f6c-4088-8608-c1c10bc8114c", "sighting--4e103360-f337-4850-bd75-a1580e1f25ac", "sighting--bac90ee5-5b08-415f-8278-e66a158e126d", "sighting--365af13a-607b-4285-9a26-87765fd04b0f", "sighting--c6da21a3-30c9-48b0-85f4-c2a1e22b15f4", "sighting--da8cfa1a-1140-48e1-91b3-ca1da5ede29c", "sighting--8d3bdbe0-7233-4543-8d88-47f19d55328f", "sighting--435b7bd4-f5fc-490b-b6b7-fbdc9dc746a3", "sighting--73ae7183-83df-402c-9546-5ae3b9ffaae1", "sighting--63cb1033-bb64-4620-a86c-3df58c73c109", "sighting--c07bddc2-004f-4013-a850-cd8dce54430a", "sighting--b764c1da-5ead-4ead-a56e-69d36eedee43", "sighting--f6d96db3-8483-44db-b45c-245c8eee3e1e", "sighting--70c65c51-4e27-42a0-8f90-8514aa1cfd04", "sighting--2851477c-aa69-4ff7-a294-453435bdb135", "sighting--910b756a-2809-4310-bd3b-ef1a8d7d6ff3", "sighting--740adb9c-1d24-427b-8d42-106ac273fea0", "sighting--5c456e1c-f6cd-4054-9562-b32af1590e3c", "sighting--52b60737-2913-4f6e-803b-d4943e42b9c7", "sighting--32bd2db4-ec75-4277-ba67-2f53eafa93e6", "sighting--3b11f626-2083-40d1-8904-6990acfaa7de", "sighting--dc3756b3-3d21-4d3e-8715-087f93e9cc6a", "sighting--c8151bf3-9288-45c0-aff3-2941512395d3", "sighting--d4e0967c-05ec-4f4b-9f3c-9b189afcd2bc", "sighting--5fc7c43b-7e3d-4dcb-8dae-9071eb48d33e", "sighting--92984061-c29e-48e3-896c-5e445bba11b4", "sighting--4b7757ca-4343-4a02-bc1f-c8c6487ab279", "sighting--822259bb-9349-43f6-8d86-c1a6b26004a7", "sighting--3054d151-39ad-41ab-b52c-f1a5a3de7a54", "sighting--1be8bb8b-9586-4d2c-b11b-a4f8196c2a2f", "sighting--5c4e62a3-3d29-4f3b-8b79-de4e1d25cd6e", "sighting--7fcaef0d-e8e5-4736-9bda-1966ee0383e4", "sighting--1eecdbbd-c70e-42c4-92b0-0a75f4b97d54", "sighting--730b59df-1fe7-4291-9d14-9a27adb4e440", "sighting--32db93c2-e96d-4c3d-b8ac-1f7f3ea81bff", "sighting--be96c5a1-9624-49d0-a055-5784cfeaadfc", "sighting--07ded859-72f0-47fb-9753-d4dc89618582", "sighting--db568402-c89f-4071-a5c4-d64e2e13392d", "sighting--ee1f46ce-e9e5-4508-9f8e-ca3fdfa38132", "sighting--fb616054-bde9-4496-9d40-c87e6fe43ab0", "sighting--fb818c60-932e-41f5-a7da-c99d8e57f162", "sighting--e1376758-8213-4dbd-8233-acd6542a3288", "sighting--90120795-0a0c-4918-aa9d-f0d57545225b", "sighting--ced5fda2-88b5-445a-97d6-90761e8fdf1e", "sighting--913e1037-2839-4b2c-8ccb-4a7ead74fb2c", "sighting--8610ac8e-c657-4c19-a92f-fcc2b0174b1b", "sighting--8841ff13-96f9-42ff-92d8-ecbad6291380", "sighting--68128c8e-b087-488f-bd2f-f4378cf8a057", "sighting--b6e07ad2-8605-4500-94cf-1772a8d93dad", "sighting--a7e92d32-aba4-4ece-a33b-b7e661f18c58", "sighting--b40035d4-15e6-4804-943d-5413c4dab2cd", "sighting--8f5bea9c-f364-46fa-b997-a82a0395cf2d", "sighting--824fd356-bc10-4137-ae7c-25449cc92d09", "sighting--bcab930f-7489-46f7-b8bc-48f8dbeadb01", "sighting--136be9ec-2f0e-49b6-acc7-03c108438447", "sighting--f6bf03ae-2db0-42b6-988d-3570ea427381", "sighting--dd237dba-b005-4f24-809d-ffa55352c9d1", "sighting--d6802e12-6134-4f2e-85ca-1985475c1e6d", "sighting--f16332e3-0f57-425b-99b9-c68b36124d1c", "sighting--2abb6695-842c-4f4d-8e96-872e5eee64b8", "sighting--19a9d4ab-73f1-41dc-9eaa-275fb56d23e1", "sighting--0fe4d241-4fa0-4dac-bfdc-eca71eaaefd9", "sighting--f36a2d46-8621-4f36-ad45-64febe631481", "sighting--6a2f169e-b4ce-4dcb-9b8e-89cbb9ed1387", "sighting--a12687de-9a1b-44dc-9eb0-0e3128fa292f", "sighting--6876f56f-ed10-4a19-8446-3c8736c9919e", "sighting--f948a0ef-99ff-494b-a122-8d69aac58051", "sighting--7a667b58-e7bd-4af8-9b61-263316e83782", "sighting--4c269c78-712d-4072-a8f9-9722a119b20e", "sighting--4c343f21-2e7d-49df-9635-6ffc1e76a81e", "sighting--1185d6e3-e5be-4a95-a976-c5431a8d99dd", "sighting--f3eb1914-49fe-4921-844c-2a0ae28a50f1", "sighting--788e5279-efa5-42ba-97c6-a5f11b2d9ad4", "sighting--d98a45ee-fdda-4f39-aebe-af739e262e52", "sighting--7a151b92-9271-4c8b-a634-35b307e0ea1f", "sighting--486b8846-2e70-4e21-8243-041e61376c49", "sighting--a18047d8-0b31-4970-8edd-6870586213e0", "sighting--6fae35b2-a8be-4988-b7e2-eedf792e318b", "sighting--f0211fa8-c036-476b-92b0-02ba39401fa8", "sighting--3910a369-3683-4177-a107-ed1c4a49d2ef", "sighting--5c70fe1d-cbed-4d1f-bf31-cd8c67a8bb44", "sighting--1c2e78e5-57e7-4899-9113-9991265eccb9", "sighting--373839f6-c108-45c0-a721-74ca01387507", "sighting--61d28abf-2a64-4385-a6dc-7b82250b89dc", "sighting--d2390096-2394-4829-9eb6-26479e621b33", "sighting--0843705f-a368-4588-a8b7-329ce367133c", "sighting--e5da79b0-d79a-49ef-978d-d308d3e719c4", "sighting--6f082499-8d65-4961-9cd6-298f8de4ab81", "sighting--f4beca0f-9583-40df-9270-b447430294f1", "sighting--c83827b2-5d31-4597-b334-e32e1d65009a", "sighting--68ffa462-2deb-40c7-b3cd-352bde00f0e2", "sighting--de920a99-3175-4280-af84-0062374514f4", "sighting--b7ef51a6-d7ad-4b2b-980c-4822b7b51a29", "sighting--bb4c2d67-fab3-4c39-a6ef-2e2bf32903df", "sighting--a65b66ae-c920-4e97-8d56-86b58ff0e1c3", "sighting--88ff13aa-bee3-4bdb-93f9-4557239cf63a", "sighting--5214de28-e320-4c6d-b06a-4b1ba1d82b6d", "sighting--d0a3edc5-4306-400c-96c5-c5eef6562719", "sighting--72893f42-d2d0-44f7-8fc8-070f271d0c4a", "sighting--78d0b693-185e-44a8-b470-88f66ad58f9b", "sighting--2a8a202a-b5d8-40f0-89f3-cecd970b6ebe", "sighting--b5426be4-602c-4d5d-8c03-2557f70a97d6", "sighting--3d3c0d4a-ae23-49fd-97a5-cf9d6144ccc3", "sighting--e9c310d7-02b9-422e-bc6f-619ba24fefd7", "sighting--53283f60-a47e-4576-b8fa-600cd6824ed4", "sighting--96217add-16a9-47b5-b205-6ca16548fe25", "sighting--d6034c33-164e-4132-bb0e-2b5a79c85f0e", "sighting--6d7c1685-9417-4857-9601-6195fd8bb080", "sighting--e7de555b-edd5-47fa-ac17-9bc452a35e9c", "sighting--c82cecd5-83c1-41e5-88a8-c75e5a28ab06", "sighting--c27e2390-e23b-4c9d-a92a-28e328bafa44", "sighting--5d0b594e-dd60-4607-9cc8-615fa89acddc", "sighting--805e05af-f51d-4502-84a9-1396ca84a4df", "sighting--e69bd9a3-b721-460e-a5cc-ccc302db15d2", "sighting--78ed6f80-6abd-4c89-a949-9452205a0920", "sighting--2aeb5572-872a-4573-8134-aad6c117cac0", "sighting--d52dbc7a-54b2-417d-be3a-095ac436bf3b", "sighting--61d594bd-e7c4-47db-a440-42c740a63eb1", "sighting--aaff3307-2e63-4012-9fd3-5ef30556c8d6", "sighting--14ca971c-7218-4243-b9fd-cbad2fb33300", "sighting--5128f437-0277-4ce6-919a-acafa1b33afb", "sighting--21616c1e-1856-45a9-ae8c-30b56e674256", "sighting--a25da0de-7353-488c-a2bf-1c84d3524ea8", "sighting--df93c288-3d45-40ca-95b4-a6622ef11c4f", "sighting--7728c535-040f-421b-95e4-f3e4583b1f80", "sighting--526fe87e-09ce-4608-9593-10ac33bd06b3", "sighting--3153595e-80cb-42ec-b75b-39c8c5289d09", "sighting--55755782-7843-4c6c-93ca-e65599bde49c", "sighting--732394ce-bdaa-4315-ba33-e82eac6719a0", "sighting--e9289c5e-b41f-4c5f-b1c0-3bb00f73bad7", "sighting--537c2b2f-198a-4007-b579-732c871ea4f2", "sighting--5ef72c9e-d762-4476-a4f7-3bfdcbfb3b47", "sighting--ebc722df-41ea-4268-ad85-300b95b35c13", "sighting--9f6d3fc0-d756-4d19-aebc-361b2bdbdfe2", "sighting--2803b9bb-506f-42e7-bec8-f4da7c9a1980", "sighting--77209a20-2c31-422c-ad68-233dd815fcb3", "sighting--88f74343-6998-4b89-bc0b-d3410bc8d318", "sighting--242c795c-93f5-46c1-9f7a-e9aaca4741b7", "sighting--bc4273a7-f460-4e95-8b7b-8dd58146ee57", "sighting--b16524e6-9b31-49fb-83b9-ab9fc706e76c", "sighting--0b6bc572-5fe6-4319-bb91-9c9fc02a8570", "sighting--78ee5bbb-af8c-47a6-ad99-99d034deccbb", "sighting--749e1233-5291-43e8-9863-2f795890ba31", "sighting--db34a8bd-eedf-4418-ba46-7c00003a8b02", "sighting--237f0b6d-be33-4a9d-a46c-fcb9ffe23711", "sighting--63fb9977-1c29-4622-88c8-cdff5a2c88f0", "sighting--41d176c3-c5a1-456e-a4af-132934ca51a5", "sighting--63bd9b3f-0343-4345-ba53-a296df527759", "sighting--061fff5e-3c20-44e6-b534-c972ca6be374", "sighting--b5cc32a5-fb5e-408a-9256-383899c018bc", "sighting--bf892dc3-7712-4a15-9c45-84866672a088", "sighting--ebe5a67e-87ff-4c1d-a160-f77b3d1ff655", "sighting--fe38f115-5953-40a9-b933-7ede96c740cd", "sighting--ddd479c8-9bff-4bb2-8e5f-85b7111b99ea", "sighting--29419ffd-cb32-4541-99a0-40f410aa1ba0", "sighting--feea26cf-b38b-46fd-af53-2f821e89ea4f", "sighting--3eb0d93d-de28-4fc6-81f1-50986e3ab760", "sighting--52860d62-a988-49a0-b543-59c0f61c8eb9", "sighting--b71278d7-cbde-487c-a88c-fe6ea2c20970", "sighting--228b335f-da45-469f-bdd3-609b48307e9d", "sighting--89f5bb9e-5326-4856-8317-66ce240e7c42", "sighting--186b541f-eb1b-4e31-a87c-3bb12fbfe63a", "sighting--5df718fe-596c-48d2-bbb4-4c6f9cd282c5", "sighting--598ebbd6-84de-4ccc-93fd-2c41d789016f", "sighting--377f3395-e033-4b73-b16d-eccaa50d4b2c", "sighting--4a21d1f9-64f6-43ef-966f-50d865ab60eb", "sighting--a492ff62-cd7d-43e7-b877-f1e8d5147fd1", "sighting--018dce2b-d3f9-4fb0-a48f-c806ce6af99d", "sighting--569ffc61-f709-4af2-ba95-88cee4eb6f64", "sighting--effc7ec0-3fa1-4020-8df5-aa2b6170bfd7", "sighting--a6b0b5d7-8917-44c2-8f51-041107d27449", "sighting--7ee79bc4-25b8-478f-a755-35006dc55b46", "sighting--d567b9f1-9f5a-4cbd-8d67-b52ac110b116", "sighting--c41c4d40-04c4-4635-bcd6-2c1e7e9943b6", "sighting--f5d030e0-4989-41e0-a9ad-4145c78c2ea4", "sighting--d1016ecc-76b1-4755-a9f3-ce2bc9e3bfb0", "sighting--b09eeae5-fd58-493a-9222-522ca964c3a2", "sighting--3de63724-8058-4095-a7f0-87cf62ee7ffb", "sighting--4130041e-ea54-4000-b9af-a6184c548893", "sighting--9cb550be-7478-4882-bc01-b770f83a8c6b", "sighting--f13c7a10-5bc0-498a-8776-bdd42411cb97", "sighting--6bc4f491-6132-4e4e-a9cb-783d3563b6b0", "sighting--41d24cc2-4a71-48a9-87d6-97fe7739d50a", "sighting--3e2280d5-f7bc-4798-9fc2-28634ca54764", "sighting--7a490fc7-ab31-4dac-9685-3a8d8be83877", "sighting--75ec5159-ea20-4404-9ea6-0d450725aa88", "sighting--b8375d53-3aae-46cf-b683-be0569de3e96", "sighting--99c0d8a8-dc74-4332-9c5c-68dbd2e06572", "sighting--1f8a2b3b-5b85-4dca-8ec8-3dd1428c994d", "sighting--3f705d78-cbfb-49e9-b0f7-2bc0df372c9b", "sighting--721c8d66-1ab6-46d2-8154-14970f705b86", "sighting--66d1d5d7-8eb6-48f9-bfdd-aa633564edb7", "sighting--485668e7-4075-4c44-b2da-faedd4d117e7", "sighting--2f460585-4021-48b5-9079-a0178b90b5bb", "sighting--4ab1f78c-1008-46ba-b84a-8188c463d69b", "sighting--138d66dc-044e-46c9-9a91-cd869a6dab87", "sighting--a3741b59-3790-4d69-88f5-14e838176253", "sighting--4d871a97-2b25-4240-8031-ffc02e621528", "sighting--fa747262-d9a9-4c19-912e-3a29121659dd", "sighting--8c592704-7574-4783-9d4e-b56de4a757a1", "sighting--13fe1d7d-c56d-4a48-af69-19ff6f7bcdb5", "sighting--d61bc9ae-443b-469f-b008-5e13211d6bab", "sighting--2e5cc2dc-4c17-4689-9751-34b79b95dc6c", "sighting--85622407-1847-4a7e-a6e2-e7acec3271f9", "sighting--cbcfac60-0a57-48fe-b02d-59ba8a9ef7a9", "sighting--663aa5ee-277f-41e1-9d93-0598e5b3aeba", "sighting--9e733fc0-bc33-4b8b-9fb3-f043620e2176", "sighting--47f66e18-5446-41fc-a113-189c36557d1b", "sighting--38d91e1b-320b-4984-8de3-e6c24ebffa08", "sighting--2e02b5af-69ab-4d5f-974c-9259cbc8c004", "sighting--97fdb8a5-7230-4757-ad52-c51cb6283f94", "sighting--e250f429-2881-480c-825c-793e5449eac6", "sighting--b3dcc896-72b7-4fd9-bd8d-6dc6144b9804", "sighting--12eda113-db51-4472-a6ef-2f76f9e2a8d7", "sighting--648a9a6c-887d-4882-807b-d999bfa7406e", "sighting--f7a870f5-5e40-4dc6-93e2-d51100784fd3", "sighting--83d455a2-56b9-44d0-a81b-8a1efb1365a7", "sighting--a990ab57-314d-4082-9156-70831c90c5aa", "sighting--eca39b3b-5f1d-4c28-9e51-5836fc98dd7f", "sighting--956d7582-2f15-409f-8bf8-5e2bd97f1d64", "sighting--ddc9518a-7540-4e48-8e4b-93fc8cb3516d", "sighting--6f10ff8f-689c-45a5-8a9b-be4587c4d62a", "sighting--9a22f121-1892-4711-8107-f6d47a5db7e5", "sighting--2b44a119-1a73-4280-bcdb-90012e0f03e9", "sighting--6d72ae9c-5689-4759-8700-a0c43f301fc7", "sighting--836ceda0-cbc8-4e12-b19c-71f46e22c59d", "sighting--7153a2c1-7e1f-400a-a314-1d74b18d2dd3", "sighting--abfe25a5-857b-4ff9-9a86-c8e9936922e6", "sighting--6696ec85-f241-453b-a367-e8f95dc7ed7f", "sighting--9603a4a8-f793-4d33-996e-69bfab49a574", "sighting--6cf432ba-f8da-42c0-a5d0-09f1232d0f58", "sighting--c21e42a9-c0e0-455c-88b8-1e43c71348fa", "sighting--e70805f4-4ce2-4b9d-ba77-ca2eebeab52e", "sighting--bda591ba-f081-41f9-9360-4ef104be6ff6", "sighting--473b59cb-6c88-4ffe-aa02-8c0d8d082ad6", "sighting--81d16c60-7580-4a72-91e1-db3a2624aa5c", "sighting--76c257f0-af6b-42d7-9c2a-b2244391d9a6", "sighting--722f081c-cc01-4c62-bd1f-f764b1773659", "sighting--48654d45-9936-42f9-8320-d5e28cab7925", "sighting--28427bce-15b4-4fda-b44f-4e7d89ff988e", "sighting--f142e500-2a04-4920-beb5-77112a2af076", "sighting--08be733d-46a2-40a2-95e4-f59add7b8353", "sighting--7ca486b9-107b-4c85-9a0c-6e1018c7fd7c", "sighting--ddea5896-49ac-4b29-a415-8dce0b1229af", "sighting--da5dcae4-b27d-4000-90c3-a662e791aa67", "sighting--cc65e375-a621-48d0-9027-86b15af9c9ce", "sighting--2672730c-8691-43d5-830b-b4a34f498601", "sighting--56d7bdc6-437e-4216-9b2a-99c65bbb54fb", "sighting--aba849a8-0e2e-451a-a498-0d093ebc1503", "sighting--6df219fa-3f6f-4568-b366-0975765f9f41", "sighting--afcadf1b-3522-48a2-a589-ce5b8c784a28", "sighting--0df9a7f6-d9e6-4a37-92be-45dbc89d3887", "sighting--7f7f69e7-ed42-417a-899d-451013cb04b4", "sighting--2d9245aa-ec91-4961-90e3-d78dbfa3b36e", "sighting--530e26b6-d14d-4bd9-9d00-f6c3b9f2351c", "sighting--aa4c3cbf-8b0c-4298-8bbd-a7afabd0392c", "sighting--bb7c455a-45b5-48a0-8716-cbbe9a4dff14", "sighting--ab79a5a3-72be-4749-9215-26584767613b", "sighting--f3940b22-4bda-4643-980b-2f30c89db4b7", "sighting--c4218bc7-cae9-4d7c-bdac-40b7917917bc", "sighting--64f0679d-a8bb-4d7e-a034-be3ea3f552ad", "sighting--07138031-d98c-4c3a-933e-e66b7f05eb4b", "sighting--ae8dd994-8ca7-4fdd-87e1-e996895b73c6", "sighting--5549398e-e07b-41d8-a337-8ea03e07140f", "sighting--d9fc2bc1-1406-46cb-940f-129e8f5910c6", "sighting--64abb6d9-62ec-42c8-9732-ef5ee3afaf03", "sighting--9aa2f47e-095f-4292-8cf0-c00743692af4", "sighting--6e7d551b-19e9-4dd9-a7c1-61cc7bd3e289", "sighting--1a5b96e2-9cdd-48d3-841f-0b3a3bc096ac", "sighting--17da2f24-edd9-449e-886a-529bca92c6e2", "sighting--d86f005c-c6a1-431d-973c-ae0840662ecf", "sighting--ac04f63e-c32f-4554-8cff-27c9cbd33570", "sighting--bd8f1ae0-9a18-4c30-be77-bca7de2dbd6e", "sighting--d711a9df-6390-47df-ae56-93acc1224198", "sighting--0758f1a9-9c3f-4178-a2c6-4925d3467803", "sighting--727fc8da-7cfc-4688-8f15-813304b615d8", "sighting--70b8da7d-beb1-4d13-9afa-c98586e52952", "sighting--b01fc5a3-4257-4120-8a33-b70bba213cd1", "sighting--db95bef3-a832-42fd-9457-c78401ebe714", "sighting--79677820-4460-4740-bc5a-2db05d5b3ad1", "sighting--9c8d8838-49bb-485b-92eb-edbee2d10204", "sighting--fe4acaa7-c14a-4761-8017-7a6a0df61f69", "sighting--63f93109-0c89-4952-8a58-34bb9add8a22", "sighting--7147034a-2cf2-4478-90e1-4a4579fe616c", "sighting--fe02f227-0efd-4929-a8f9-f77dfe8f5bfa", "sighting--a3052bb0-26e1-4afa-a05d-d987be69f114", "sighting--5b0dd986-983c-4302-84a4-acb3c2bffc1e", "sighting--e0990495-b75a-436e-a2b6-aefda3106b6e", "sighting--25a575a7-9708-457f-8198-6252408f9c8e", "sighting--d0e231b2-625c-4d66-a095-1bf913e27792", "sighting--90d7246a-9416-4016-a785-497835f8b977", "sighting--a164c61b-0ade-4ef5-8ea4-d0eba21cc421", "sighting--768f70de-7377-4ea5-938b-30e7a9a99d89", "sighting--73730159-0666-47b9-906f-6a29af891b09", "sighting--a0c576a2-4634-43dd-9955-17c980881050", "sighting--597e8220-d74f-4765-b80b-b2668778381f", "sighting--4e1c2994-0167-4699-98be-04431524e04e", "sighting--e0eb1a32-1291-4f51-ba8a-a1c1c0507b71", "sighting--959118e6-834e-4808-a066-cfe87041df4d", "sighting--8635cba4-0696-44d4-82d0-a370290163c5", "sighting--e03cfb5c-2158-45f2-bbe6-d7761f4d61d2", "sighting--481108c6-cee9-40c5-940f-1344e35d120d", "sighting--a5cb758a-2ae8-4073-bc4f-9a91f19e0827", "sighting--cc154713-51f1-4718-a806-4f2b38b3c7f8", "sighting--a8784e1d-3633-4214-94fe-b03433ecb8b1", "sighting--a0bb6063-f58f-458e-b8ea-47e9e030623b", "sighting--dd4ea17d-3ebd-430b-898b-9f0009ee3ff0", "sighting--c6e36628-2836-406c-81be-2763f7aeaf71", "sighting--46325225-631b-4969-8fb0-ea6331107d6b", "sighting--d3972f7f-cecd-4495-b2bd-99acb472e13e", "sighting--7ec19473-56b4-42c4-9fac-b168d693b9f5", "sighting--ad8ef0bc-d111-41fa-8f20-40cea06e6936", "sighting--a37d25cb-ec8a-401e-986f-f1c98fb5dbe0", "sighting--85ba0f55-1235-42df-a9c3-649780dc1d6f", "sighting--109650ce-7070-496e-8c15-b42e8d80be76", "sighting--69c3607a-8e0d-43f6-89e3-5182c29d3c25", "sighting--8a3c18e9-3cf3-45a3-9692-2ae5407cb86c", "sighting--26314038-ab46-4b07-b51c-b8841c0f7f0b", "sighting--2b040882-7648-45ae-8563-e18559913541", "sighting--2f013a91-94b4-4a25-9859-e24ef6f3eb98", "sighting--e8ab81e0-e855-475c-940e-4cf842f41b9b", "sighting--64aab6a7-bf90-4004-955e-5c63b44a3f21", "sighting--6d159c88-89c6-41fb-890b-e5cee7802943", "sighting--cd57c8bd-20e8-4344-9355-3e9eb3f4f30c", "sighting--e1f41249-2d2e-4441-a4f2-e047b2c615bc", "sighting--f9ef967f-0b56-4899-8676-4effd8bd90d9", "sighting--e56e0a0c-80ee-4e33-98b1-b748cabd8bb1", "sighting--b1f7efad-cf8e-41d2-9b4e-28f34c311ec6", "sighting--1505a982-b3f2-4e42-857b-3f70c901c95c", "sighting--47e0e424-cf20-4aee-86c1-171789a81a56", "sighting--1d2f9ffd-f9f5-49db-95c3-ca8cb4dfaafd", "sighting--584dacd2-a164-4d67-be7d-f66f61dc15d9", "sighting--4f596003-2532-49dd-8064-5673e9d28adc", "sighting--cd718282-4ece-4e53-973d-6364fbf86df1", "sighting--5e6b0921-ba31-42b1-a5ae-5d2b10143688", "sighting--4d2476cb-5305-40aa-a905-20e99c4fa389", "sighting--c057f558-eba1-4269-8a89-28e68e7a81bb", "sighting--8504a368-2a4a-4f31-a07d-dfa506488f4d", "sighting--897c3c0c-522e-4796-8ee6-f3d6ec000afc", "sighting--19e871fd-9627-4510-b9fa-a5557440c31f", "sighting--e97dda12-cfa6-4f48-b0e1-f1d876b8d59f", "sighting--1f99e1f5-0229-4f50-9e7b-69792e083333", "sighting--0660ecdd-c1f6-4f23-afdc-6d422cbccb5b", "sighting--76b0eb35-46c1-499d-b5fa-bc0f55cc6d59", "sighting--8517c612-f7f9-4aa2-864a-22f99031b174", "sighting--f987865e-9fcb-4430-9291-bd0e9825cbf9", "sighting--2bdda70f-b18d-45b6-95e8-61db0d8e345b", "sighting--aabd355d-1ea8-465f-a8bf-d18161120079", "sighting--9054892e-c267-4972-b171-d9567454f41f", "sighting--4ef6c99a-66a2-47db-a4c2-9544217d56c9", "sighting--e1e1dd5c-14d4-4e8c-a4a6-a65be812d679", "sighting--70d3a6e2-7981-416c-bfc6-3f8878ffb229", "sighting--801c0096-c8e0-4783-91a0-d9b5081419ab", "sighting--3805a602-d5b6-4d39-a3f7-33a93ce649ac", "sighting--f29e5af0-bb60-4f6e-b8d3-8a61b8a70459", "sighting--13e31f89-9b7c-468b-a48f-0a81f412f1c0", "sighting--821bbc60-7b9e-487f-8881-64218a5a165c", "sighting--da81cd40-85f7-4849-a286-15b4ee8c8c02", "sighting--89a014d1-8e74-4285-ad03-84d20749a857", "sighting--57c84931-a852-4371-80f5-7defa25452fc", "sighting--e88700fe-fe2e-4e3c-9769-4b30cd55137c", "sighting--4f4de89a-5e1f-40e8-ac44-36865785418f", "sighting--e73c9130-1a9a-4466-bc2c-346b96ff339d", "sighting--385324f8-9c37-402b-ab3e-25f3ca48caef", "sighting--f4241cb6-1b9c-48d4-aec7-f20cb3f5ed47", "sighting--bfe7aeea-984f-461e-83f8-fe5795fc9bb3", "sighting--29aae8af-81a3-4b0c-928c-7b0735c52db1", "sighting--c9b0dc8d-23d1-45ca-9527-586fcb8f7b65", "sighting--b4177ef6-34d1-4f37-b231-971a830be1ec", "sighting--e38326f5-373c-41ce-b814-17ce55f17512", "sighting--c725b8e2-0bec-42cc-897f-66db11fc43f1", "sighting--786ef13d-595e-4742-86e2-ab332c459bcc", "sighting--9cb61b09-d216-4a4f-8f07-fced86dddde7", "sighting--ddc32b05-12aa-46c6-807a-cd3bbf9381c9", "sighting--e1e2a5dc-6b67-4b2b-8420-0b97f23fb894", "sighting--3dcb71c3-c571-471e-976d-8d5999bd75ab", "sighting--cec8a4bf-1f74-46a5-8f4e-3ad0d1573565", "sighting--373e8be0-4312-4f9f-aaec-84b64ebf1303", "sighting--9b36cc22-8b26-43d3-9df3-b2491fdc9b95", "sighting--e49dce83-d80a-4ee6-bafd-a90a18c85ca1", "sighting--ad299063-e7ea-4161-8bec-0b498ef04182", "sighting--91c6ca47-bce4-4505-bb3c-bd68a11d0403", "sighting--2621acc6-c24b-40d9-84de-3e9ec0c2a72a", "sighting--f4e4747b-1fed-454f-ad62-7f84a843b510", "sighting--a3866ade-60a4-468e-b335-ee72420183e5", "sighting--dfd65b2e-06c5-4cbf-a49d-30d0ed430d2b", "sighting--6f356b5d-c6a9-4753-bea9-32550d807cef", "sighting--5583c055-062c-44d7-83ed-7bbf120b9537", "sighting--48758937-0482-44e5-8395-1bcd326dfe01", "sighting--f169d6a8-63d2-48b8-9fc6-d953893ff991", "sighting--30769a01-d621-4e37-82a8-765cde9fda90", "sighting--a9800f16-b173-4ff4-b74b-61ff4cfdec09", "sighting--fef8a619-ed96-4f40-981e-ba130a6875d3", "sighting--41b1d952-79e2-416f-91de-becb028ae735", "sighting--f993412b-9b01-496f-bce6-ac08b36e9084", "sighting--41371d57-cdb2-4dd8-9e58-03c176151a10", "sighting--159ce1a1-5a77-486b-8c32-ab9ac302b091", "sighting--40ff7ae8-056f-4f89-8ed2-4db42ef3f098", "sighting--86a866a1-242f-4d70-a4f0-1ef4aa63bf5b", "sighting--9f37dd9a-4bb3-4736-9592-c8d63ca6e6e3", "sighting--d0fdbc22-427b-4897-b104-e346b17fbc01", "sighting--1ee8fb11-b4cd-4b78-a528-9f42cb06384d", "sighting--49dcb1ba-c087-455c-8b61-595ff3c3c96c", "sighting--909e3f09-679e-4ece-b37d-dc002b6088bd", "sighting--b7d8a711-4da1-40ad-846f-17aa5e57d765", "sighting--51f26c85-5bd1-4456-9c10-cd884f988665", "sighting--975e4586-7e05-4e5b-a46b-762df2a072e4", "sighting--c1df4cbd-f05a-4abd-9cd5-2927e6bda61d", "sighting--2ba85613-422d-4235-a5b1-2830ad43d890", "sighting--67c1e957-8e2c-4622-865a-786e637b8786", "sighting--5f3815fc-36b3-4ede-acde-eb09d7b5808a", "sighting--910647df-3b65-4790-ab97-35db0b71d8d2", "sighting--280cdb57-6c87-4c9c-b250-7b5e5701076b", "sighting--ad5153e0-82ce-4baf-8744-cda486f7daf0", "sighting--a3c84c58-0175-48b4-a2e1-99ad0a1cb075", "sighting--c5d909c5-13d5-4222-ba4d-6f0caa7f6978", "sighting--cbe17793-97c3-46b9-9bcd-95b75299d107", "sighting--00a19d6e-76d6-4dac-ae89-f243b12cb587", "sighting--38ac8350-cb51-4e3c-b3e6-d1d36b281691", "sighting--e0e1fbf6-a337-4044-ab85-33cc60a77b7d", "sighting--8aeb0a74-ee98-4215-8908-dafe1a37ea9b", "sighting--0b247efc-9e27-4932-9d6d-793e25f62462", "sighting--92e02495-a12a-4042-bef6-5b9eb3b11cfb", "sighting--16327bd8-ed18-486b-a953-b168988d5dd9", "sighting--ee91af5f-0448-4ea8-9e67-5569d8010c81", "sighting--d71d3df6-70e2-48c2-9ed9-f58f057efd2a", "sighting--d1563886-fc2c-425c-8659-62661cb6cae4", "sighting--d0eec002-29ed-4cd7-a210-83060ccfb36b", "sighting--07cc471a-2580-4b94-bf3f-407381a59aeb", "sighting--fb6722b1-e418-488c-ac6c-b693eef1ca01", "sighting--076c5e09-467a-4f90-ace8-e223e8b1d9d1", "sighting--0abfe392-a153-40f4-a697-dbda4d8d24a1", "sighting--4cc4bbd5-20d2-4474-b4c6-81855403c66e", "sighting--42b5574b-d65f-4d3c-83ab-8cbceda15305", "sighting--3086be63-136c-42c9-8924-4a37b18bf5db", "sighting--dedc3057-8720-4bc9-985f-268139bef5bd", "sighting--9c2e3d9a-ee8d-4931-b0c0-fdc87adc57c4", "sighting--08264ed8-8a67-4773-8445-17d6b1bba4ea", "sighting--429034c1-43f0-42b1-9196-7515c3291334", "sighting--37605bad-232e-48b3-9200-40ab9bc32940", "sighting--7da524e0-faeb-4c09-94d7-bf8dbf057d4b", "sighting--4d29ac72-035a-4410-8cda-a4a06647482b", "sighting--c50c6a77-b4f3-44f8-8971-594fece5c357", "sighting--f6942147-b8ee-46f3-a8cb-059cec686225", "sighting--71acba8e-4f6d-4dfc-a387-d81832facacd", "sighting--3f46d606-714b-49e8-82aa-07e9eef9d1f8", "sighting--3a48fa3c-8d36-4d0b-bdd1-094f994a4e21", "sighting--55235aba-f051-465b-a260-21136e7a43c9", "sighting--fdb15b3d-fe5a-4a49-b3d0-faaf2894789d", "sighting--7f531320-981a-4e9c-b5a8-9fdffd56a999", "sighting--a1aacf9a-0782-484d-b0d4-36a37b746a59", "sighting--de851e61-c632-4274-8374-799e565ad1e8", "sighting--23b19590-98cf-4f89-aa18-4a5e3688389a", "sighting--b2f0c7b4-5b8d-458c-9068-001aeceb876d", "sighting--a2425683-87ba-4a1e-b758-194718c4c8b2", "sighting--88fd3875-f330-4051-b664-d24a5989c892", "sighting--f26aa53f-abb1-4c8f-967e-7bf2cc7b0a36", "sighting--af2e9499-2370-4b01-81a1-3fcda757cb2f", "sighting--b241d6d9-058f-4270-9972-a856ed1035eb", "sighting--685c5264-9dd3-44c3-b145-fed801100915", "sighting--9e9bc830-d51d-4a61-a0e1-141c7e83d3fb", "sighting--da848fec-3200-43bb-91c4-34a252aeaeac", "sighting--4a86f008-658a-4719-a7e6-54df00c4a848", "sighting--ba86c0d4-572c-41ca-896b-70e58b5f971a", "sighting--ad908378-fd2e-4acf-9f71-e9658962d9a2", "sighting--408dff82-e3d3-45df-bc46-16f5fc3e56ca", "sighting--21284a98-8e9a-43c1-bb21-e4995836ca67", "sighting--5df47cfc-4fde-4d01-8d68-c85c88586100", "sighting--02b8a2d2-7476-41ce-aeea-457c4c6bd417", "sighting--7f6330a9-6d27-4cdd-8318-1065b8f17c0f", "sighting--750839d4-69a1-46c6-b9f0-85938729d84c", "sighting--71525dc1-684d-4be9-b8d7-b1f195cdaf67", "sighting--d3d94bcb-bb55-40ac-b40b-aa6f6ffea1de", "sighting--70d22042-d710-4fe8-8542-8305deb99814", "sighting--9f22dc77-d36f-4d35-a36f-51fe6e6b650f", "sighting--8ae8bd4d-f93d-4cea-b19a-8678b7d5bf54", "sighting--48efb843-e8fa-46c7-8c6d-59c7575b4516", "sighting--46add53e-0f84-46f6-9855-897026b68919", "sighting--8cedb182-9e27-48a9-afcd-6b19220390d5", "sighting--319c5f4b-2a12-417a-b120-643054dea189", "sighting--6aefc26c-169f-4dd1-8868-7ee3d2fadcff", "sighting--97c36371-fef8-45a3-9f83-a1922fcbb0f9", "sighting--941ac7a5-aeb4-47e7-9151-c22247f58d78", "sighting--0509c548-113a-4198-80dc-6e4ddac2c850", "sighting--84938e98-1ae4-45f0-8b86-13c66992b949", "sighting--b0f455a5-b71c-4ab6-8939-5b69472a6dd7", "sighting--4821270b-b49f-4678-98ba-7e5d2fa5bf82", "sighting--298b097e-f232-408a-8954-e07bd99fa9d8", "sighting--84a09adf-713e-4279-9b7d-8106819b26f3", "sighting--c9bc3cf1-9adb-43f8-bb44-392867e8ac35", "sighting--55c35922-2fa2-4e5b-a4bd-2481e8c5095d", "sighting--fc0e095f-751f-4c70-97dc-20020c20504c", "sighting--608f814e-6460-4502-b386-124f33167b60", "sighting--54416af2-59b0-44cd-8239-6802068832df", "sighting--19a1cf19-fcc1-452b-9c0a-cccb21239d56", "sighting--a1b0f6c2-3faf-45b5-87cc-51459bed7edb", "sighting--6cdac1cd-01fe-4694-8498-d42b1ca82460", "sighting--7f2a8729-09af-4c50-8d06-2054ff94d88b", "sighting--44498ca1-ed4f-427f-92ef-717960a5d058", "sighting--a0ae97ef-6a43-43f0-a974-06810f7dd543", "sighting--ff747cb1-d576-4dd2-ab24-eab1ec500370", "sighting--7c40be58-2a15-4863-be7f-91ce305881b4", "sighting--1c3334b4-f079-474d-b9cb-4a46346acae7", "sighting--44726c47-0140-4b8d-92de-fb62940b10b0", "sighting--9627a235-ee74-4c02-be97-a35a63527268", "sighting--53033085-9dc9-47e5-adcc-20da9b2e70b6", "sighting--45a2ac96-b0b7-4b34-8016-dd9d9ef2bb2e", "sighting--ba95ba36-6b48-4867-8ceb-9ac2719e8090", "sighting--ccbd63b6-794b-4670-b65c-cd9ddc5699f4", "sighting--274bce7b-9fc9-4df0-83d9-e6f4f55f703a", "sighting--cb8e6a0b-de27-4f32-940f-454eb11bc5f1", "sighting--cb67c402-bc74-49b7-b9fc-c3f343ab3d24", "sighting--081ce409-5ac1-47be-931e-98cf7e6828d6", "sighting--955904db-87b5-446d-bbb7-eb5e61864596", "sighting--b49b2831-d8d5-406b-89f9-62be6acf28f8", "sighting--58271f64-a5a7-4c99-b4e1-78adba8e0eeb", "sighting--09331e17-8365-4152-8052-ba93a11c1205", "sighting--1b2f67c9-1fae-4738-b66d-b15237758ce7", "sighting--e46146e3-4432-41ff-8461-0a81eed89831", "sighting--e9a5c7ed-a10f-4d66-abed-ec9ede1caef5", "sighting--5858913d-4e07-485f-9bf6-eeb3dc81e7cc", "sighting--65bf75fc-f5d4-4fea-ae48-0b766b27bc16", "sighting--f99e1386-460b-4c3f-a25b-5a5febd1c10e", "sighting--a0056c4e-40f7-4062-afa7-a9d4b684614c", "sighting--39531da0-b0dd-4ff1-b778-1b0d80c8c43a", "sighting--d82e808e-3d52-48a8-9352-cb983b0b8971", "sighting--cf07389b-e1e5-43d0-be8c-20ecb9cc0c7e", "sighting--e453b0f1-9468-4a04-9ade-a831dc70d59d", "sighting--cda993cd-af55-4c6c-a7d2-cd72d7e4579d", "sighting--a6ead143-ac13-4fac-877d-b7eb7b6dd845", "sighting--551bff72-4016-492c-bb11-856f65a02199", "sighting--bc9c339e-30e4-45ef-b988-b45697c79de5", "sighting--ac011576-8e33-4708-be22-3f2499adc04f", "sighting--7d679846-0bac-4af6-a66c-127e7f93aa40", "sighting--a5625fd8-cd2f-46ab-88a4-7cb22f47014d", "sighting--1b08ad18-de02-4533-aa65-e9777061ed3c", "sighting--283076cf-6262-4b82-8d46-d64787aeeb24", "sighting--671980b7-bce5-4e99-b503-2d65d8c5de52", "sighting--f2eda7e9-8471-434a-8482-4c04a277d6d5", "sighting--e595e844-e54d-491c-92a1-c93611588d74", "sighting--3406f16b-08af-4464-9694-359be75c744c", "sighting--e389acc7-fd71-456f-bcbf-040d5975998c", "sighting--cc14af9d-a6da-4b7e-94f5-3e4c4205346c", "sighting--1bdc9234-3fb6-4a81-a33d-4830b7606aff", "sighting--72e19604-962b-4e2d-a958-b74806683367", "sighting--ae8fb2c2-06e6-4d7d-b16a-c550c3390be6", "sighting--f6568558-7d1e-4a07-9c7c-45fa7584b442", "sighting--d992cd4b-167d-478a-bebc-1d132327753e", "sighting--714d0fe0-a920-436e-b9ad-9cc0659507be", "sighting--7cd35688-3c33-4884-87c2-f12323f41272", "sighting--9fae2f65-e36b-4f35-9386-23a4304a973e", "sighting--96d39dfe-89e0-4ccd-adcc-0dea582c55e2", "sighting--d4922adf-7551-40bb-918f-eeeb531403d9", "sighting--15168628-aa37-4071-af82-e71a69c3125d", "sighting--b0f0cfef-0580-4cd1-b291-1b5264ef6adc", "sighting--cd65b9e8-87f3-4a16-af0a-ef2f57a89085", "sighting--612f99dd-e004-49cc-87ac-762919b507fe", "sighting--8dd01f3c-d39a-40b3-b894-e6b95b6075fa", "sighting--7dc96a3b-7b96-48ba-bed9-aea4dc9bea73", "sighting--9f0925dc-678e-4cb3-a55f-d507222b7ccf", "sighting--2032aa59-1d3f-4ae7-b466-5b6635779e64", "sighting--af50ed31-c76c-424a-81ae-7f6596280bc0", "sighting--35cec144-3bc3-41f9-9c3d-6d68e75e6b76", "sighting--99fbd5a9-865c-4be1-87e1-635379e3395e", "sighting--eaa12f10-42a7-418e-8b9d-a24bb37bc082", "sighting--87877c10-3b3a-4669-b681-103ad99cab53", "sighting--797a88b0-55e1-40cc-8711-82880687cd68", "sighting--0e78819a-0ec4-4b50-a566-b3ad68b5f55f", "sighting--c93ea9ce-0690-406c-aab0-d6fda5f5cb1f", "sighting--85de04bd-9dc6-4748-be15-293b739de13f", "sighting--5bc5197d-1880-40b7-b390-000988c966c3", "sighting--f52cf1ae-7d83-45f9-8f33-6a39391a423f", "sighting--5d13e61d-7f15-40b7-9aba-697fe4d353bd", "sighting--4ab7ea40-0e7f-4dcc-99e6-59024d9b96df", "sighting--8d49d538-d737-4632-ae43-38cc6213d160", "sighting--acd8cec2-5113-41cc-ade3-d7d6c23122bb", "sighting--5f82c6a6-fc8c-4182-90b1-357bd3eb5504", "sighting--e879cbf9-0b6a-452a-8899-84b4752c4b28", "sighting--4592f19f-14de-4228-9760-4ede4ecb1eda", "sighting--20917bf8-2edc-49c8-8f57-55939117f660", "sighting--51b84be3-89b5-4736-b61a-6dc41170bd94", "sighting--792a23fb-3e0e-49dc-8518-fd6ed87fd8ff", "sighting--ef53b305-d37c-4214-9990-74cb806c10f0", "sighting--99ea9ed2-4ac1-4fb2-9b3c-011c48003c33", "sighting--a09b1261-30cf-4723-bdfd-d143d5cb1bd0", "sighting--dd5b1365-cf3d-4f6f-bd97-c73cfb934d58", "sighting--490c9196-89c2-4a86-82d9-0b9e45ba04c4", "sighting--a68560a2-55f8-4557-88ba-6725925276cf", "sighting--8d59ed35-655c-4b25-a5c5-58ab1012a622", "sighting--db6750c9-d81c-4093-a1b7-9d346f7f5c42", "sighting--241a42c6-dc38-4e23-8f91-1c8295b868e5", "sighting--8b203677-2f00-4a2f-842d-27b85aa4c65b", "sighting--a4e6e151-3464-4409-a943-f1c2b607662f", "sighting--e0b3e056-5373-4d4c-9d45-dbb72692e447", "sighting--aa344f95-60fa-417e-90bf-4039093813c8", "sighting--5c812ad1-e42d-49bc-831b-118d72e4c986", "sighting--854f3d80-3045-46ff-af9a-b69a1d1dffa9", "sighting--c9d92a2f-cc63-4cbd-b922-a760fe2cd9bd", "sighting--6731d79b-ec65-4877-aaa1-202524ffe92e", "sighting--496d1336-9bb2-4d06-9ca8-b2d8dc781c89", "sighting--63bc0f36-9115-4309-8112-8c40ab978d50", "sighting--74e9774b-1a69-49bc-b8ee-ce8b9dc6805c", "sighting--bddd9206-79dd-4b70-ad73-8fe5775b4ead", "sighting--b0c5a2a7-635d-4cd6-ab1c-ac0cb110146c", "sighting--da6dfa13-e4f9-4e54-97d2-b52b176e4187", "sighting--c08c79dc-298e-471f-bb6c-8a82a9dd0045", "sighting--4eb193dc-dd2f-4af4-9c9b-d3172f4b348a", "sighting--836c8ce5-7485-456f-94d5-b4b21494f196", "sighting--189e85a2-6b75-4f40-bc7d-4908ea147c11", "sighting--f7e145b2-19e4-404a-83e6-657ca1d9b217", "sighting--a450a5e5-e4b2-49a5-b193-9f44d73d034e", "sighting--f25bc6ab-5f20-4814-b561-a518964c333c", "sighting--0d2dfaf8-eeff-4ad1-b34e-694adbdcd2c5", "sighting--03c8d355-bfa5-4fc0-9906-15ccda184dbe", "sighting--72e055ea-8136-4bb2-a81f-4fcc8192c9af", "sighting--05af8ad3-37bd-457f-89ef-6950ce5a3c26", "sighting--e6c81c37-69c1-435c-87dd-355e56eb494a", "sighting--5b1d5dbc-243f-4d63-8080-fbf224ec12d7", "sighting--d5a76f02-68ef-4be4-b9ad-829f06e5cdd9", "sighting--120c531e-0a86-43b6-8bd0-02d5fa604fe4", "sighting--a16df544-f9f2-40c1-970b-8eaf9103f2c3", "sighting--b9ab18d1-71d0-43e6-bad3-323100945d60", "sighting--86ea6711-96bd-4fec-a9d6-3932a8bf1160", "sighting--7c34edb4-b095-41a6-9a19-3c827815baea", "sighting--6128129a-dc29-407b-8431-bf3a0169d327", "sighting--170b7d3f-4b5c-489f-84d8-002f0c488306", "sighting--fa202492-c75c-480c-b07c-9c528529f478", "sighting--3860c10c-7be2-421b-b045-d2de0c97069d", "sighting--dc83d44c-9044-4356-ae6c-12ebad5f5ee2", "sighting--dc399933-d386-49a6-832e-090ae4d28c6a", "sighting--e6046a7d-92fc-45c8-8b73-765c41dec84c", "sighting--76d6ac34-84c9-4846-80cd-bcac00df146e", "sighting--99c8b3d6-4d55-4fd7-813e-1ae55eda4380", "sighting--97e27b4a-6a7d-47f6-b5e6-47c1a9d9739d", "sighting--77fee800-7950-47a6-88ba-c4c384da7389", "sighting--e68f85c6-1081-4f25-b37b-fae1760bf1ed", "sighting--347498b5-c628-4574-a443-05c461b10e3f", "sighting--dd7a8618-497b-4cef-842c-51d70c9327a6", "sighting--f99e3002-f415-4b7d-ba04-f89a26a99a0e", "sighting--157ed2a2-b1d0-4157-952a-7c8146e17375", "sighting--5023a14a-dab8-422f-880a-ec222b43dcaa", "sighting--c62988f7-49f1-423a-834e-3aee4f6386c4", "sighting--6a42a855-5f98-4b51-9f02-0d65543f5928", "sighting--da37b2a2-0602-4fff-9935-d3e9e758425a", "sighting--9b86956d-f180-4063-b653-f916d6138704", "sighting--0a0be044-2d59-434a-8ef4-6cf533e43d48", "sighting--86188325-5c83-480b-b6ae-32a28615a749", "sighting--25760722-359f-4497-9f48-f8fff61f6c40", "sighting--c79b791e-788f-4660-b08f-3778aaafe354", "sighting--5a9484d1-4b36-407a-a379-70410f708083", "sighting--430989b0-65b3-49ee-b764-48d7347aadfa", "sighting--8908165d-bbe4-4caf-a04b-2e7c6bb62135", "sighting--ee48a36b-155c-4f79-91ed-47c5b1fd5d7e", "sighting--22454851-1915-4a44-806c-f60263c41f40", "sighting--3915c784-34b9-42c3-877c-5d6c5ec65906", "sighting--71bbee30-7262-4047-9ccb-cfec168b0873", "sighting--baa87a74-e81b-40f0-b1fd-cf46fbc2f034", "sighting--a45b4fb8-3388-40df-a292-25a50dea35f3", "sighting--b9ce1e94-c7b7-44b3-a964-45ea7b22b86d", "sighting--74d134d7-db8e-476e-9d4f-2b08ef55b1ba", "sighting--b4b48067-4800-44d3-a80d-aedb878f8a6a", "sighting--c161f0fc-db81-44e4-b2a3-da3a6952eaf2", "sighting--72ab4902-ef28-4aff-957d-8010b4a27207", "sighting--3e120b2b-5655-478e-9022-f4c7a795b280", "sighting--37ce3b0d-fa01-4cc0-bd59-19a6c43fa3ab", "sighting--1c9b9d1d-a137-4e65-8c8d-0681d836f9d4", "sighting--91955f6a-32f0-46e9-b494-dce8ad0ed976", "sighting--4ccdb983-361b-49ec-9868-8d95dc25d382", "sighting--6ef04d82-b647-4310-8c2e-420b891e29e0", "sighting--26de8b8d-265f-49b0-93e2-ff98c58b6636", "sighting--1258ba22-173c-4f68-8bcd-9e030ccea381", "sighting--0ae02fac-d9eb-4134-9fc3-3a712b09890d", "sighting--13250798-defa-4539-8d3c-65be44012718", "sighting--42ddf0aa-6639-47c3-b56a-08d7fc526840", "sighting--1d3c639a-b1d9-43e2-82b1-8b9147caaecf", "sighting--8b508ec5-535f-444e-bd2b-9dc9f34bb9d4", "sighting--0bf90aaa-483d-4640-9276-3787e1c393e7", "sighting--bb079548-c2df-49f6-951f-23fce8eb993d", "sighting--392195b8-4fa8-4788-ad93-c538e4c68ae4", "sighting--06da1553-415f-45a9-b88b-2f23374fbe36", "sighting--c7ed2a96-a6cf-4dcd-b167-3f72302c5164", "sighting--e90a9ba5-9ce1-42f7-9775-8384cfe63a9c", "sighting--1ff0eee3-28bb-46aa-a64c-ae896409ffa1", "sighting--f7d9e560-93ec-406d-9029-741d05a6b7f2", "sighting--dc5c946a-dea3-4a2c-a5e0-942bddb2304c", "sighting--034b000e-86a0-401c-9268-af64b8e0e1e4", "sighting--f7be5b53-a5e4-437f-b9b9-2fc426b6aeee", "sighting--99e97356-327c-4e7d-85a3-4bb810cf798c", "sighting--d18e13e8-9be8-4054-8e60-d89b9ee5a75f", "sighting--b5f78ff3-c5f8-4f82-a9f4-36a159b4d090", "sighting--257adddf-c2e5-4bf9-918a-bb7db9d50e68", "sighting--9766cf35-0801-4d8f-9635-ba8fde635b3a", "sighting--ad7a852e-25b2-4c20-9c11-386b6470f57a", "sighting--56dd7fd2-6c42-454e-9ad9-93f8d691ee67", "sighting--3216d505-350f-453a-834e-1174c47891f1", "sighting--20338b4c-6798-4b14-9b76-e9138f32e073", "sighting--2e7f7dff-b4f0-4fb3-a528-0c4de697a718", "sighting--6c948507-2575-406d-a6b7-a5666013f1b2", "sighting--281cd560-6580-4e8c-b87a-f67a1104cf1c", "sighting--aeab3fc5-50ec-4458-8294-6a27142a8fd5", "sighting--12685cb1-0f5a-4475-8f31-d6351afa5b4d", "sighting--a85eb23d-7e87-4499-b582-904e3f9b9fa3", "sighting--0b8ef280-8f8d-42eb-82c0-fc19bf43ee6f", "sighting--4747f8aa-b46d-4a2b-9c2a-36714a98d7e5", "sighting--5a9599f3-c308-480d-b798-c83c6d01d0c2", "sighting--988e0b74-5c3c-4723-885e-5e37334b3407", "sighting--d8be65d7-812d-4ac0-8601-c63d47009759", "sighting--e83aa331-7d36-4d12-8e11-c69d0ac59094", "sighting--4903b61f-3331-4bf9-95db-c1d6c023743d", "sighting--de901ea2-e518-4ba2-ac3b-7f6ea229a9ed", "sighting--529dafbc-d19d-4e26-aba5-ce67653202b6", "sighting--009efcec-9025-4877-8431-a1757463765d", "sighting--c65671cc-7aef-4a9e-8a64-010c01c8624c", "sighting--6f09d532-eb53-42e7-84b2-35cecb263c90", "sighting--533a15d7-2bd4-4944-bbd7-aff19256b7ba", "sighting--eb71f23b-d5bf-4e35-8228-21ac52daf225", "sighting--11f13b7e-cd2b-4742-938f-ab1e3e22b278", "sighting--ca01f1b0-7ee9-4f40-8e12-b7f7a9790387", "sighting--848a8ba9-d081-4c65-8471-fe27c1bdd8e3", "sighting--9820d12c-4d71-41ef-917d-bc4f7042adfc", "sighting--ea750eff-240a-4f74-8633-dc601f3f5f78", "sighting--7cc5b586-4bad-4ff0-9020-9ceaa6071a19", "sighting--b678844c-d77f-472f-8f86-59c0714b8f70", "sighting--7703df2c-46db-4210-b27b-906b8be64f46", "sighting--572ce9c8-39d8-4455-9b53-0598ae2edb56", "sighting--82b50b10-6bc8-4880-8261-a88db22f1727", "sighting--f85d7ad0-3164-4fcf-9704-61a0b44857c0", "sighting--575c84f1-6908-455f-816e-e60b3d54fe10", "sighting--eb9cc1c1-1c72-4ab0-a03d-5f6163a05628", "sighting--cc34308b-a624-45de-96ec-59a0a7931b01", "sighting--bb847f28-7b7a-4544-8b18-23bf030e2cd8", "sighting--f45a70f7-a6f4-45ee-98a7-89fa60eaebc8", "sighting--e31975d1-0afa-429e-9125-f156d3843668", "sighting--c6f63c42-c10a-472b-95ae-61541a972c2d", "sighting--2bcd9367-e832-4a07-86eb-c3d52f52e4a4", "sighting--95947154-feb6-4bb6-93fc-3ef25246ca55", "sighting--c1053908-19c8-4dd3-bcce-4c545d52bd41", "sighting--6e7244cf-8d86-46c9-83d4-606eb7034ffb", "sighting--fcf8190a-2ae7-4375-9243-90406fe7674d", "sighting--7b2dfa26-fa32-4026-ba07-f1b711e04383", "sighting--2a6ca53c-41a6-4a9e-aa74-72456e526a35", "sighting--adcd68b6-1d1b-403b-87af-a1a35005433a", "sighting--dcb044c4-79dc-4651-ba96-56435f88b033", "sighting--8d92e2e1-754d-45d7-aa27-1320dd4c21a8", "sighting--2a1c2d93-5139-4250-aa9a-52fb07dcb02d", "sighting--302040f0-9424-4d30-bdb3-3d937b4b30dc", "sighting--8ef91342-b5fe-456a-afd3-61eb4d8a9943", "sighting--1a65ece8-f677-415b-b013-ee22868a03c9", "sighting--beab9d1c-12a4-411d-8e06-b4bb5e9a79a2", "sighting--67fed8e3-2bb5-4e26-8832-ad117dc7609a", "sighting--918e5408-e684-412f-9f65-078836c81628", "sighting--f43b4a4c-3d1d-4e31-aa7d-290973a90b94", "sighting--a6ec219f-c8dd-4c84-a283-c480f2576d86", "sighting--9d743a7f-f9a1-454e-8fe8-37adf538591b", "sighting--c65d34e3-ae0c-4115-9985-ff03ff92fce5", "sighting--7de6c365-1233-4735-9f13-143659b701d5", "sighting--916b427f-e608-40d3-8434-27f3c5ec77bb", "sighting--9b1f4785-4c6a-4f51-a68b-4cd591b62bae", "sighting--434db6be-9d45-46cd-a39b-eabe20d255bc", "sighting--aea37c1e-61d3-4255-b2db-04cfcd939bf7", "sighting--fc35b176-7788-4c42-81bc-f95c1b5914b4", "sighting--8651b335-959b-44d7-b276-8fc11ade3046", "sighting--61c3a14a-9641-4115-b599-6a86e5226d40", "sighting--945f61d7-c660-4b14-9dc9-8516f7d44dd5", "sighting--f05fe8fb-e251-4a2f-b1f2-e061059cde7d", "sighting--d00356ed-b211-4fd0-8533-46ca7a0ae1c1", "sighting--30acde46-ce97-4136-8f2b-343092001351", "sighting--7707f5db-beff-47ea-845d-3cce4f06784c", "sighting--e34cb328-8e88-4be2-951e-47c2e15551ed", "sighting--c33ffe5c-ccc5-405c-aea5-4a9fb083a343", "sighting--b7e59a86-c252-42e7-832c-b2d06a61d043", "sighting--6a468eef-5796-4fdf-81b9-cc503f7b2551", "sighting--704ce55e-b4bf-45c4-927e-097228e6983d", "sighting--b5f10416-6e6d-40b8-b67c-c7ee17a520e1", "sighting--ca28b115-d79e-468d-9c0e-2560187e878e", "sighting--9ec1c15b-2f25-4f32-869a-2c9200ef9eb5", "sighting--af0ed692-e0c7-4039-b9a9-f4af9f84bd4e", "sighting--7bfb2cf4-7a03-4eac-bf98-3279d645e2e3", "sighting--0bcac7b1-74be-47c1-8298-5d60b8feb6a1", "sighting--7d51cb4e-7499-47e4-92ee-edf98246ab3b", "sighting--a1a599b6-13b5-4b6b-a21b-f3b635effe52", "sighting--4a420cde-dfa3-4203-b910-ea26484ce0da", "sighting--6c91a0d1-c5bb-4bf0-baa0-750fd3fe8fe3", "sighting--b1fcd2d5-a455-407e-8cc5-391437a741f7", "sighting--e6a7401d-ccb9-4ed6-9451-46c54b402d27", "sighting--d79d919a-b718-4237-8970-0a6cb6104160", "sighting--9dc97fa3-60e8-4c10-90d3-9739aa18aef7", "sighting--6b4c8a43-2419-4030-b482-314d89811a66", "sighting--b17e8548-ac42-48ac-8673-17d5a969e48a", "sighting--65a904ea-0599-4664-b64a-3cbfe9c9f7ae", "sighting--b35e70f1-f864-441d-8ed7-0a36a5e9da48", "sighting--7e12061f-fa10-4a19-b85d-f79ab678f18d", "sighting--df4c49a7-b39a-407a-b819-741439690ef2", "sighting--c9648ff2-ad37-43d8-9aba-c1b10051dd68", "sighting--31626d36-7ece-47df-8532-95dffd526c02", "sighting--98e0aaa2-c766-4310-b035-819765546f64", "sighting--b19a837f-6d59-4683-9b08-99cdff789603", "sighting--25a0326f-711e-4f92-9ce5-97914b708e3c", "sighting--f17d70d5-1454-457b-97e9-62317993301c", "sighting--dc521a8e-1c12-44dc-9d0a-457d5a03dea2", "sighting--663923d8-9e57-4d24-a9f0-6c2e60f3612b", "sighting--6ddfca8a-4555-43ef-9357-35a7297069bf", "sighting--272cc677-08e7-4f68-85b9-f76475fa5807", "sighting--93dcf122-50ce-426b-8abe-bfdec3f73723", "sighting--17769f00-21e0-427f-b1fa-7190b23b2b46", "sighting--8b77ee5b-f393-41eb-a1cd-b285964d1218", "sighting--594c3a90-63a7-4b51-8f22-99fab87d9810", "sighting--0cf66c0b-5844-47f4-b3f3-f00e1a30074b", "sighting--edc101e2-4e3f-4b39-8924-630b8332a78c", "sighting--0261e4c7-cd9a-49e3-9fda-29acbf03a46a", "sighting--fa8bf47f-28c3-4eef-9d8d-15b750e59ac0", "sighting--a1690dee-1e72-4db3-89d5-ddcdf4ad175d", "sighting--bfc345d3-dd6c-4acb-abc0-25daeb3f9b82", "sighting--a7828888-6da5-455a-9e7b-8383ff6272f8", "sighting--40d0f27c-9326-4fde-b3e6-175c37d03fee", "sighting--7247c118-9a24-414e-998a-69d6f4fe019a", "sighting--dbbd927d-997d-4486-a18b-f925da073439", "sighting--42e097f0-2022-4296-837b-f9d6fea08696", "sighting--8106a6c5-cb18-4651-b1b6-f12b8b177c1a", "sighting--64c67515-b8ce-481a-aff5-ec9c2f231a94", "sighting--11ccb90f-a61a-4331-b530-9048f7950b96", "sighting--176d7264-ef59-411b-9232-70c623e8bc25", "sighting--a68ac661-85e9-43c6-89f5-ae142a7ccf06", "sighting--2431f5b1-22a7-456d-8376-63048802fac6", "sighting--8c2e4b49-4911-4b1d-83d9-c44f6657e478", "sighting--a213e906-76f7-49c2-8705-878423e4e404", "sighting--09aba70b-a86f-49d6-a040-e0fb93e75a5a", "sighting--eb4aa9bb-74e9-4b5a-bc65-5f1073331d80", "sighting--83c8be61-cb8e-4a2b-8a2e-540a89498927", "sighting--b30a164d-b910-4701-acaa-aa3fba4d059c", "sighting--3eff0778-eecc-493e-a8ab-7b3ed735d152", "sighting--f3ca82da-7df3-4db3-bf34-5bd774891fc8", "sighting--9536c15a-26ba-4b2d-a696-2ef5a564c092", "sighting--59c32df6-a508-49d6-8766-442c70df1819", "sighting--99fadf33-9738-4089-9bdc-da20db4417eb", "sighting--8ac44c12-651b-40f8-822e-75c0653751e4", "sighting--c12d27ab-223b-47d1-a638-bce1247e0cc2", "sighting--e134bde2-840f-4d15-bd76-e33e9032385a", "sighting--54a72e8a-5427-49dc-8315-1fbe3af4ffaf", "sighting--fe69ac4c-30d9-4c60-9d34-177f312bf9b0", "sighting--5970cd71-1e7c-44aa-9726-094a02a896ec", "sighting--2e88cefb-c8d3-4841-825e-d79f2acbb8bc", "sighting--8d2c0d47-0f8b-4d93-ab8e-1c553b97439d", "sighting--79af4125-b007-4f71-bc63-e336e8d3a7f5", "sighting--0efaab1c-8cdf-46cf-ab2c-65be2e878e12", "sighting--556cef87-e11f-4a35-a12d-d6f67a132347", "sighting--28987dff-2815-4aa5-b149-58815fbeeeea", "sighting--49bb9fa5-6a41-4caa-805e-9f9556ee7250", "sighting--668a7893-8295-485d-b85e-d305b8ef92eb", "sighting--b14a2681-b80a-48e8-8fce-36a76d522d63", "sighting--5dda3514-991d-490d-b857-89600bbdc57a", "sighting--70aa1c82-d782-4104-b1a2-bbfe5c9c761e", "sighting--8eda3f51-b1be-4858-8e64-f97a47f79f45", "sighting--16d233a7-47e8-4b08-bf10-cf86ee8d2107", "sighting--b5a18574-42d8-410a-8295-a36d4ca05a7b", "sighting--46cb91a7-4441-44c0-9790-5df5b41c406b", "sighting--f215586d-e091-47a0-9944-812637fff193", "sighting--506da17a-777d-4d46-ad21-316a90fbc05c", "sighting--c6aac738-34eb-439e-a01c-d9408b2f26c0", "sighting--529d636f-abb6-4d5f-a006-00c96bc89c57", "sighting--2c5cee54-c6b4-4820-85d0-cde8b5f41936", "sighting--62c7a753-9bf1-496c-9e04-a1727a4b1abb", "sighting--eb4fdb5e-0e7f-44f2-ae8e-561761f43e36", "sighting--39b310b3-b949-49ee-b44f-d01903b89836", "sighting--220b97cc-cb32-48c0-9db4-c9f084c8f59a", "sighting--207f3de8-2cca-4ca7-9a9e-f2f2d5b2f64c", "sighting--bf63f794-55cc-462a-a965-0c9535519b16", "sighting--27cf484e-0e29-44e1-a637-554b3cdcd8d6", "sighting--2bc39a45-7505-43e0-bba3-4600d8f5a399", "sighting--2b2b15d9-02bd-4a87-bbee-3fa6472ede42", "sighting--695dd6ad-14e4-4ecc-90ca-812f6b0567ea", "sighting--7c6e92de-9e64-44a5-8f41-cb09b9651028", "sighting--d9e4e3b7-c103-4a8e-91b5-46a5060298e2", "sighting--e490a2f9-40db-4841-9a8e-8e6a0c0530d7", "sighting--3b7451de-b6f4-4ee7-aefb-642d6bd75733", "sighting--b8bddcbd-a95c-492d-bfd0-350acf239f41", "sighting--b010a78d-6c4f-4f10-ba9a-2fa1172010de", "sighting--73d57ae0-2289-4c10-9829-421b02d4a4b6", "sighting--3df694fb-6fff-4340-a191-0d92bbdedfb3", "sighting--42ad8a83-9ecd-44d9-9651-1dee79066097", "sighting--33b137da-bf99-4990-9c2f-69b0e84c0c54", "sighting--94c51bb3-3b1b-4d80-9e7c-ea4762d96fdc", "sighting--b58f5aa5-d1c5-48be-8ed5-835e889ab103", "sighting--90adae32-248a-4079-83db-f92f1b638554", "sighting--91930e15-3a5c-463a-9788-6bffd1aaf9f2", "sighting--7bdaae31-6af1-45ce-a248-ac524e225c02", "sighting--dd90b92f-1642-4f05-8531-168d2f375516", "sighting--f2b67c6d-aac7-4400-968f-ab1bf6fd18e8", "sighting--39636a88-0358-485a-8613-c3e721d7fbb5", "sighting--ab6cd42a-4af5-4487-a1d5-3ed52712f6e0", "sighting--90d631b4-a383-4c0e-be17-d0212b20ae91", "sighting--9d1e97e1-975d-4eb1-9adb-b0217c653584", "sighting--2059e953-98da-44c1-af5b-4e266658cea4", "sighting--2d89548c-e2f3-4e99-a946-e00152d8853b", "sighting--bda162ac-8aba-4aee-951c-be1f1bce0b6a", "sighting--42323130-c703-48f0-b25f-30cc70d01656", "sighting--4669275a-ac53-4b7a-b564-e873b46df30c", "sighting--c2b9fc2b-a23c-48f4-9984-653f6f41d811", "sighting--e9e2f0a8-4a13-49b4-9ce6-3eae4e65ba8c", "sighting--07fd6e7e-58bf-4f42-9b76-664f167dcdd4", "sighting--c50fb1e9-a613-480a-a066-1842443ec787", "sighting--bef428b5-2d4c-44c7-bf65-dee9020d05cd", "sighting--46c5dbd8-bf82-4f60-947f-8f477055f40a", "sighting--07e4a07d-176e-4a35-8297-4bc6ae0d571d", "sighting--132174b1-7cb7-46eb-9efc-bcf9c368071f", "sighting--dca4ba55-18b3-4488-b5cb-60e7ae652eaf", "sighting--dc055900-a4b1-4d51-b16f-eb4492c79365", "sighting--0496f9cb-03bb-419f-bc6a-fe3f9a108e1c", "sighting--246ce0f2-c197-4800-93db-dadf75ca9fef", "sighting--9a5900d5-4c9d-4bed-9228-da2b2caa2189", "sighting--7283479f-e9ee-45e4-9585-9d3e5898c44c", "sighting--d684f653-b3d1-4adf-8c8f-d16bdb3b5994", "sighting--e9ae6378-df4f-499f-99fe-335074793a49", "sighting--47c795fb-e23b-467f-aba8-bac29431a203", "sighting--eb0482ff-00bc-4b59-9840-a914a6f8d3b9", "sighting--f276d85c-942b-40fa-8937-c9a26c682ea8", "sighting--3944b726-67dc-4461-8a3c-446f2d64e3a3", "sighting--12e422e7-b2ae-4a9b-accb-3f0347b79b25", "sighting--892cf5ca-4c2c-4037-b13f-4669ae525d14", "sighting--56d13831-6887-45bf-99e4-9cbe84847c3d", "sighting--69051eb9-b6ee-495d-8d61-12fcb8e7791e", "sighting--f0c56cde-5b14-46d0-b46f-3e3a4761a636", "sighting--121cb06e-1442-4ecf-b4a8-a22456df40ec", "sighting--c698e65b-4a52-414f-b1c9-329933a7c7d3", "sighting--66e1c3a2-4af0-46e5-9937-fc344c6e9b53", "sighting--955d780b-f1a4-4c0f-94e5-49fc611ee0bd", "sighting--4798d564-36dc-432f-be99-73c2ba90c5bb", "sighting--9e233298-0922-431a-9494-44df9cdfc870", "sighting--dc45849d-4a4f-4f92-9a15-ff2c27523d97", "sighting--67f77627-0f3a-4a09-9497-ecc5616b52a4", "sighting--aa20646e-c965-4be5-ad8c-5d8e7a7df32a", "sighting--2d7a07d1-e782-4e17-9eab-2a07afa8190d", "sighting--2c2a7b99-c162-48dd-b453-ce21938dc727", "sighting--5c954096-a94c-48c2-97b7-7d0998d1027d", "sighting--86f3f8f5-3f9a-4807-8c99-84ea0384d78a", "sighting--8b83c875-482c-4e2a-a3a0-271d3f91069c", "sighting--8b842cab-82e9-4cc0-9248-4276fcbfed98", "sighting--1de7570b-9481-4c3d-82a7-731b2532c79f", "sighting--b6ff16c1-066b-48e8-a429-7adbe3144d85", "sighting--09839bf4-48e9-499e-b3f0-d8dcf0d217c3", "sighting--51f457c7-577c-44b9-8a32-1b2223506507", "sighting--65ec7e9d-8a3d-4bbd-92c8-11737b4937e0", "sighting--7f3a50c5-95bb-4545-99a6-9cc8b2f1831b", "sighting--02d490ad-cff8-4afe-bd7d-7b459408c31e", "sighting--ee3d349c-44d1-43d5-8e3a-cc5cc36a393e", "sighting--44a2770c-fef4-4936-b9d4-e98413e87de8", "sighting--690a16a4-b42f-49e5-9e94-57e5e8928ac4", "sighting--5399b8fc-ea5f-41d2-b99f-66d77aec57e3", "sighting--3d1508b5-78c2-4e76-b46b-e54df4168cf8", "sighting--2cb2ab5a-35fb-48aa-9bf8-16364906571a", "sighting--b8b2280a-659d-4800-9699-4c8fbc003de8", "sighting--ac555384-6723-4343-93bd-d94c449e42c1", "sighting--8961f37d-6b43-4e24-83c8-611830a3ea03", "sighting--ee51ce71-2f56-4ea1-8e91-3e78854deb85", "sighting--80c10bf7-90ac-4dc9-becc-845eb1e84882", "sighting--0b9a8382-4f19-464d-ac7f-fe3718c30a5d", "sighting--3ff2de4f-b4e8-40e0-ab9b-3a1c533a2870", "sighting--b54b7836-93fd-4044-a6c3-0d5dcca868d8", "sighting--1c02b530-8f3c-47bd-b662-3dba33bb4267", "sighting--f5846e8c-ac08-4097-8570-bff2f96f98dd", "sighting--c8d37f38-37cc-4a9c-bee2-8eeb867c4996", "sighting--c9385267-6b76-4433-8e71-169d13fbc782", "sighting--1cf24f53-dac7-4bf6-8bbe-b1fbd93c2870", "sighting--41c1b7c3-1606-4d59-8ceb-3623aef269b5", "sighting--b54b0c88-de9c-4761-901d-847b58e5b453", "sighting--6e5ea660-0fa7-4b56-ae24-a6b27ba1e325", "sighting--577ffa6d-7a14-402e-bcff-53d025c90e2c", "sighting--bb92881e-162f-4e3c-ab6f-58a57ab91645", "sighting--5ee9227a-3782-4ddd-823d-e844902d0e27", "sighting--25de4ee7-c810-49df-8ece-6d8b5103f1f6", "sighting--b1dc98b0-6521-416d-a583-f4d7a671592c", "sighting--8cf323ab-a1c9-430a-acd9-f322189db063", "sighting--42158f1a-f8df-4662-b8c5-1d8d0640edc5", "sighting--ecc5dc04-99c5-4e6f-be9c-25169756440b", "sighting--925fc631-56ee-4625-a1bc-3cb0a5869b6f", "sighting--caf638f8-47d1-4d23-8100-658517634531", "sighting--f3e448b2-643c-437c-88f4-2c29862f26ec", "sighting--059b36e4-2da6-444f-9cd1-8272e5b94e6d", "sighting--2107be05-1d6a-4a64-be14-d9eafee9bbec", "sighting--b78db2a0-ba86-4541-b150-436f42a90b3a", "sighting--2f0b1aa7-b732-45b8-870a-49589cb5431e", "sighting--8ccba190-17cd-4b8f-b3cb-39ed8f67aa74", "sighting--91ccfac9-c8c7-406f-ae2d-57c92268d521", "sighting--d48e5cfe-42f2-4c6e-a9a6-4e634810d7ee", "sighting--b21568f3-bc9d-478c-b938-acb8cda96f76", "sighting--7ae41df7-d270-4129-b656-5df980a738b1", "sighting--0c9e5a17-fa3b-4eff-8d57-0f43219a21fb", "sighting--1dd1bfc8-05a9-49ed-8edb-0a33d9fc1a27", "sighting--f65f6b47-7254-4cde-907b-3f022c2601c0", "sighting--2e629ff8-afe2-47e2-a5f5-25fb7c69af1f", "sighting--86a1d2c8-cabf-4129-b51a-3243f7e07d33", "sighting--0eedda18-ff64-4577-900b-cde40489a653", "sighting--620856e6-5331-420c-bfdc-fc35b429ed65", "sighting--51568781-d89d-401b-9a36-c602b3106c7d", "sighting--c8e2069e-022b-4f12-876a-91cba0a34ba3", "sighting--0070da71-b058-447a-9312-2ec9453ea6a5", "sighting--5dc84518-9012-46bf-aa41-b4b8488bf09a", "sighting--d964a4f4-1e4d-4ced-aab5-3145fa9fd765", "sighting--3ab4a25f-483d-47b6-bc87-a5cddf974f6a", "sighting--1b2c997f-e7a0-4a98-a8f1-42ef8462eeb7", "sighting--4bd66a07-ee66-4d02-b674-d55719f89fe6", "sighting--02d7295b-6c6e-4f76-b48d-ae5ddfd28802", "sighting--63c503ab-13ea-4f88-bf10-222f43b32df7", "sighting--742833a5-72ac-496e-94d4-066716531e74", "sighting--b7c0fbb3-8009-4ebf-adbe-1c8db826b8fb", "sighting--69c03e95-d6ff-4aa4-817f-ef37f73884f0", "sighting--3cef974f-bce5-4bf5-8cf2-a043641f1187", "sighting--3a1d05dd-2e98-4ae7-9008-633ed912d128", "sighting--44778b89-00f6-4af5-b0e6-c434e7b6b148", "sighting--de97d0fe-24ac-4c5f-a9cb-897608acfbc6", "sighting--9222d586-4193-4210-87b6-556259bf513c", "sighting--2c927594-365e-4778-b95d-4bb3ded5d8ab", "sighting--aa36069b-633f-46a4-a548-1b34571d3023", "sighting--a87c251b-d004-4dca-a0aa-0a112562326f", "sighting--c18309ca-5fa3-4d8b-a41d-2981c9357eae", "sighting--29ae30e7-94b5-4444-b001-eee14f0862b8", "sighting--f490e173-6f34-4dc4-9844-8906341c00af", "sighting--36abe501-3808-4269-9963-6aebe709694b", "sighting--33200939-255b-47ca-b17a-6b3b74a7a1ee", "sighting--471898b4-9c89-4f5e-b0a8-9e2ea44a05e4", "sighting--cc5a9ca2-44c8-4b6d-a28d-da256a10f717", "sighting--745cc297-30e4-4157-950e-0b04cc399322", "sighting--7bf303a9-0233-4e1e-a659-cefdd9fad088", "sighting--2ac8bfa1-f4e9-411a-a60e-5452fd45740e", "sighting--9053676d-dabe-4e3d-8680-0572474bcd36", "sighting--c9dbf7a3-9b64-4b25-93e5-0519d96d0993", "sighting--6ae8f103-3120-4179-8e57-105f7905d5df", "sighting--86670940-d72d-4708-8a22-c5fcd675292a", "sighting--2c947fbf-bc30-49e0-8213-65e211ae811f", "sighting--7444bd00-5edb-4ddf-9c1c-db57b8843d51", "sighting--59a1e818-144a-4598-81bb-2b2da90c099f", "sighting--6bbf6e2f-0a07-48a8-8862-961b12ae130c", "sighting--b7dd59df-1740-461d-b734-1fcb978d49af", "sighting--5519e4be-8a89-4aa1-87e2-4e4389d5bd69", "sighting--b78ca2c0-831c-4ed3-a940-76fe336c331e", "sighting--42661f9f-cea5-46f1-bae5-6064210e44a1", "sighting--aa5be09d-4fc8-4041-aec4-774e5a90395f", "sighting--3bda8d04-fe4b-49f5-857a-a283b6324a65", "sighting--e7739a8d-e0ff-4f2d-961c-0bbd4dbdf006", "sighting--77ecb333-bf48-4508-9de7-4fda484671bc", "sighting--3fc8585c-c71d-4427-8c84-f67596c155f4", "sighting--7969a68c-6160-428f-b50f-019a23bcde65", "sighting--b04288ef-6725-4e67-8136-6e1573b802c2", "sighting--448375af-4960-49f2-b140-eddba8c4d708", "sighting--44c6708e-8eca-4de7-be63-df48d80babc6", "sighting--603e832e-d6ab-45ef-8713-3d1bfc968cf0", "sighting--d5fbd227-76d1-45e9-95a6-0b7746295841", "sighting--91569d6a-9c26-4432-a61f-7a3cfa451650", "sighting--8d1034fe-508f-4b9f-8b64-07f65ce16d4a", "sighting--8721ddb6-63d2-42f0-9f75-a6b1bdabfaca", "sighting--e7a88de4-08a5-4b68-861d-41993a0d96e9", "sighting--89223b4f-4d5a-4c79-a320-b6ef0d8a013a", "sighting--d306d20b-43b7-4aea-898c-817225e45418", "sighting--861648c5-1545-414d-bcf9-cd95e38c3772", "sighting--ad477f0b-fcc8-4e4b-a9a3-5c586c4576e0", "sighting--ff2d41b4-de72-45ec-83ce-2bf9cf2b4407", "sighting--407d8a2b-89c9-40d0-ac88-ef88df9a05e4", "sighting--c9ad83fd-65c5-46c1-8ef4-d1328b1dda8b", "sighting--bd5e6394-baa6-4387-865f-3639f6e041e1", "sighting--cdb31595-0ced-4e21-9c6d-f4aefae7656f", "sighting--6be67396-4048-41ac-8a47-70731840b0a4", "sighting--e1260f38-14a8-49a2-853a-a3c1adfe1008", "sighting--4ba6f8ad-d6c9-41e1-b7b1-5f45e2432199", "sighting--67f5d81d-3c24-4690-b3fb-2e65595aa4a9", "sighting--dd9f321f-00ee-48f7-8f69-c28dba3ea16f", "sighting--daf7dc27-3750-4e5e-a4cb-01ab93330eba", "sighting--f61e654f-fdf3-4c64-a315-6b90326bdf50", "sighting--8dbe4dc9-ff0c-4a6e-8670-08e8aee9cc0d", "sighting--9343e9c1-1b65-49cd-ae14-7a4b30bf7d76", "sighting--6e351f16-36f8-4029-9b44-5e5e82264186", "sighting--d9c44d94-fa28-4aee-8c88-8b70d0977816", "sighting--a111dc8b-ab78-4c6e-b1d1-1fbcf16f60f9", "sighting--e877e5b3-ba34-4be5-a41e-0bfec4fe4728", "sighting--7f04c5cb-894f-4a80-a07c-0a6a1c8d0ef7", "sighting--409be5b0-f8ba-46ea-98fc-5d229fe37346", "sighting--7d70a3d0-9d9e-4407-bb03-8714adb45c6d", "sighting--aac7714d-b67e-4bd5-b943-29a8b5a399f4", "sighting--e851bed3-eb97-4200-b23b-17c47d6a7aea", "sighting--b265f661-3f92-4b98-b0f7-d3b11f8c784b", "sighting--f48c2f29-7ba0-41a2-8d67-9180a1dff13b", "sighting--2a1d03ff-90f9-403b-9f30-741082be535c", "sighting--6d9d50ff-b9b6-42fe-a11e-f249cbd90f36", "sighting--61b507cc-0497-471b-93ed-30812c487454", "sighting--66e3f74e-1406-4c9d-8f28-f5649cca6103", "sighting--661309b5-fd63-42af-9fbe-ddd8f5aab05d", "sighting--e1bf5a9a-280b-4ee6-a311-d68b1c734014", "sighting--200d644b-1c5f-4584-ae59-33637b00ab55", "sighting--bf3f2d4f-afd4-49b3-a2c7-72d92f17c26d", "sighting--87db2738-51ca-4a4d-8adc-1f49e62ecc08", "sighting--348180ef-99ec-4e04-88c5-533752c625aa", "sighting--34826bab-91d6-4fdb-bbd1-269cf647fc10", "sighting--2ae31422-96ce-48ba-8934-aebf2aa36b2b", "sighting--fbe5d18c-5b49-4da3-ae91-d4c4fdbc3e0d", "sighting--3a2babc1-2b93-4953-bc70-b6593e17b4eb", "sighting--e32c78c7-fcd3-4175-9524-ef88803c0212", "sighting--6f96e1b0-ca97-4071-85e8-ff0e8b0940d5", "sighting--332efff5-62a2-43b3-820d-8fb2e88084cd", "sighting--47387ddb-1afc-403b-8035-197c583e0b08", "sighting--a85afb28-f57d-4d42-92e4-9496d466740b", "sighting--d0c0156f-6e7a-497d-85e5-6ea19fae4160", "sighting--7a845bec-9c8a-4933-abe6-770a1043fab9", "sighting--d72e5143-9073-4be0-983d-fdd360c34628", "sighting--c5669ed3-b790-4a70-b7f6-657164e34be8", "sighting--36f4447b-75ae-4a54-8501-bd63ef868476", "sighting--36dda5e8-2e6a-44b2-83b3-15c9e05102f2", "sighting--5f845869-78de-4c64-ace5-f77180ba4dcd", "sighting--1eb2f714-ad39-41ac-8ce6-27b285b1a88e", "sighting--6c74ecdc-d572-46f0-adda-0c642d1cb5b7", "sighting--bc29d5b7-b88b-47a1-b85f-6e67592df27c", "sighting--7b971116-9e04-4282-a9a1-3a698883b18f", "sighting--856790f9-7b24-4dae-afef-130bf828091d", "sighting--9b375605-a27f-4225-a1f7-5d0eed8356d3", "sighting--83afa7f6-4148-45d5-bcf5-38b4e35e1984", "sighting--a4bf5d3e-a5bf-407b-9ee1-8c25986e1396", "sighting--b2d46472-904d-491a-b678-fed9e92e1489", "sighting--1918c34b-3bf5-4d29-af51-aee04f2fe74e", "sighting--b928a21f-baaa-4c57-a040-f5abfe0084ee", "sighting--0f69b987-9ab7-452e-9b3b-da2bc301faf5", "sighting--a75b8a42-f945-4bbf-802e-e09d60356e3a", "sighting--11b728ca-825a-40b4-9119-6d76f84ec654", "sighting--d4d16d4a-68f5-4b4e-bd49-8a80edd3a65d", "sighting--7e456191-f12f-43fb-ad73-384b7dec2a43", "sighting--06901977-7cce-4d6d-ae8a-7bb157fb6086", "sighting--9efc3415-27df-4c57-855f-bf8fa37cbc33", "sighting--42562638-75c9-4678-ac00-1716bcd959eb", "sighting--ece293fe-e47e-4ee4-89ea-7d159cf6bc7a", "sighting--0a53294f-9764-4a62-b671-f4d793bf057d", "sighting--b8f38c08-ea4e-48b0-b3b2-0c16bd2614bd", "sighting--910da6b1-594c-4673-a895-df49edaf95ed", "sighting--21d038a3-3db8-4132-8c20-c27021bb602e", "sighting--79b3272d-f393-4292-9f93-fa4a59384966", "sighting--5561602d-075e-4461-9cab-bab9a3ebf91d", "sighting--5e784758-0425-4d03-849d-0b13004ce5ce", "sighting--52c4606e-f224-48c2-b962-a174cf7dc4f2", "sighting--2b938c4e-71ec-4c44-a268-ad605afd5d9f", "sighting--95fda7b1-d946-4f08-9d77-f97a5f96ca50", "sighting--5bff2469-ffa5-47fd-a539-93c846f81650", "sighting--395bb651-26ad-46aa-a576-2d0d2e56d687", "sighting--13e427af-fa91-44ea-9a25-9414a92cb3e5", "sighting--c4eaf3c1-26fa-4449-b309-365284b5da92", "sighting--f2bc2ec5-825b-4baa-b5a6-9bf76eb19e55", "sighting--3dcd9a49-fd41-4233-9228-36c68f501211", "sighting--2678e0b8-b8a4-48b5-a57a-f3c573dd601a", "sighting--9aea050f-2610-48a9-84ef-4a87bf720c68", "sighting--3188c13c-e854-4e0c-8065-092eaca5885e", "sighting--270e3299-9b7d-4d81-97a1-1e10e4a4190f", "sighting--042dc393-0fea-4c16-8275-bc501533bc9c", "sighting--e8b03a1c-337d-4f44-bac8-c69d0eb92999", "sighting--9fd5ac83-a420-4380-ac84-c4724aba158d", "sighting--9102b52e-a652-48fb-96cb-739742924ceb", "sighting--4a3a6eec-7916-4714-9b2d-f328a8519346", "sighting--545a93b0-2cba-4695-9865-e32329f9340c", "sighting--5a63b0a9-e212-4ff3-8d2d-bc35d212d3ec", "sighting--5e0dcf74-7b37-4618-a227-1acf28bd8dfe", "sighting--d7ec45c2-a80f-41fb-a769-c8b2795075ef", "sighting--032e4888-cb86-41b2-96d5-0ee926ad6b2d", "sighting--48f1ed34-86ce-4a47-8b2a-c34bc70907d2", "sighting--80bc5ee7-3eb9-4925-a92d-e4ac777b25f3", "sighting--d4830ba5-e0a9-42c6-977a-ef5726d785a3", "sighting--66005f3d-c3e7-42f6-880e-e423f9bf1b4d", "sighting--be0dd980-35b5-4fbd-8ce4-7d0fad59583b", "sighting--803b4cd6-93dc-4a3a-bc9c-7fe52f7d151c", "sighting--5f46f905-d962-4fb3-b9a2-5047e08d6d02", "sighting--9c7d20c5-87f9-4c22-9791-d34a9d66de75", "sighting--9546d88f-cf0c-43d7-83df-5fe977dac074", "sighting--2997c3fc-309c-463d-b4c4-9e79f6afbeb6", "sighting--78ce4ec2-7f21-4488-9d8a-65c10dcce728", "sighting--541c4978-901b-4d8b-b704-3c61b8db8e4f", "sighting--f20b9051-c8aa-4295-a526-b79c61bb0295", "sighting--8bc132e1-8703-4725-afaf-1b1eba6daa32", "sighting--76adba03-d767-450a-8fd6-e8596fff9249", "sighting--186b37ba-1fb6-48b8-ba24-f41f8c38fc99", "sighting--ba9b8f09-2bf9-4035-b419-6100603b0413", "sighting--8772cd59-853b-40fc-8e91-7d885f603b3d", "sighting--51538632-9a51-4495-bdc0-c9c934f3976a", "sighting--fc569fe4-358c-4bae-80b7-ac80d11f0bdf", "sighting--80bd8d02-6611-4c02-a16a-ee4e4e429249", "sighting--1dd21ff7-0864-46b4-b4c5-9aba12d4e939", "sighting--b7b25db7-0d82-4d29-9414-bc14aad0d9c7", "sighting--f2dfd275-bad1-4295-8b4f-79fa918a124a", "sighting--843ca23c-73d2-467f-ac20-24c13a3e06d9", "sighting--7fcf73d9-ed53-4257-b8b9-9f96889c8096", "sighting--0d6791ac-218b-4d21-9c59-e23f59089512", "sighting--f9822957-cf80-49bc-a593-441bfeb9f8f2", "sighting--168db17f-e8ba-4b2b-aa9a-fe49cd018572", "sighting--798bcfea-8b57-422e-9cc1-0094ddb921fc", "sighting--07ba04e5-b1d5-4343-92de-61c11f0caedf", "sighting--568115e1-d2bc-4fd0-91ae-959de0d1c2e8", "sighting--d883eb0d-5c36-49e1-9635-317cdf665907", "sighting--1542c6d1-690c-4cb6-8bbb-895a91289cd1", "sighting--87c26e18-71ab-4bff-8761-2db23d136859", "sighting--72ec38ff-721f-44e7-8558-c81354151425", "sighting--367c391b-30dc-4d7d-8edf-ac507ba91767", "sighting--90fd8a26-db93-46cd-b18b-963b049595de", "sighting--b6a725bd-b2fe-493c-9b34-a8affaa3cfe0", "sighting--bccc338e-dbcb-4259-ac49-ed337250636e", "sighting--926ff7c7-6545-4404-85dd-4428cb7b5f7f", "sighting--24781761-1946-42e7-b46a-4162afe94b58", "sighting--de7516c9-9a63-4657-b9f6-bffd0e0913a5", "sighting--4b00de8c-0b20-4102-a89e-3e147e1f709f", "sighting--83326613-e448-4599-8387-d5535cef6c3b", "sighting--9d61e261-13bb-4cf5-8153-b6d0c3311499", "sighting--39544303-c2aa-404a-b320-104c727073d3", "sighting--2b7e565b-db85-4679-8995-f502ad61d7b3", "sighting--cd8ee424-6f1d-4a8d-bb77-b3b45a560ed9", "sighting--2035ecb2-b2e9-49c9-a5f8-dce9723c9db4", "sighting--b748f561-956b-435f-9818-950b30a5d446", "sighting--6662456d-207b-4660-a38e-3dc3e44e693c", "sighting--ddde937d-f603-4adb-a8d3-5628a4162b31", "sighting--b2d2ba70-f235-4649-8906-d3009c300a93", "sighting--e14887de-fefb-41f4-a640-65573da3307d", "sighting--6e9db547-d5a5-45b0-99ff-d84f5432a0e7", "sighting--10305723-cec7-4f56-a516-74d10f3a3b67", "sighting--8cbf8ca9-b709-44cd-9576-96343e459599", "sighting--908a0280-4092-43c9-a26f-760d1b9916c4", "sighting--6ede5052-6c0d-424e-9805-0920ec4b5605", "sighting--73e1e826-3881-4693-ba6d-254781f7b034", "sighting--fbd2886b-be02-4ab8-850d-0283b084cc0d", "sighting--07442e4b-d6a7-444c-ae44-9cb2eecde09c", "sighting--3640f601-fe22-4555-a33e-155399045e23", "sighting--beca23c3-0e90-4dd6-affe-b948370e218a", "sighting--b9200314-a97b-4ef2-b8e2-43e5e300468d", "sighting--2a9d378f-e2d9-4f49-9781-940e95d0544c", "sighting--b4694ad7-e6c1-4b86-85bd-a6f53513c45f", "sighting--41b415d2-e05f-456d-bf41-4d80d73ceaf2", "sighting--2f422289-83ad-4988-b378-4306437a13a3", "sighting--6db23d49-96a9-420e-b60c-cafb81a66d9b", "sighting--7d1be089-64f2-464a-a123-833ece11a07a", "sighting--1df79f35-643e-4e14-aeaa-c6d234cc3643", "sighting--52ae318a-e335-4bb5-bf34-0855d61e98f7", "sighting--b70b103f-454e-4db1-82a5-ee2baee1d49e", "sighting--49e44ba3-8692-4546-9ad8-0fdc0884b09f", "sighting--69994510-9300-49dd-b788-a99d91b06916", "sighting--0abde720-ffe4-4dac-b644-a221ed2bddb6", "sighting--2f0bdff5-fb0f-4e75-89a7-89c0971db51b", "sighting--e490564a-0331-492a-9ae1-ff6e18804b75", "sighting--3540740b-c6d6-40dd-b409-79b8b0118bdf", "sighting--453ba2cb-644f-474c-85c2-da2766f9965d", "sighting--1dd01e68-ae98-423d-8c68-5e3a00aef51d", "sighting--fbb4f0ab-334e-4150-86c3-5748191d978f", "sighting--194a41ad-7827-408e-85f3-219b85273fb1", "sighting--3b468758-c745-466e-bd4f-75b14637bc55", "sighting--4ee1ad06-80cc-4900-a7d3-58115ea4c889", "sighting--b96fbd5d-924e-4a6c-92f5-101fe01b5234", "sighting--bd69e8f9-eaa0-4531-9d99-e54122b6fcc2", "sighting--cd6195b2-d40a-44d0-b159-67ee117cba32", "sighting--c64f8895-51df-40e4-904f-2597c891fe95", "sighting--eb664821-bbcf-4970-9d70-6056d94ec028", "sighting--af7006f8-aebc-4090-82d0-94a2abc7028f", "sighting--0c4f4216-0577-4eb3-9034-9a74b240ba00", "sighting--cc623315-8299-4bd5-80a2-3b72033ecbce", "sighting--524c1299-25d9-4a50-bbc5-534844f5ab84", "sighting--162beb58-0d88-45ce-89e3-f1f7cf621fc1", "sighting--9ff790c5-3d22-4dc2-8703-f3c3edbc33e7", "sighting--e814a7be-ddd1-49b5-8381-9e1721c4fcb6", "sighting--5126353e-b197-4d7e-a4d9-89bdf4da7851", "sighting--add507ed-0838-417e-a44a-9981c827efb4", "sighting--9716d080-c263-47f0-826f-3cf13c553505", "sighting--656d70a1-2543-406b-8bf6-d5150c5ee0a8", "sighting--fdfba7fb-f517-4587-9e05-e41c75cfcb92", "sighting--b6f90f54-94c7-4b2f-9e3a-2c89f97d1efc", "sighting--fb1f4e55-4a17-4fae-bd10-38430c66b3a2", "sighting--b2d0ff6f-b8d1-462b-bcfc-10532bf6d384", "sighting--5536f502-977a-43df-a371-1671237f7452", "sighting--8bc864ca-3147-48fd-8ca4-1a1df660e2d2", "sighting--64adf0bc-0192-4055-bacf-2c6c390c0010", "sighting--8a873856-23a0-40c2-8208-0745dd44b6ed", "sighting--ee911ff5-fd36-4f8c-adec-a50cacf3da16", "sighting--bf2f342b-3230-4462-957a-6fc86ce409af", "sighting--d49f84ba-f87a-4344-a362-49a6f70a752c", "sighting--ab3ae529-74ac-4469-a4d6-1cddd06311f5", "sighting--8a81c3fc-00b7-4c50-87a2-c31d2185c7de", "sighting--7db3210e-e2f0-4fa4-8a64-6f1ba8a89059", "sighting--10ce4cdd-a593-463e-9d01-03a9f2951714", "sighting--98bd142b-76be-4bba-8281-1ff424b5b2e9", "sighting--1fdd24f9-62eb-41c1-a1d7-d3daa50a6e32", "sighting--669db9a3-4c0b-425d-a15d-d789d11cc03e", "sighting--2c8e7f45-9830-48b6-9f18-86ad6833e1cd", "sighting--5f76eaee-5db7-4d00-a1b0-e9b6d3f03ee3", "sighting--9a6b9d9a-3c44-421c-bd68-61bf03e7673d", "sighting--f969b2c7-dfc3-4e9a-8493-8854b5b19c82", "sighting--0ff6ae51-3681-413a-952c-13734ed21975", "sighting--19eb86bb-1f62-4e62-80d5-db15f9b295ad", "sighting--218c8421-3ad1-4f15-a449-08c56a4b1c0a", "sighting--24dc9604-e48e-4673-9d39-490055376081", "sighting--7f25a0db-41c3-49a1-8937-3f3eb813370e", "sighting--77393185-e952-411b-bd71-027385f27a4b", "sighting--cc0fc0f3-5378-4503-8937-5f3504524fcf", "sighting--06073149-3573-4247-b7de-d5aeb15d1202", "sighting--3d057b3d-1ff3-45eb-a248-d005247fac95", "sighting--25cfe0bf-f0ef-4af5-bce5-02f7a4ca9e56", "sighting--4d36bae0-5874-4825-9429-c6dafd3fc9c5", "sighting--a3f16a87-ff64-4c7d-a21e-f8104d8eced6", "sighting--15ee9d3c-41b5-4b71-beb4-38062226c8aa", "sighting--0f9d6c92-3560-4ed1-b88d-6da4fe561d7f", "sighting--38524885-cca7-46eb-a288-b1fa155dd8da", "sighting--576053f1-b658-4784-aabc-f3f037d7bcfa", "sighting--2274470b-af2f-4b93-a9d1-6de493a484cf", "sighting--535d6415-603b-4e05-adab-5c9af50cb12f", "sighting--fe8b988e-48a9-4d17-9ba4-a772eeb44f36", "sighting--6e2897d3-882b-4c2d-8e5a-a9521bf5bb42", "sighting--61d1f42e-d0d7-476a-adc2-e391497bc779", "sighting--d869a0c9-27b0-4599-b1ff-2e1b6487f72d", "sighting--f46a6f1d-2e9f-44d2-b5d7-027efeacdff2", "sighting--84f065a0-d3c7-478b-859e-1c77b877dffb", "sighting--951c968a-b07e-4fd5-a0fe-808ba9db9338", "sighting--66afeea7-227f-4b6d-84f4-7248659cd06a", "sighting--ffe620ee-dc68-44d5-bf4c-3ded73fb60ba", "sighting--b94d7e5f-62c8-4307-a4f8-8213bb375d56", "sighting--5da8d1ae-1105-41ed-8b7f-b841167449d0", "sighting--b0bae27b-5051-4869-82b2-35d37798d4b9", "sighting--34e0b9f7-e465-4f0b-8e57-cc6e1be19f66", "sighting--4fa39b51-84aa-4589-afb8-1ad9c2c1e73f", "sighting--11401b11-cf40-4699-a152-d19dab633af2", "sighting--8e026486-f274-45d2-bc50-5b4504a4ef66", "sighting--dba5ed38-f8e7-4f36-8d14-92b501f46192", "sighting--4ebfd857-6a5c-4d84-afc7-f3a167056c24", "sighting--b2ccc1ec-6b74-48c7-9802-38f7cb4d2c7e", "sighting--d3e95f9e-a899-4820-9682-39c791da39b1", "sighting--307d7d7c-8e53-43b9-bb48-c8a6086d3305", "sighting--e0804a71-4c65-457e-9c54-c64302394ca2", "sighting--fd9efbf0-a418-4cb6-81d7-1a064dfb9a0a", "sighting--46c6d8b6-7528-4a6a-b176-976b79cf9dab", "sighting--c73f6613-0fd3-4e1e-a25c-fe5131af4644", "sighting--1b81d066-7e21-4a5a-902f-1e871177cb95", "sighting--84f7fa9e-86ac-4af3-ba0a-f65124d76747", "sighting--b753ca1d-029b-49cb-b9a5-da4a160bd664", "sighting--52f16201-e942-46cc-ab9f-0d130e1f6f19", "sighting--437f3131-39a1-43ad-802b-e4eb2e9f7f0e", "sighting--9bebed85-6686-45e7-b96e-093fc9ec7258", "sighting--95d19a7a-29bf-4e3b-a931-51932a0eaaed", "sighting--7a600298-7f1b-4c3b-a106-c769a7a93942", "sighting--019f615e-fbd3-452b-b24f-704692ac8b67", "sighting--2ead23c6-0e0d-4acb-b273-9e7cc2558440", "sighting--07c2bb98-20c1-457e-904c-b6f2dda62610", "sighting--f10c5d78-a3e8-4b8c-800c-7576038ce017", "sighting--c0493add-3a0b-4783-a13f-b0bcd6db2397", "sighting--2298fe9f-ba49-4dee-99d7-f46c1c8de6f2", "sighting--afc0d2d3-7f47-4875-8614-1dd0cef214dc", "sighting--dcfda3e4-348d-49c8-9fc3-dc9cf48c8dcb", "sighting--eae6816c-5b7a-4499-b089-88d9fc592596", "sighting--4a65c231-1f77-4f63-bf17-24319a19a604", "sighting--79c10ced-f074-4b11-8433-6c39ed9b7177", "sighting--e9f468e4-3336-4e17-9942-60bb5bf9aead", "sighting--a8c67f60-0b0b-4792-b692-70e174b8bc34", "sighting--e7d796dd-fa69-48ff-a300-797a8f0632c7", "sighting--3949703f-f222-4503-877e-cff2bc6add3d", "sighting--92bb428c-1b86-48bb-938d-73e5ba303478", "sighting--7052a97d-0119-405b-9e43-2e9479eb766b", "sighting--12a68add-0cac-456b-a138-7690d38d7380", "sighting--3b6af421-e100-4c09-b239-0621ba245bc6", "sighting--c89c1505-8349-4994-ac70-672243ab5ffa", "sighting--9b84f976-7e4c-4790-aecc-034fd05f9fa0", "sighting--dde6e0ec-77a8-44d6-8e77-a78a3898d84a", "sighting--a824f31e-f8da-4920-91ab-eb48c4e9ed9d", "sighting--290850c2-7a9e-4ab3-9a41-68ee97c5c610", "sighting--da1ca290-b6a4-42ae-9784-9c43e1a3f018", "sighting--4e94437a-715b-4b10-b356-0c9d0dda64e8", "sighting--bcf4f3dd-d57e-45a3-99b8-9c33552d4cf2", "sighting--c1eead88-7e8c-4737-981a-f728857e3096", "sighting--4e46465e-2834-497f-b8e6-2a49f443fe08", "sighting--1f2480c8-fb03-4263-b30b-87450fedc4ae", "sighting--c2795264-7b6a-459c-abb7-b399c7b20cb8", "sighting--4dde4faa-5f1b-4a86-932d-f718cf1a82ac", "sighting--175a5e56-792e-4b77-a225-141ddd65b9e7", "sighting--f22e7214-6bdd-4e7e-9992-71d093d97a4f", "sighting--4c039d90-2f26-4bcd-98b9-cffdd5046785", "sighting--61d0f6a9-de72-449b-84c6-ac52f6567285", "sighting--3c2cbfc5-1fee-4bed-9083-c247338585b0", "sighting--48a5ea70-30c5-4f4e-bf85-d3d705ac4d64", "sighting--f62e8fd0-e6a0-4368-9fc0-39342da4b9fc", "sighting--bbaea2bc-84a4-4429-9aa2-2571c61cc47a", "sighting--a35bd8e3-e07f-43d7-a299-74155343560f", "sighting--bc4a661b-2f3a-43fd-91b4-7702c9093074", "sighting--69b03025-2ddd-4c6d-bda3-331ad3c31257", "sighting--fc6e12cf-dc3a-4e5f-9359-fb2e87a47284", "sighting--51ea6556-81a1-4a67-8c27-9636428cd989", "sighting--c2a5f904-d54d-41a0-bd0c-ea2c605d1e90", "sighting--cfe416ed-2169-43cb-b593-294288b85d15", "sighting--f1125b6d-6d3a-4732-8bfd-a77cb60d4030", "sighting--e25059bc-0321-4ef3-b629-652790ba5784", "sighting--2a8a8bdd-ef4e-4bb3-a9be-dcfe9b58a3a5", "sighting--d1396878-56cb-4723-8acd-d0b25be36e09", "sighting--c92369a2-114b-4e32-a929-e4c265d1a382", "sighting--ac68b259-5566-4f3a-a865-741a573db2f2", "sighting--33360057-0364-485f-a3e6-9472763a805c", "sighting--57a68a04-1804-4d73-b4c0-5e1ec088e016", "sighting--da80ff92-ac73-4947-9a7e-fe0691985c9e", "sighting--efe40888-5082-486a-bc39-43cb4d961fb1", "sighting--3cde1b0b-d2e5-41ea-ba9c-4282979556fe", "sighting--a181b1ad-e616-4b66-ae65-c34514c6ebef", "sighting--753cb884-bed4-4226-b97f-752065ab977c", "sighting--bb798ad1-f6ca-4f53-99dd-f5ec25c6dd94", "sighting--fc9f4a72-c237-46aa-9e96-f1d034a1f2cb", "sighting--3184e9d2-16c5-4f8e-b562-f867235ed3bb", "sighting--9f9352b8-1811-47f7-9181-54bc09eade07", "sighting--414dde0a-3d59-4e8a-8040-9b1d87ba9f3a", "sighting--48d62eeb-96f9-4f07-a3da-bd1511a3dc06", "sighting--7b9e0d1b-75fe-4e44-b22c-acb2929ec400", "sighting--bc6dd829-5306-4c0f-a2ea-2d78321f044b", "sighting--b9e4821f-eb32-4692-88f6-f6d4769796e2", "sighting--6c7ec66f-cad0-4e79-a144-b089350ddcff", "sighting--2ea297a9-7758-41b1-88d8-446412463931", "sighting--36ef6186-4f46-436a-a6f4-f35d316fdc48", "sighting--54e47a05-eb73-42f6-ab37-3c227125502a", "sighting--a081671f-44e8-486e-b8ba-ff8b1b411a7a", "sighting--0f9647c1-5a0c-4f87-8190-33dced8ceaed", "sighting--e3d91b81-0a06-463b-9fd0-6819b6404343", "sighting--01357799-6107-4411-af85-dffa8b3e8084", "sighting--f69ac9c5-b801-4d48-893a-f024b4b00986", "sighting--cb20db25-892c-4fa0-8b61-5fce862f6f29", "sighting--6de23aa5-e8f1-4724-aff4-5f7b7fd31c48", "sighting--f382ffa1-816e-4bf7-8961-f5a70754d754", "sighting--8e7c3183-f5d9-4e05-a363-2a505ad59d01", "sighting--4274f821-15eb-4ac1-8ddb-86bf9554c105", "sighting--5a8200eb-23e3-42f4-ba84-e200f224b75c", "sighting--f0e5c6f0-16e8-4602-8369-51248d5580ca", "sighting--b7750c68-a414-4ee7-be06-e7b684650574", "sighting--38d0fba7-ec2e-479a-8fe3-3a89bced77c7", "sighting--12e7fad7-1dc4-48df-ac3e-e4af4e9c4bfc", "sighting--5754c578-c9b0-4241-8892-8513a3e75453", "sighting--2be5e8f8-4fbf-4f6a-a9bd-eb0d4b7f8ed5", "sighting--498f5928-7c47-4bf8-adaf-b11fff2ccccb", "sighting--fa01ea4b-9452-4d61-91f8-e0e1b61b0a37", "sighting--d6bc3b11-4413-47d5-89cb-c30ebf4093ec", "sighting--5b5716e6-e520-4df6-912e-15fc65381fda", "sighting--170b526d-8965-4e0c-8628-341d5db0ea8b", "sighting--ea46380a-5a6d-4686-aa14-64e5b2e5071c", "sighting--862b70d6-e715-4f91-a776-5174f3654e26", "sighting--846ba887-7bea-4b6c-8900-88c285d6dfb0", "sighting--ba9ed36a-793b-47ee-9204-a76f8603f6c0", "sighting--fd3eaaf9-f71f-4a7c-ba0b-b625796fa96f", "sighting--d8de5eee-666d-4c4c-8a98-c216c28b935f", "sighting--f77e490f-b618-429d-a479-d3377e75db98", "sighting--f83bdd17-0736-4f86-95ae-e8e1861e406f", "sighting--24c86d7c-4caa-4815-81d1-badbff93d459", "sighting--2dfbed0b-c6bb-45bf-8577-ed97bb6db1c8", "sighting--b9b7c8f7-c00d-433f-bdee-4679b0506182", "sighting--e2a6b116-cf71-40d6-bac6-13e700e310cd", "sighting--f242756a-d1b4-4ea7-806d-37685211ca07", "sighting--dcc75a57-5c16-4cc3-88ac-58b3495fbf68", "sighting--13714621-dedb-475e-ab62-c870d0639e64", "sighting--655311d1-b87e-48bd-9681-a19755f97778", "sighting--d3cb891d-ad05-4c9f-b3be-be28bfb358f5", "sighting--c3705a8d-d1af-4d2e-91b9-8877b387cac3", "sighting--a44b2cb1-e4b4-4ca4-89fd-0132b17dd664", "sighting--48ae3b7e-e9be-49cc-acc0-ce11d98456e2", "sighting--c5e7862f-cc86-4567-9f4b-19f7ed4ea0c7", "sighting--ff95ce60-062f-4ab8-9043-4a6bdf445008", "sighting--0308ed18-2bba-4d7d-a6b7-6ae3eace3266", "sighting--71610ae6-1d8a-4c84-a60f-a93f3d8f5161", "sighting--8c9376eb-8bed-4c01-a86a-6e3a3ad99480", "sighting--f81c11c3-2e69-475c-80cd-be6ffa2d03fd", "sighting--d488a97f-0f74-42ca-bff9-03833d4d8a93", "sighting--bb6f33f2-94a8-41ab-90e2-2adfb383d04d", "sighting--8752f443-eaa0-4d2e-b05a-e373dd7b10b9", "sighting--09c318ff-74c8-435d-b758-cd5f0b9f64e0", "sighting--1626cc12-d2d2-4462-8f6e-be706b58c5b2", "sighting--2a519431-865a-4607-afa9-6afcf0b76821", "sighting--40545208-488e-4616-9b63-fafe9a12ceef", "sighting--555b7a2f-3183-499c-b4b7-a58bb14acb44", "sighting--7757fe56-76d3-49c5-86a7-4bda321e94be", "sighting--b7886dbf-1e0a-45a8-8767-a46fbfe9ae5c", "sighting--71c81dbf-7aa6-4d52-ad61-f9066e0284b5", "sighting--09e06253-83b5-4129-9ead-57d8b9691f81", "sighting--380b2b50-d2bb-41ec-b6ab-b983d396efb7", "sighting--f5889c81-83d7-4be8-8362-7b22a1508b02", "sighting--033877ce-4bfa-47dc-98a4-6f02dea51408", "sighting--11d0e44a-4e54-4b80-8bc3-77b01ac27e4a", "sighting--7c0cc699-1c40-458a-b5d4-e23fea95670a", "sighting--1216c390-7c8e-4127-8046-792de3d40fa2", "sighting--1f2d4d1b-7c02-4747-9b4f-abebd1ef7e77", "sighting--74398dfb-994a-4b06-80f9-e61b0b0a5c11", "sighting--6ff0c692-969b-4281-9717-4178c1de56ea", "sighting--e8e1d14b-355f-4367-9b3b-3ef1eae92897", "sighting--845832a0-5c64-4cee-aa39-75e3ef261d70", "sighting--ce32c7c6-932d-4041-bddf-c0d99fd90bb5", "sighting--0389c00e-d695-4bf4-bc4d-4ff1198f5050", "sighting--e939fd69-5ebd-4ef2-beba-9977f4c2eba9", "sighting--69992176-459c-4ebb-90f7-040b72ff2d85", "sighting--5b5bcdbc-8392-4091-a073-394a5b53e98a", "sighting--db522271-5aa4-4e9c-8228-4385b9381402", "sighting--68d55b49-82b9-4875-a3fc-9ebf2dbe7fa9", "sighting--2a5e3e5a-fdb1-4949-9fc0-0c5df758ae2a", "sighting--e6086758-9667-4fc3-9115-04cd57c2d2e1", "sighting--d87d962a-b442-4852-a79a-5f4e7fb9fdc9", "sighting--21975142-a9f5-44d7-99ce-0ed65da2f6b1", "sighting--cecbf25d-c0b5-4e2e-98c9-a6daaffda1ba", "sighting--a8e64e5b-6c76-4e9d-98ba-a365b297bfa8", "sighting--d546d949-eae7-4320-9027-5b35467dc6f7", "sighting--6ce4da4c-3b14-48ac-ae35-85e5e4a19959", "sighting--26222ea5-5888-4e24-bfe5-574316fcec85", "sighting--66de0569-9b0b-401a-b0b9-51866859aa74", "sighting--acef0928-0271-4003-8978-ebd22e233331", "sighting--2c915d0b-386f-4212-9053-cbaec8bbd728", "sighting--8c698fa2-d9da-4e3e-a177-ad652a3254a5", "sighting--38708531-d109-4de0-bfef-1e7d3689bbce", "sighting--f805c250-22cd-48da-ad2b-1d44ac97da3d", "sighting--ccb1987d-cbe1-469a-a72a-4840b7cb1ba1", "sighting--55d5a200-249b-4b6b-89b2-632ce4e54379", "sighting--b60c053e-1f79-4275-95ce-1c3db7d983e0", "sighting--cd4ca692-15d0-4f31-90f9-e76c25014821", "sighting--195a38a9-6a69-4472-ab00-4c6f0aa0f5ed", "sighting--3dea539b-0c0f-45b4-b02e-bfbfbaf691c3", "sighting--a23bac2f-dfb1-48ad-a2fa-090342d7a4be", "sighting--4afbf727-0605-44cb-aeda-4ec886a3e1a3", "sighting--a8dfa35b-f213-4806-a19e-fdf14a48d1f3", "sighting--e3085e78-ea0a-401d-9d9d-f0e6aa3071bd", "sighting--830590a1-f684-44a8-bf3a-a3e177de140b", "sighting--3cee6f8e-a16f-4c7a-a5d8-46bec77b08be", "sighting--a2866ce3-89b8-4eab-ac3c-243785eee908", "sighting--6a5bbded-46ff-4057-af5e-c66496532675", "sighting--f431bfc4-8054-46e3-8f74-32393a3b3b93", "sighting--bd63e4ac-f36b-4c20-9e94-20b3656668f4", "sighting--77c65b11-cd60-40b7-a4b5-259f8f96bb28", "sighting--a0698664-cb56-4795-9a80-0e97a94641fb", "sighting--85607e23-e552-45e5-92a8-eef336ff23c8", "sighting--a2d5fda0-6462-4a32-bcc3-8ac9481a3027", "sighting--ac347d30-7df4-422c-bb00-e8bfa8aa80da", "sighting--6cccb3e5-80b1-4f8b-862f-c5f3e19a36c4", "sighting--a2f2f0c1-3942-4640-9fd6-84b565f15b0d", "sighting--7e48eb6c-2f75-4c31-a076-b43a0449ff22", "sighting--6bb5f048-58e6-4d32-b4f7-cab10f09d58c", "sighting--04a1ee52-2206-4494-8878-67852bfc0d8c", "sighting--fce42f7f-4c77-4b45-aaa7-606d5d786b70", "sighting--a24fb64e-0efb-4ace-9391-44ccd202599d", "sighting--587a4aa8-5740-45f0-baa8-9f6f60d226d5", "sighting--e87a4930-552a-4032-940a-7fb02008109a", "sighting--ce6f0958-1892-4240-b978-3d93f4444a46", "sighting--36c6155a-f499-4dfe-908a-df1f4d45d197", "sighting--90cd6fe5-bcc9-4944-aacb-a5af6b2fcf8e", "sighting--24427cd0-7153-4456-9350-bd5063d84b65", "sighting--eb844072-e776-45c2-abb6-d604d026ce49", "sighting--56f993c4-cdcb-4482-9cf4-149c8bbb8b2e", "sighting--e5dabafc-088c-41a3-93d5-b8c9f05ea09c", "sighting--3573b089-3a06-4040-a569-0b952fbbc1bf", "sighting--baf6c767-84c6-4998-8007-2f6086428877", "sighting--2bbef3f2-38a7-4068-90e3-94465e9c3a84", "sighting--8a63da4c-bd80-47ce-9176-7b8cd31a5f6c", "sighting--225fbf18-19d7-4cd3-be93-539890d9770f", "sighting--657469db-de0e-41ce-8983-a1456ddfbb50", "sighting--f18faf00-a46c-435c-a58b-bcbf00ea4954", "sighting--9e195811-7228-4e4f-a22d-8ad76a9190dd", "sighting--3737ac3f-cead-4fc7-95ae-cd596e0d22e2", "sighting--cc08494e-1748-4643-bf1a-aec9f691809e", "sighting--b6d39f84-47d7-4113-9525-a31f0ff48e37", "sighting--a2dabe79-5dac-4ed6-8072-2f56e704c611", "sighting--2e7446ce-3b64-4d11-b179-a8ac64254a2b", "sighting--9ffd79a1-4047-483e-94ba-b716f4984242", "sighting--78c803b7-e943-4dc7-82dd-28e548b4148c", "sighting--ab8480f2-b654-4d7e-9b6f-bb173cecfe9e", "sighting--885aec22-5ae3-4471-ab08-12b09c7a60ab", "sighting--406b7644-67ed-47d3-b78f-1f25c345f8b6", "sighting--d2a0f164-ce12-491a-9669-2b5f1991d264", "sighting--dfa6aec4-318d-4edb-9e03-94fce1a51627", "sighting--37cf8232-7cbc-48cf-9565-b2d2d379a497", "sighting--9d9d6209-ccd2-48ee-85d3-9d745c10c120", "sighting--e8099851-7fd5-4878-9d2e-003ed08c68a9", "sighting--02465f3a-971b-445b-b430-8d33283a96a8", "sighting--a0484eb9-a3cd-4e91-aaac-cef7317c5b14", "sighting--ba05a4c3-3dcd-4f25-b137-78615b40f3c8", "sighting--1ae5635f-2c08-4dac-a342-fd400ffc6c07", "sighting--2b60e4d3-2945-4ec1-93ef-5d5436b6f87e", "sighting--113c6e84-14e7-43c9-8854-5827357a7780", "sighting--975d4382-70b0-4f65-a0ba-6732a9cc04ab", "sighting--d1c8b107-dd5e-4a5a-a58e-fd9e0d3853d4", "sighting--99b21794-df9a-4f82-bff7-ef1b504cd4e3", "sighting--837475b0-ef23-418c-af50-ac63beaa4c45", "sighting--9490dd3e-9743-49fe-b481-0528843dd4b8", "sighting--ffd0a989-4430-4228-8038-ea5a2965ef5e", "sighting--127384b2-1c80-4ddc-8aa9-673dea75a89a", "sighting--798a85fd-7484-4746-b44e-3c52917fced6", "sighting--ae051db1-0ffb-44ad-bb85-86cac8e303ed", "sighting--d7bca621-33e2-441c-a4a6-43ed12ee9574", "sighting--00b3f859-6f71-4865-adb7-1e28b6729faf", "sighting--f728b8ee-fab3-4b1c-86b4-0663e4c006b9", "sighting--c5fafbeb-3ec0-4672-b67a-fd52d006935b", "sighting--516bca6d-0b0f-4a31-ae93-1e0d555b897d", "sighting--ac9fa9ca-79a8-47df-9200-2bf65d1cd1e5", "sighting--a987bda4-825f-47e0-b39e-7933575c79c1", "sighting--b73f0e2e-c71a-4f80-9616-69365be94f6c", "sighting--091f79fb-61bc-4606-b015-65575a1393ca", "sighting--3154ba1d-d254-4a1b-af81-521ab7ae9435", "sighting--f37b1b5b-e55c-4e32-a3a8-4f7f38649b60", "sighting--82d60db2-5518-49a9-89d6-06e4de12bb79", "sighting--070cbf97-3eba-4b44-8b1d-e64e1993c58c", "sighting--08be144f-733e-454f-b2a5-bb6022ca277f", "sighting--2081931d-8150-4c9a-b852-660c32a59a89", "sighting--71a699b8-3c47-4e41-9d75-656c6b53b438", "sighting--fafa92a0-f9dd-4d40-af29-59dd64ef2c22", "sighting--4498e7f3-d614-4d6d-8a58-f29f94131ea5", "sighting--0932fa89-2b4c-4bd3-866e-972e4dfd3848", "sighting--fea083bc-d867-49a3-af82-312d17a6b7ff", "sighting--4f7b9ad4-4cb6-4dcb-8f5a-958551595608", "sighting--50c41fbb-a828-49dd-8b9d-fd18db441a45", "sighting--6921b462-c92b-405c-99b2-0c87f2903945", "sighting--d01d9eee-0d04-4293-bd6a-e634e768abc0", "sighting--7534912c-ba9a-4b4b-9e2f-547126c4c88d", "sighting--cfdd16f9-3cb1-4cf8-a4ff-8bff3660bfc1", "sighting--09aa644f-e2c2-43b7-a3f9-6c838334f824", "sighting--b20b2ff3-efc1-400e-9b46-e991103e22d4", "sighting--0735bdb5-b83c-4867-acfa-23e04464935c", "sighting--d1b9cd98-55a1-47a6-8ac2-67f376b41fcd", "sighting--dad761c2-87bc-47ba-9166-6a0b1698f267", "sighting--7ab0e9e1-d0b3-4f02-97a9-67b193ff4744", "sighting--6784478c-8318-45a9-bba0-1408a0aed46d", "sighting--6f5cfc1a-10da-4f81-9c30-2a66018f660f", "sighting--22959954-bfae-45c5-91f9-19edbe49e186", "sighting--ade74922-6e77-4ac4-b831-741d3d11a4b8", "sighting--5e306a8e-e98d-42d5-a8ab-6750bfa75ebf", "sighting--e23b306d-3d29-4bd8-9877-c142548dc7af", "sighting--1e0f1237-9b3c-4ba7-a46c-8eb0ff0e2893", "sighting--7124d6ab-73e1-4c4d-9a72-699b3d16eeb5", "sighting--547fa0d7-8595-4719-94db-f48419ac724a", "sighting--26eb8712-8cef-416e-8577-6072c7b913f8", "sighting--6c4fd1d3-ca66-4e37-a77e-2d84f5687c7a", "sighting--3633334a-69ed-4c8a-a973-f6d20a3c523b", "sighting--3717b1b6-ad69-4cf4-a0f5-1fb128a177d5", "sighting--110b191f-07ac-46dd-a7af-08601c4d730c", "sighting--6c3606a4-a669-43bf-8be2-af3601af6589", "sighting--537dcfef-2e86-46a3-919c-c9f3241e2414", "sighting--3a088faf-5810-48e5-b8cc-d46399e56896", "sighting--4864f2ca-8b1e-4622-9377-7ca80937160f", "sighting--8fc973a2-921f-4a44-8223-76cd385d3d67", "sighting--04cf70ae-21a5-4b50-94b4-a2f5e624e6af", "sighting--96cda5ef-8dfa-4e84-a4db-18cb89ce462a", "sighting--5a20bf00-35b7-42d1-a08e-18c50e076c58", "sighting--5183ec15-056c-49c5-b0f0-23b1baa99aff", "sighting--6811a339-0a31-4bd6-aa0d-e83492604a68", "sighting--3a8bc8e9-ada6-4acb-8b40-e93c55f15e17", "sighting--96e2c30a-9bf9-4908-a10e-534bb4dcd7fd", "sighting--b4629729-80d8-450d-9ed4-49cb091acbf3", "sighting--d258b586-e134-4b58-baa5-d9d405c51e8e", "sighting--c45a59dd-748f-433d-aa34-9378d3fb43a3", "sighting--e48bed13-6472-40ee-b871-badbdcf2ced0", "sighting--fd7ec834-4114-4ff9-bd28-ed8b05c16e43", "sighting--a0646cb9-4991-4566-93d8-77d2e8cf4e0f", "sighting--1261bf1e-ecd0-4c23-adcc-3f5d44fffac3", "sighting--dfebda24-cad5-4d91-bf41-ed549dbeaf76", "sighting--e24cfeb3-14b9-4e46-87ef-f97c3dc0980b", "sighting--f6dbb3b6-9677-4edd-8aa0-5134fcd07430", "sighting--3a7fedb9-de31-4332-ae48-c278ad4954c8", "sighting--0ca829f1-4580-420f-b0a1-00eecc141963", "sighting--ebb298eb-2834-4bb3-8088-b60cb62317cf", "sighting--52ad73e7-a80c-44a5-819a-187667f67d84", "sighting--04cc1eff-b42b-4a1c-a154-a820a2d45b7f", "sighting--a015814e-8226-4b11-b6e9-03a06021985d", "sighting--ad70f5e3-a968-4cd6-917f-d3d79ef6f6af", "sighting--6ad21954-9187-4da0-9fbc-24653af17f5a", "sighting--797bc96b-c079-47a7-a02f-dfa491731800", "sighting--39c57140-55e0-4087-8e79-3eb58a48ac01", "sighting--6007a6f3-24b1-4738-bae5-d03cf3ef8d73", "sighting--071d0435-db3c-493f-afb4-9b16209f704b", "sighting--9ffac17f-ceb5-4ffd-bbf3-3705f60af091", "sighting--9c849068-cdc1-4a02-a580-e6d586e721d2", "sighting--bb573738-d93d-43a4-80f0-c6c72022d61c", "sighting--468e9a8b-3a91-48e3-b9ce-808d8b26695b", "sighting--d9816b3c-438e-4fe0-af66-df33d2e5d589", "sighting--b6449e0b-2f7a-48b1-8483-796cf2cfd8f7", "sighting--323048d0-a88a-4ce2-b23f-e20a3e06a246", "sighting--4cd66709-aff4-429b-906d-ff7ace13a778", "sighting--71b77bf1-5096-4401-acbc-0d70081dbda5", "sighting--6fe21e3d-c2b9-4bf1-bd7e-41a30a1a6816", "sighting--ffb2305c-2126-4f6e-96df-ea0948db6a1e", "sighting--281db364-a48d-483b-81e6-5891479435d3", "sighting--75aafbd5-13b8-451e-a7ae-94709d2cffcb", "sighting--4505c4b9-0c4f-4b9f-99ed-4a354331a3f5", "sighting--476d9001-6f4d-41e1-b6af-bff199877c5f", "sighting--b9a46c4d-649e-4f64-a496-7fc32f123a23", "sighting--b5b5f627-61f7-41a3-82f6-3bb593e3a290", "sighting--09f5a68f-97da-44ad-a623-931f520de71c", "sighting--1d7aabff-3919-4fcc-8689-9aec301cd8ed", "sighting--e9993c32-cced-464e-88a3-6b67179375d5", "sighting--50afef65-b1db-4686-be20-ead3ceb4e3ed", "sighting--08926dbb-457c-4f0d-acbe-e261c7421a22", "sighting--09580d22-eed3-4e9e-8ac7-d332f53bd43c", "sighting--2800e55b-4092-466e-979f-d31c460dadc4", "sighting--c40ffa6e-5e8e-4244-a149-673be2d5bb6f", "sighting--0fedaca5-80c2-4bf7-90c1-ea2a23655832", "sighting--0f934138-8d1c-4db9-856a-9ce44ee05ac8", "sighting--61651ef1-96d7-4e38-a2f8-cd511c963eac", "sighting--f7ec2656-303b-4421-b07c-d28d77482f09", "sighting--72568762-8e4a-4912-9bde-fa8222d3eafe", "sighting--fc28b64c-708b-405a-ae11-219cb87f8985", "sighting--2564c6a2-5c9b-4924-8d49-51a2edc577e2", "sighting--ea0278de-b897-4922-b9ae-0f3855a1cb07", "sighting--33d1166b-b93b-4c6b-98e7-ff48354bd5c6", "sighting--cec4302e-7b69-47af-b526-4047337f9a8a", "sighting--117676d8-05fe-4c5a-a84c-8e4b0a4c7cd5", "sighting--fea6f3dc-d9d0-4abf-8a9a-80090cd98b3a", "sighting--738cff19-ebc3-40bf-ab74-5f4b4a80b2cb", "sighting--f67120b4-2905-4f4f-ac99-626c2dc41853", "sighting--8944b023-afd6-4b97-a994-fb2b49a69b81", "sighting--35c6d43e-a5a5-4a76-9387-39006fa5a8fb", "sighting--f394ea2d-a467-432b-9c16-c441240e8c58", "sighting--b0d3bbf6-95cc-456f-bf85-1969dc866f8a", "sighting--d597d6ce-5d2a-4af5-aaa7-fc4194440400", "sighting--0bd26b9a-2541-47cd-bac8-fb9d183d03bd", "sighting--06493c4a-3c45-43d0-8a0b-7792be012c16", "sighting--676b9223-cea4-43bc-a813-299954f62d2c", "sighting--ff2368dd-259e-45b4-8440-4d26d057078b", "sighting--6f73387f-36e8-4d47-8238-da1fc35e37cf", "sighting--7760089b-5272-4cbb-8c84-a514e2994c93", "sighting--4f71a406-981f-4601-901b-80d83d748879", "sighting--733d5092-a878-48d5-a07c-fb10f68e3293", "sighting--5a8f8170-818a-47df-b238-3d8acce9661a", "sighting--ba158e11-d967-40cc-a469-4b5772a6a7eb", "sighting--1d8778c4-9bca-4a80-b385-c316bf39b196", "sighting--a503cec3-d1ab-4791-8a66-980009c7a128", "sighting--9b869450-7607-4c52-919d-5b99f941e46e", "sighting--843645d2-2e2a-430b-949f-14a74ba38afb", "sighting--e18571c7-4612-4190-8875-408ccb794002", "sighting--97cdccdc-b89d-408a-89f6-c2d722fe11e8", "sighting--5fcd974c-00ff-42f7-a9eb-f9f9e3b00c65", "sighting--0b2f7550-00b1-4ad9-b876-34e33c2ab09b", "sighting--dbf9860b-8d55-4b76-a3c9-46c7745a40de", "sighting--d8d0ac13-7ead-4fca-b1af-8012cc4a908c", "sighting--452e8dc3-d7f4-46bc-a945-54698c634f27", "sighting--6629405b-80f5-4369-b884-6df1f9086c43", "sighting--c9292851-d063-4749-94a4-d170170a1f0f", "sighting--f2b47492-f15c-4650-a33a-b776a2087f92", "sighting--dbaec4e5-d105-45bd-94e4-abde27d05f17", "sighting--20d580d0-0f55-4081-98a8-b35deff4b6b1", "sighting--35c5ac3d-3fc6-43ac-9d11-5cf03cc9406e", "sighting--4f6367ae-e9b7-4af3-8bb5-648dacabc527", "sighting--bd9d8483-7487-4ada-a52d-babb527f1144", "sighting--afa81f8f-b2e8-4778-9c0b-49d419d5666c", "sighting--8d38ab6a-9ce6-46bb-8271-8dc6c28b8bb4", "sighting--205a7fc7-a8cd-43e0-a49a-5a220151ebc6", "sighting--c9434579-e6d1-466a-b1cc-5e01b0edf7de", "sighting--f0a6a07d-3d71-4800-8db9-6a58787a3c68", "sighting--5bd63951-f9d8-4cc4-8524-92346ed6c61c", "sighting--ce9abdf2-cba2-42b5-b234-dd866b5cbf53", "sighting--315b2109-3300-47a4-a1ec-1fee058c5fe2", "sighting--68cbd261-5753-4bf8-9c9c-7b8621f6e6a1", "sighting--5e9d8a65-31ac-462d-b5cb-1a7408ec9aa0", "sighting--24a45383-eb65-45d6-93b5-1da613ba4149", "sighting--45e93d57-ac25-4b03-b003-1fd42ff1aa43", "sighting--edb55805-8c3c-4f53-9727-c84b78016f76", "sighting--2075ec5d-fb31-4cd0-ae5a-323e3b2f660e", "sighting--4186db52-5f9d-4e1f-babd-755326950b1d", "sighting--b6d34497-967b-43a2-85cc-ec8a63bb7fc2", "sighting--7666ae5d-5d2a-4f11-bd22-6464994a96db", "sighting--a23dbc88-84ae-4f0c-a884-80294fe47cdc", "sighting--66c84087-9841-4f7d-bdf9-b32969186623", "sighting--0e0edc43-d8df-4df7-bc6b-fbb3481cf498", "sighting--f6652db2-aeb3-4cef-9a05-f2e49b55c7b3", "sighting--ac296658-0680-4dec-a322-0fbb0e3d2ab5", "sighting--3682af3e-b036-4b0e-9e2f-de8a66290351", "sighting--d6481cac-67d9-4d9e-9a34-27b2aab8e666", "sighting--9983f731-0543-41d4-9373-f03c8d92ccd6", "sighting--3561cee5-c4b0-43e7-9847-adceab049b69", "sighting--5420e2ac-13cc-457b-b524-7c0a9679dc3d", "sighting--82175705-bb99-4f28-97d6-e83feb66736e", "sighting--487e4223-ddc9-47d4-b478-13a104031aa5", "sighting--93fcb7eb-12d1-4852-b1cb-328f1bb14f07", "sighting--22b57d3e-7ca2-4fb1-9c0c-4469980e6dc3", "sighting--e4972c83-637f-4ff0-adb7-9daa36991b0d", "sighting--18af4b9e-7e54-4fc7-8feb-fc3b1539d7c4", "sighting--e379a5fd-147e-4ac4-a696-78a20f75501c", "sighting--9a4acb10-a641-4b91-91d3-e95f6e8ec8ad", "sighting--ddba6ae1-e5c7-4850-acee-7451ac7a9e0c", "sighting--d7bb95cc-698c-4ac2-9926-cf8aac4ee5c3", "sighting--fdea4843-222c-4c22-b7a4-315b275ab5f3", "sighting--2f0c7ada-2530-463a-94bb-94a172f328db", "sighting--9ded6296-00cb-44fb-badf-97bba95dcaeb", "sighting--6041d0da-b9a9-4646-8a19-7de78171752b", "sighting--880bc08f-c04c-40cc-8991-ff1dbf34c139", "sighting--62b6767c-09f4-4713-9b6c-cef15acde1d1", "sighting--623bdb46-de5b-4259-b93d-9b907a4631e5", "sighting--78947b99-3ec7-46c9-998d-078a154abf04", "sighting--bce4d725-0740-4772-8fc8-cf381afe1a40", "sighting--9c6b25bc-181d-4b1e-85a4-fd687d338252", "sighting--278a55db-cd84-4e12-8cbb-038486dd1c40", "sighting--f8fe5da7-abf2-406d-ab71-e322c809d3e9", "sighting--cf631e96-343b-4aba-b767-a7d84f5d8b0a", "sighting--36299b59-d119-4e29-931b-9e4e6e4401b3", "sighting--57168e1e-28c6-44f0-82aa-31e5db7a52be", "sighting--5b9d0ef4-53d9-42aa-809c-9a560b3947ee", "sighting--3db1d045-3edb-4e06-84fd-cdef76b89fc3", "sighting--50aba911-7e07-426f-8f06-d7f4eea73bf0", "sighting--53815ba9-b959-4300-ac96-1a77748b92f2", "sighting--b1b98c32-db36-4dd4-ad85-58c3f8bd1d1a", "sighting--7add7097-d932-47ff-b82d-987849a7ff72", "sighting--60d3c606-fcd9-4936-867d-acf26d92b6e0", "sighting--61137315-9ba9-4709-aea6-8370cad86792", "sighting--4c6b762a-a47e-4d2f-8e2a-a9e2c743ac16", "sighting--ba31e93a-0b48-40dc-8293-be55ebfa5562", "sighting--9038fed5-50f5-486b-95c3-0d468114e134", "sighting--b08925d1-79ff-4361-ac02-86b3ed35cb93", "sighting--89809864-d408-4ff3-af10-f1a07ad5d00c", "sighting--09f38f39-80bf-4d63-9865-0453357edf6d", "sighting--c538a104-02b6-4a5a-b0a6-6d145aaa1479", "sighting--84dadae2-b104-4162-90ab-59dd9054789a", "sighting--8c6f3d17-d9cf-41c1-b513-045dd4b65371", "sighting--94d9512b-781c-4fe5-98d3-dec7563c50db", "sighting--81ac15f9-523e-4773-9ca6-187e030f04a2", "sighting--da12c7b3-e0d2-4059-b426-ae5df67e83ff", "sighting--69217179-1dba-438c-b015-3c5fa5f2fc35", "sighting--bf9e223e-1e6f-4953-94cc-a7e3e4dd30b5", "sighting--6ff4df19-4de6-43db-bb03-36c3f68a926d", "sighting--fd719ada-ebe5-46b1-aa73-b13ab034a432", "sighting--0d937e00-2989-4160-b9a3-5c47d7501d0c", "sighting--a7b186d7-69fe-445f-abbe-8277bdd4e59f", "sighting--7c8dafbb-9653-4756-bbda-acafa2e34f25", "sighting--38c99eb6-a235-4cec-8618-d0e738641452", "sighting--c3a278af-8489-4462-85fd-5a7348db82a8", "sighting--a8da1bf0-88a6-4a0d-88be-37ebdd2edb87", "sighting--e1c51811-1441-4762-957d-adf1dc77af1e", "sighting--7fa064d8-442f-4d95-9167-3e20944a2fde", "sighting--27cb1680-a5fd-4df8-967f-9a5d6f9144d7", "sighting--ea67b4c6-d908-4872-a4e6-d102241c92d1", "sighting--926ba8ce-1fd4-4ccc-9073-f5b3b0a9e605", "sighting--4982b87f-7738-4be6-86bd-6c148e9aebb2", "sighting--66ee9c10-86e1-4d4f-812f-b526a52c4a88", "sighting--923aeb5e-1c92-41c0-9b8b-41baf173a75a", "sighting--493d00ac-9214-4ea9-bd33-e871b5a19bde", "sighting--7039821e-d280-49ed-b632-bc576f3970f5", "sighting--73dd8cb2-acf1-44fe-a85e-96e9f870b748", "sighting--9f771cd7-a658-4ab1-a28d-aab78ef51a32", "sighting--0f893bee-0ead-42c9-93c0-4ee97bc3f9c5", "sighting--ccaae5e2-c581-4e54-97a4-afa1092c7d9b", "sighting--ced76fb8-6d72-45a0-9a87-cdaed4787953", "sighting--19089b66-a732-46f9-b657-4902ff555d6b", "sighting--1bd06c71-6370-4634-9331-0820fec31716", "sighting--cacc5a29-41a1-485e-b782-49be7f090f7e", "sighting--15388160-cb44-46a2-b0eb-34368299f5e0", "sighting--e0e7fe3a-23af-472f-94d3-2b0550a0bf9c", "sighting--fa6f1bc1-876f-4b5d-bb7e-78e6dfc556bf", "sighting--43f6b539-9451-44db-bd68-f7acde7a5050", "sighting--31e06247-7bb4-4b12-8d7f-285100a9af42", "sighting--df0330fb-572e-4902-9ed1-e15f94106902", "sighting--67589f40-97d8-40ba-9257-6950efa6a14a", "sighting--7c8e3d7c-7a9d-4e0c-a58b-7627664a6c58", "sighting--a6340b80-9eae-4660-8f42-1d121fd77dce", "sighting--2198a3cf-52c0-48c3-9e79-37cbfad03d72", "sighting--b977ac48-4510-4253-a4cc-36a00e36d143", "sighting--7a0488f8-b936-4231-b4f8-eb3d1f04b872", "sighting--a561d761-8efc-4633-a2d3-289cf27d9da6", "sighting--84195f80-cf9f-45e8-812f-8e434c30275d", "sighting--da14ff09-259f-4546-9e39-28c84c186266", "sighting--c8e0a01c-071f-476f-808b-c2a576caf958", "sighting--efd5d218-aae7-406e-b40a-f71a376e275b", "sighting--41a34375-d563-4421-96ae-6bba2281ae32", "sighting--ec32ad1f-ebeb-43db-b3cd-7f3e86a4b1ae", "sighting--baa45991-5a57-4035-9847-8dc3245682d6", "sighting--4686b4fa-a2a4-4aaa-83ff-9f9d8e376857", "sighting--7cd3bb7e-a58d-44d8-b3a3-b709b2e40ebe", "sighting--1984a2a9-8c8a-42d8-aed0-d11274a6e175", "sighting--a8a53b4d-c045-44a4-a585-9ae6eace3217", "sighting--a4859f0f-0619-4319-9285-ee28948bcaa2", "sighting--91227741-fcbd-43e1-94af-bb247e49ec98", "sighting--a05df204-8364-427b-8579-d89dc726f874", "sighting--80d85921-f275-4eff-bdbb-58e155a83b07", "sighting--e261d769-4942-46ce-90fc-b946b008b1ea", "sighting--2761ea4e-e0d4-48ea-86bc-f60a1c290ece", "sighting--96442b73-79d9-4dcc-b354-d6acfa383fcb", "sighting--085dadf3-39a8-46ad-bb6d-735599ca474f", "sighting--d6f96da9-af73-41be-aa53-b44adc71e4df", "sighting--d429d088-d5a3-4082-b905-bf022652bdea", "sighting--3f09fdf2-2d25-4ad6-9931-bd07890a8ab2", "sighting--ff893d73-c111-4fe0-9b5a-dbe3e436ee8e", "sighting--b3897328-9a93-4f64-845a-97722ccd94cb", "sighting--c09e6d33-337b-4556-8340-7edcb8060de8", "sighting--e6881ef1-97b4-4360-b781-14ed2e31f9e5", "sighting--7d631c40-8905-41f9-9e95-858758a61488", "sighting--7634fd89-4934-45fc-a7c1-c50aa8abf958", "sighting--e6752d49-2464-4aac-935f-7da52f1b7be9", "sighting--d5d49d7e-5674-47f1-9b46-ee7af8e15c67", "sighting--e03a1c60-9386-4af0-96bf-013e98a0f930", "sighting--93455e1d-7a5c-4e65-8097-b561a2f296b2", "sighting--ccc2ff95-fb4e-437c-bc09-ff33a051970d", "sighting--5370807b-696e-438a-b9d7-2c25ed823954", "sighting--755ff37b-33cf-470f-8352-0a2bcf677a86", "sighting--d797878a-b30a-4eb3-940e-6b55731d6938", "sighting--feb6605c-2a22-4034-81c1-d46c79a1387e", "sighting--157b8c95-1c41-4de2-bbdf-8b2ab2dd8370", "sighting--9e58ccb3-f391-496b-bce5-886a99a08741", "sighting--d41de294-7318-4899-b6a3-e1ba116869ac", "sighting--326d50d6-333d-4bc5-bd0e-3c088784f1f3", "sighting--3752c47f-7a3f-4d93-9c02-3ddfd49c3c21", "sighting--4a17478d-bce5-4812-8a96-4fc96f078064", "sighting--ad5e973b-fc0e-42da-a22d-78f9f66b7391", "sighting--2eb9c8d4-ba99-4d57-bd8f-5bc4eca7eea3", "sighting--7def2022-6588-4c97-b64f-a890e898167e", "sighting--aecf52b0-53b7-49c6-83d4-7d4964477e52", "sighting--d5c29def-eb2b-4861-a9cc-19d33c6f7789", "sighting--12e2d47a-b9dc-468b-ab34-bca1fe4a6b39", "sighting--d630a281-13ad-4665-9345-8bc668adea53", "sighting--8638c1ab-7489-47bc-abc8-1f1d6f8b762d", "sighting--f3af1e74-0369-407e-8705-892863ca067a", "sighting--d9a7e491-2b87-4af3-9d86-f5917d4f1292", "sighting--b1deb212-696d-4cca-8a55-ad3738205c76", "sighting--3fc886b6-7a3f-4145-a7dd-75fc8be81cc3", "sighting--4936d9e6-0485-4085-a6d5-697b08ef6b1c", "sighting--3e281a48-7f2a-460c-9846-650b341844f9", "sighting--c4cb56e3-cfd5-4ae5-9c20-50105c8d2a28", "sighting--1e9e6b75-c403-4f19-8c6c-20010982f052", "sighting--77c3a0eb-1675-469c-a2bf-b90ab5047fc5", "sighting--b3391100-8353-4220-9e62-4c3ce77f059a", "sighting--b6d72cdd-d6c1-496b-9059-51522ae22702", "sighting--eb2e3c3b-4ee1-4ca1-a6dc-5b45947e819e", "sighting--2b30df3d-33e3-4132-ac0a-0870c92e38f1", "sighting--eae8c449-c762-45c9-82ca-f758738ffe28", "sighting--4de105e0-aa46-4885-9a91-0776f4a728ee", "sighting--a24c3396-5a5c-4e32-bb6b-dc4654f9b5bd", "sighting--b1a50c25-f4e7-4561-8a8d-e27198152266", "sighting--0910b39c-8f88-43f8-abba-73a00a6a972d", "sighting--daba1a9b-e913-483c-a680-62ec8b9180f2", "sighting--ef39b228-a330-4976-a62f-b997f15a5670", "sighting--aee991ef-8d75-438d-8f1f-a4993098ea3e", "sighting--1a7023bf-0f1f-4178-9dc8-4c5144d8ff55", "sighting--07c7a4d3-639b-4924-8dc1-85e52376e1ca", "sighting--320eabb8-0e16-4afe-bbc4-220c1b4640aa", "sighting--7c5e4e2b-5146-4926-9657-6c2cb7abe28b", "sighting--02a4577e-bb00-40c2-bb97-3cb19da7188a", "sighting--f2a68c9d-f822-4483-bf35-d79659fe4de6", "sighting--a6ba2a4a-dff7-4e52-88b3-ec37a0f3df70", "sighting--a007c22c-a79c-4037-891a-9a0716cad835", "sighting--b4785b46-fb49-48f1-87f8-dd20f9c190a6", "sighting--d8a095bf-e665-4eaf-9bca-4bf8a48133c2", "sighting--1bf056b4-7970-4f87-b365-088b3ef388e5", "sighting--0a294354-29ac-49ab-b485-fdac4cc6f409", "sighting--6a254664-c3b0-43fa-9a05-c92019232960", "sighting--27ee4a63-6609-4182-9284-275315e5eab4", "sighting--bddf54a5-b917-4c81-8dca-f173da752ce0", "sighting--c8b117bc-3593-4388-93ab-a716a4a756da", "sighting--6fe04da6-5c6d-400e-9e1b-8e04c3195da0", "sighting--264cc5a7-23ba-434f-aaf1-fc2835b92b0c", "sighting--47b94fd9-7f07-40e3-907d-e6a605b7709e", "sighting--def24f05-95e2-4ef6-a088-e09a2153c157", "sighting--33db708f-fab6-4f4e-aaca-84d4ee2123ab", "sighting--7a11ca29-d917-4e62-9533-2a7e204d7062", "sighting--6c2b6a70-63b8-4536-ae42-2feb04aa10b3", "sighting--562dcea2-dd46-4416-9d08-4bacfa924a76", "sighting--3c8a2f00-f0ef-4ca5-84ed-51cfc5cc02cf", "sighting--351ea204-3745-41ff-a89f-ed08009ad1e5", "sighting--af53a76e-8d74-48c6-a0a5-aa9f178cee18", "sighting--b9872838-8106-4fde-bd96-88534822c31d", "sighting--27097356-75d1-4799-9941-49b89ac43f00", "sighting--66c2075d-79b5-4a99-96c4-e16b3636fe5e", "sighting--a6e2139a-8d7d-4413-bb30-1dc0a0e3664b", "sighting--a4e5359b-e07b-48f8-bebe-4f652c7a0381", "sighting--ffc563a9-871d-4ec4-88a0-23b3af8147a2", "sighting--b26aaa13-4df1-4e93-b90b-81ccc8b0be06", "sighting--85177454-e361-44db-bb51-51b5e0852e2b", "sighting--21a05a84-520d-4941-85c0-7c5a83f26f79", "sighting--922bc52d-fae7-4905-af76-511e302df9de", "sighting--984edac1-d8b4-4153-8ed0-578da7430d85", "sighting--211d6157-1919-42e0-b516-a6d30f26a2be", "sighting--4f133016-4c21-4df5-a431-5b3e0777a043", "sighting--4eee138f-65a5-49ff-a9c6-1c688da32eae", "sighting--56cde3fd-a8a2-440f-a79c-d61baafd92b8", "sighting--fd328f76-d67e-408e-8277-776270bd08ae", "sighting--9b3aeaa8-d50f-4e6a-b503-c08113d5fb67", "sighting--0beb8381-caa0-412b-96c5-f69d9119fa67", "sighting--5bddf10d-34b3-42a4-abf3-1193feea4734", "sighting--a68ab464-8455-4263-8c59-28539c708adc", "sighting--ef0b5806-98d2-42ac-a26c-8d870725cc67", "sighting--1c8fc7f0-8560-477c-b007-53f4f8adb1b7", "sighting--42d5e7f2-6158-4fdf-bb4a-ef7fd899ad90", "sighting--894a65ba-14ec-48e2-a32e-24de4a3f3d72", "sighting--78615ef6-d7fe-4e76-8184-1f1342a37faf", "sighting--0443a090-06ac-416e-8a0e-9b845ed29d32", "sighting--005fc90e-8ff7-47cf-ac2f-0a13320ccec7", "sighting--95485812-41bc-45e7-9e54-2ba75530a6c9", "sighting--efb41c04-406b-4e0b-be71-03af059e83c3", "sighting--22130123-f8cb-41e7-8a96-5f99089d7818", "sighting--605c67af-9a6a-4b4e-9d95-feac0ceb4e67", "sighting--f43783d3-a6c4-4468-a552-17d60d7aa0fc", "sighting--8b185f64-3a95-4dd9-be5a-d7bac7610d71", "sighting--7622f11c-1115-45fc-bcb6-57b732ffa322", "sighting--665b9f03-d799-4250-9435-9dd950f55f6b", "sighting--ffca41ec-a788-443d-8044-a36390733a9f", "sighting--0c20e195-1d0d-4116-b635-ebcf979af937", "sighting--e95bf3bc-ab8c-454d-bcc2-04c4de4170e3", "sighting--7a4ded99-77f3-420c-ad9d-4a010643d467", "sighting--e5364fa1-1801-45e3-b8ce-ea5bed1c7020", "sighting--65c4e1b8-dc7b-46b1-b106-4edebedeef22", "sighting--5b1d6b44-b9b1-4faa-bcb7-4c3afd4ce2f7", "sighting--583b12a2-0709-44d4-ab9a-e114ddef2f0a", "sighting--af1990c7-a6f4-40c7-a55c-ee31f5544bcd", "sighting--31865f9a-bdcd-4dd5-98d9-abe07bfea934", "sighting--cee464bb-59a9-433e-ac91-8b845b343f7d", "sighting--86134273-fe8b-4830-9847-84144c7b51d5", "sighting--2023b9e7-f8e2-43e1-a360-5bb3133cf4d9", "sighting--8e964f49-8348-40d1-bcf0-cfaff7a4e2ca", "sighting--ea4f0b93-e4ea-47c5-8799-9e462a22db36", "sighting--f341df83-25d2-4e23-bfc5-68e2901817e4", "sighting--9ba570a7-e6d8-4dda-b1b0-a4b98fc1c120", "sighting--7816c4b8-327c-432c-9029-84cb88402d15", "sighting--aebb488d-42fe-4555-9a44-0d358ef6fb05", "sighting--ef9889da-2d81-4372-a822-4eb7a7eff72d", "sighting--be388f64-f814-4722-b0e3-c3cb063e5787", "sighting--0524bbc8-1c14-4bb9-a3a0-2affd0ab35fa", "sighting--177fa651-656a-4848-86d5-352cb80cb083", "sighting--cff003c3-9bfa-426d-a69c-0606ae58e06e", "sighting--b45b3686-f948-40c2-8a7f-008d78fdc05e", "sighting--ac3ece07-2341-4221-aff8-c37d61e9421d", "sighting--b8f40a1e-a8aa-4f2b-8f51-6d4629ff6bc6", "sighting--0fa427af-28c5-4f27-add4-0b6669797a1c", "sighting--9d0531b7-e922-4c95-a25e-8390f1a03d8b", "sighting--93c36f34-8f24-46f5-8110-eadcf7d07daf", "sighting--ca1f8d81-94fd-4a14-999e-9589fa556d2b", "sighting--8f51bcbd-8360-488d-89fa-fbf7dcd8277d", "sighting--312ce690-1c73-4af2-85d8-f24fca58cfec", "sighting--4e1ab899-c232-4654-b430-74f1fb7da6bb", "sighting--81932a69-ee78-47fc-bce1-cb21b7bf7cdb", "sighting--50e0f08c-b857-4920-975a-9b6716fd4e7b", "sighting--4903d62c-5c22-4846-9ce6-50ed82def183", "sighting--91a76c2d-2b74-478c-bd74-8955663f923c", "sighting--d8eb5df0-f85a-4df2-8758-7a420aab43fc", "sighting--8e12d7c8-9d48-471c-96d9-4a1dd384789e", "sighting--fd191e20-c88b-4e0a-a198-01977815d076", "sighting--086c7a5d-813b-4661-8a2c-6cefe47c4a62", "sighting--edadec45-b87a-4f54-9bdb-bab72368024c", "sighting--7f1dc971-b2f0-4aa8-a47f-4e7b396b20cf", "sighting--eeb84532-58f7-4963-89b0-fc5659d759f2", "sighting--4740340d-ecb7-4d9e-b523-49e4e671667f", "sighting--c5654887-b0ac-410a-9b15-f106447352b1", "sighting--25f8a17b-316d-4b10-8430-86525d908ebf", "sighting--b0a6c7e0-e073-43ae-b25a-2a33f9d32869", "sighting--ef4d8088-0333-4d7f-8863-8bfd790db5ce", "sighting--484308b3-730d-4a44-b743-23b41d5e6abc", "sighting--b82e82f6-cebd-4ab3-a0a0-cfde039a5491", "sighting--4529a05e-2854-474f-aa82-2931fe4469d9", "sighting--32119b98-ff53-4d49-91d4-b78a09b97068", "sighting--b2398e01-dfc2-49e9-8dcd-9c04bc7099ea", "sighting--8e966a34-dac0-4aab-9904-16094c0050bc", "sighting--d0419619-51b7-4da1-a608-6c9938ddd0da", "sighting--688988c8-2ce4-4c6e-aa51-c59ec1032c7c", "sighting--93f2adbf-5ac9-49df-b5a5-787770415675", "sighting--14840b9a-b5bf-4c28-834e-829ae3dc18f0", "sighting--27df99d3-ea93-4e06-a639-06a34b4961b3", "sighting--6c496ff3-4736-4e82-8ae2-d5f3f4c841d2", "sighting--7d27cadd-f433-49c9-805f-2470542dd7c7", "sighting--6e583889-1bd4-4050-8e0d-c0770c55e46f", "sighting--50fbf38c-fc04-4fe6-b8e2-a8587fe72367", "sighting--217f0b02-b1f1-450e-8e30-1a534171632b", "sighting--92d6240f-d2db-44f8-bbbf-cda7c6a38ced", "sighting--b72ad5db-d4a9-48ec-899b-472699d4064c", "sighting--08011a2f-714a-40bf-8c2f-ffe38a7dcc57", "sighting--7fba4e50-76b5-4eda-aeb2-cda311435f38", "sighting--cd73ac10-eaca-47b6-96ae-b608c0a7a10d", "sighting--66148eed-19d8-4f5a-8e7a-62232e0778d4", "sighting--a7057ba6-75f1-445d-b876-ff7ff2bf5742", "sighting--98006169-8860-41bd-bb08-c070e69939e7", "sighting--f6343552-1856-43de-ad37-a6af9ee0d9a2", "sighting--f0db7301-ddbe-4c2e-9aa2-48c6b635b95c", "sighting--25ab6d55-dfb9-4abd-98d6-b0b3e6caeb55", "sighting--750366d9-98a1-43e9-a4cc-dfd884e9096a", "sighting--542fe10b-6cec-42e6-b5ec-95cbd79651b0", "sighting--5e93b81b-4ab8-459e-89a4-a7b25841b9fe", "sighting--4cb1bc0e-6437-4452-8979-97219bffc206", "sighting--26a00bd3-5cf7-4785-ad8f-a309cd774330", "sighting--4a2025b8-9cb3-495d-a8e9-4a11360dc5b2", "sighting--795af2f1-4b59-4f32-ab54-5a0032362155", "sighting--11b1b99f-3942-4201-9a2d-c56b3e092a07", "sighting--5a75e4de-dd6c-45b8-b6ac-a1c78bb79a74", "sighting--86456abe-a1ac-43b4-a992-08c8019be36b", "sighting--1349640d-5334-4133-8ff6-607c4f6e4f68", "sighting--0dab8a0a-fa03-4065-892f-074e8173bf04", "sighting--c4f9aec6-3a74-4e3e-a877-3b5e996651f8", "sighting--8b75fb92-6485-440a-825c-6f2bb8673dce", "sighting--f587cd8c-5802-4e14-b8af-695dc0d575a9", "sighting--95ca5265-dc72-4890-b7de-6521153df776", "sighting--9f8340ea-d0d1-4afd-80f1-0e8a2305d8e1", "sighting--c694b320-eecd-480a-a16c-68187be76cae", "sighting--eca784aa-a89b-4888-b5d1-887a1baf83bf", "sighting--a311e5ec-a872-4808-a304-6db20eb435b7", "sighting--f6f4809b-4252-4bd1-b8a3-f0787ac3e0ae", "sighting--0363247d-ff1b-4029-9636-8130054d7e92", "sighting--d84347bf-a9ff-46e0-8dc3-9d00292b9707", "sighting--99d0f7b7-793b-4514-b044-856966ba6053", "sighting--a4c093b1-6bd4-4846-ab87-b2d58c2dad6a", "sighting--0c7902c6-e299-4fc7-a103-dd2db7e5ef9e", "sighting--e2787d39-f9e4-43b5-9a2f-d3fc7972f47c", "sighting--1fc93454-c0f1-4253-8058-f7bcec109f3d", "sighting--5dc4e692-dd31-40e2-ae95-a04dc291c2cf", "sighting--f0b0d28d-cd25-4eb6-be5e-5e59010a0467", "sighting--04c861b9-497e-4015-a5b6-4c635f313954", "sighting--14b790c9-0e7a-4ab3-b11a-d1c4a8cdbf06", "sighting--ab4529d6-6f1f-4794-b776-c6389c1bd031", "sighting--279dc814-78f0-4264-bb8a-a7f995008bea", "sighting--66f22558-06ab-478d-9039-8ea7a3e3e224", "sighting--5d23a602-8b45-4e4e-98c0-8baa665b02fc", "sighting--e5a2ff63-37ae-4caf-94d4-eddd2c7a6d56", "sighting--6ac20b4e-c28c-41cd-bfe6-98c0741fcc06", "sighting--a7e12121-f429-471f-ba01-ef93c9bd3df0", "sighting--91582d0a-73a8-4d1e-bea2-4706a67a7200", "sighting--6b45096d-da1f-4a01-ab98-8a33ce796b25", "sighting--1283c9ee-3fcb-464c-987d-85e876a3dfe4", "sighting--281098c5-6251-4b3d-85e5-61fa613f8f1a", "sighting--6197e352-a1d8-41a2-865b-8fc966d48b82", "sighting--7ee09ec9-cb56-4324-8600-8b9e6af90d9f", "sighting--4d6ba5e1-0ae1-4dd0-b247-37f354308801", "sighting--93d9dcc9-ec3f-45e4-a695-b755b0e71171", "sighting--5eda4cf2-2641-4027-a5b1-b6b258b6be37", "sighting--e8fe6e2e-ea84-4168-a1db-c6670075217e", "sighting--48c0a2e0-b79e-47fb-80ea-91e4337b9381", "sighting--3e459447-8f51-453a-88f4-280c507dee2d", "sighting--04eb4869-ef12-40ef-a8bc-c462d50aaec7", "sighting--9cb0e97f-1445-4a91-bbf8-6a8d32f0d05f", "sighting--395b8011-6d11-4d01-af41-805d4a1f07d1", "sighting--038006b8-f157-4536-bfc2-5d705a75bc17", "sighting--da2801bb-fb05-4a77-a946-ee1712da6335", "sighting--9d20cb05-49a4-4afd-b189-c657947f1b52", "sighting--b438a072-88d1-4f06-b1e1-c6c86112caa9", "sighting--7eefc878-aab6-4d65-a815-13064d9f2bb0", "sighting--a84161cb-dd53-43c0-a6d1-91613ee74ec8", "sighting--e4e15aee-07a5-4a68-aa78-e070f7f09987", "sighting--584f48fb-50fd-4d68-bca7-8a893967009b", "sighting--6077a20b-a124-4b20-8e7e-a60bcc7fe30e", "sighting--0722d86a-5dc0-49f4-b986-36614b5836ff", "sighting--4ea7e8b5-fe22-4936-8854-42283b2639d6", "sighting--2fa90fcc-fba3-4b0e-ae43-d9e5b96598e6", "sighting--42a16cdd-435f-443f-a231-cf4f4a933672", "sighting--eb9ecdae-219f-43f9-89e1-be6163ac61a7", "sighting--092eea22-9b51-42d7-9666-7b7730a63348", "sighting--e6d2e44c-5821-489f-9060-4e595fc20f7b", "sighting--a7fbc215-1886-4f07-b710-0315ea895869", "sighting--d3a1c43f-31e6-4e32-84c7-595703284e84", "sighting--21cdb287-83cf-4e2a-a1d9-834cbc2c057a", "sighting--671c8810-8753-43eb-b3f7-6a1d6666de32", "sighting--0df56fee-9c77-414d-a6ec-a99e86517819", "sighting--6607384d-fd9e-47a8-92bc-1fb316cf9fbc", "sighting--a6740dab-513b-468b-940c-f19874d61097", "sighting--5185fce7-8e35-4afe-8302-bf101a3594b0", "sighting--4bb60f8a-d7e9-40dd-83e2-db767f8c57cb", "sighting--a903ff9d-02f4-4db8-8a7c-8306834f26ce", "sighting--6a50c7a4-35bc-449c-b8bb-67bf37a6a8d4", "sighting--4ac7b681-c912-4503-8e49-00d57833be6d", "sighting--46a4cdc4-a73f-4761-8f58-952a37675e76", "sighting--a9a1ed41-3227-4529-87cd-038e616b3438", "sighting--67ba362e-c758-4d3f-a292-31c25ce76fd5", "sighting--d840bd65-397d-46ec-bcfc-3cb727406f9e", "sighting--82a03b1f-b5dc-40bd-8967-c5d006384eee", "sighting--d9cc1e9c-4dce-4731-b109-800724641643", "sighting--c893a529-0bdb-41da-8fb7-5be7e027e4c0", "sighting--eea1116e-2317-4d81-88c5-d2e282a39f36", "sighting--e55033c5-e171-4a85-8e6e-1d4dddc67139", "sighting--8700135f-fb52-4d19-b1c6-73293a20debf", "sighting--b619f828-7170-41be-b980-7662b03fbab7", "sighting--8b5800fb-857c-4957-ac88-35163655dc03", "sighting--8c331fb7-d2bb-4f0e-b368-7c3cf1b0155d", "sighting--114e8e49-7606-47c7-8f1f-9e52860c4790", "sighting--7f3bdf55-b154-46eb-a2c2-dfe3c6447ddd", "sighting--e68c3fc0-6daa-4805-8ebd-631f0f5108f3", "sighting--9d1fe176-c1a8-4f70-b962-1c0481d0e40b", "sighting--333cbb7e-c4a4-4ff9-aa63-50d53c2512c5", "sighting--d5fc83ad-a2ef-4cdb-86f4-740e7c90a12d", "sighting--0cb9ba18-2da9-40f2-833d-28f673d5125a", "sighting--c697f304-c288-4688-98c3-0395eb65d789", "sighting--d5739bc2-d751-46f4-af16-f91a098c992e", "sighting--544545f3-ff30-459f-97cd-502b8c065d2c", "sighting--0d3953ac-6170-4bdc-a59b-d28980cfcd74", "sighting--3632b3d9-4610-4f0e-8548-afc6d0690c87", "sighting--75b25dcd-15b2-41ec-bc04-a14375bae9ab", "sighting--bab9297c-afce-4b18-8c7c-a6dbe2c572bd", "sighting--22225ba2-f58b-4ffd-a22c-2749e0083b80", "sighting--fa2a0478-6504-4ef1-9bd1-62cb04980838", "sighting--b8f81b36-cc7a-4450-877e-4b0526f6ab93", "sighting--d2ccf37d-dc1c-4792-81f8-b1d66b1144a7", "sighting--79692f61-6717-41a3-a0fe-bbb4f3b7e3ce", "sighting--97e4bdb1-b95a-44a8-9b04-91bb83fb5e39", "sighting--b3e88b0c-72af-448d-9113-2677a1be52bb", "sighting--4596fa8b-86b3-4205-bbf5-c46ad20d6bc5", "sighting--2fbb3598-7ff3-44df-ad52-2e5e746c7cbd", "sighting--79e19981-5e43-4c1d-af8d-2958c5c75fb6", "sighting--9c58d4e8-6cd7-4eb2-87fb-bfa65c287f20", "sighting--5cad10d2-b31e-469c-ab3d-e11ed8cb611d", "sighting--e946de59-f65e-47a2-984b-275a0dbaf5de", "sighting--90f256b3-2191-4f08-9d46-05f223d3eafa", "sighting--a5716a6b-c5d0-47c3-aec2-4644549a8acd", "sighting--7ca89fa4-0d6c-4fdb-b28c-604acfbe5429", "sighting--297a66ca-ca24-421f-a5d4-8cb3c5368f4d", "sighting--8dc5d3a6-2d64-4469-a4de-7feef648a6d2", "sighting--5c9d75dc-62d4-4f01-8b72-9522bb9c871b", "sighting--d1a533a7-1eb0-4d1e-ba76-b7ba01d8821c", "sighting--4521d8d6-b610-4a7c-a685-b83c9ed9641e", "sighting--fbc2b0d9-4152-4d25-89e0-aa65b9dcd58c", "sighting--d41e42d3-6635-43e5-b389-f37e6a7f41ca", "sighting--9441a791-6888-421b-acb4-27eab7268761", "sighting--4db013e3-b795-45ef-84e2-2f1ea7c64aec", "sighting--1b6c5cf5-64e7-4b27-83ea-1f8045d4a8c5", "sighting--5d7de6c3-d2e9-43d8-bbe6-c2d8f356b094", "sighting--dfa9dfb6-2085-4837-a24e-4f4a1906fffb", "sighting--c9400bef-e04f-4379-a8de-930977e3b21c", "sighting--c6f7fa13-cb5e-443a-9982-99f8288ea68a", "sighting--e9ebb021-aef2-4c6a-b8c2-56e7d3982cb0", "sighting--5b8ea6fb-3979-4781-a597-2ac411427543", "sighting--5a416274-03e9-49fc-9719-b70bc1842102", "sighting--0cca6e83-0c6b-4fee-a3ca-2b74e259af69", "sighting--db6c7a4d-b332-4683-9c9b-18f708d7fb96", "sighting--427d441c-e3fe-4a0f-8d72-076db63b82cb", "sighting--17df1c31-e9c2-472a-b027-f0fb66155f7e", "sighting--fe23d8e2-b3e9-4f4c-80a7-8d75d6a6a7f8", "sighting--658bee5a-7e76-4f5e-8465-933cd2d8ba15", "sighting--2738e707-0926-4620-9f4f-b3dd468ec1e8", "sighting--b85045fd-437d-4789-8089-c0ea0a41222a", "sighting--b8ce90f4-7025-4f54-85a5-4e27bb3edba4", "sighting--1e27e97a-9559-41a8-a44f-c525969030ee", "sighting--c7a3c50a-41ed-4cbc-9e09-fcbf9e7fb730", "sighting--c1646ff6-1104-4d28-af9d-b1ba0b5363fa", "sighting--7de173d3-1331-426e-bd71-ed698e0c9450", "sighting--ee7ffc4e-d0e1-42b6-8085-45ac182ff81f", "sighting--0170f32d-86cf-4c88-b3c1-a561ae2f8667", "sighting--f8599897-047d-4d11-a8de-501dab719c1e", "sighting--113e277f-81ed-4806-8a70-14264d0800bb", "sighting--327f5b10-523a-4bf0-8474-8f40b067bd6c", "sighting--d1ce3c82-fef8-44da-98ee-637fe74112a0", "sighting--ee35c001-11ba-4949-856c-de2b817ca70f", "sighting--e8268765-9064-43e0-94a8-586b25c7a948", "sighting--a03339cf-2364-4b38-afc0-1a2ed0c63c98", "sighting--349c9705-88a1-44c6-826a-c44419e633c5", "sighting--548dde4a-3869-41fc-a9aa-4c3be6513a75", "sighting--74f63017-0fc2-439a-b147-c17a1fa09dd5", "sighting--94836508-fe5d-4565-825b-7528b48c0712", "sighting--72803811-a064-43b8-9841-6d634ea4cd63", "sighting--a50860c1-98be-4af1-ae9c-0f772e0a325b", "sighting--9a237654-15d2-41dd-8883-6ef5d705bfdc", "sighting--bbedeb8d-e32f-42ed-a934-f47281d0c980", "sighting--9d43fec5-201f-4a6c-ad68-1d6178d40de4", "sighting--5ca7acab-1ec4-4454-b7d6-62cfcd7e0996", "sighting--e08f3b62-91e1-4245-a996-ba5ce863c668", "sighting--62448a7f-54c7-4036-82a7-c089dc4ba1b0", "sighting--6741507c-5dbe-45bf-a500-01a18a6108b1", "sighting--31275c96-11b8-4f4c-af69-92e301c69f50", "sighting--319a03f3-5ebf-4d1f-a71f-6238ccde3977", "sighting--b532241b-b500-463a-b961-1c618374d45d", "sighting--e6b773ca-c07f-4fd1-95fe-9e68ca6ad7e3", "sighting--cf27b907-065f-44c2-b321-4fcdf00f0c3e", "sighting--bc333c55-a318-46ca-a400-e9ab00a96295", "sighting--d0910282-3fd4-457a-a641-66bf7d57d5f9", "sighting--5613249e-bc03-4680-b515-a34a594b5886", "sighting--59f23048-360a-46ce-af86-e98a619eb680", "sighting--929a2e36-687c-48a7-9847-18baefe8fecf", "sighting--94cd8c59-c02d-4cd6-8d2c-a74df7de056f", "sighting--e9c7f53c-fa96-4f11-93fa-d5c4715cb3a2", "sighting--3f9de8ca-632b-4f78-b997-1fd6aa069964", "sighting--67e33bdb-2f3b-43ed-a83f-9d1191c392d3", "sighting--c58c55c9-5090-4f4b-85e9-09c48cc9992a", "sighting--c94c9e01-8b9b-4bc4-9532-722b9556f768", "sighting--d915263f-0976-4ee9-b607-17d354e235cf", "sighting--1f47675f-66b4-4445-b52e-d26fc290a928", "sighting--654a0388-df31-48e7-b970-f9f6e2960dc3", "sighting--8856c5e6-f1d2-4d3c-92f9-6b3d8958e7ca"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-20T11:00:01.090Z", "modified": "2026-08-20T11:00:01.090Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}